Vendor breach breaches

153 breaches

WWarpWarp discloses breach exposing AI agent logs, user telemetry dataUnverifiedOct 27VKVendor KeyVendor Key Leak Puts Data of 238,000 Denver Health Plan Members at RiskUnverifiedOct 27UHUK Housing Ombudsman ServiceUK Housing Ombudsman Service investigates 'security incident'UnverifiedOct 13DSDaiwa SecuritiesDaiwa Securities says info on 110,000 clients may have been leaked in vendor incidentFinanceUnverifiedOct 5FEFrontline EducationVendor breach exposed names, Social Security numbers, government IDs, health records, insurance details and dates of birth. Reported to the California AG.3.1M affectedEducationUSOct 2VeradigmVendor breach exposed names, addresses, Social Security numbers, emails and phone numbers.HealthcareUSSep 8Catalyst BrandsVendor breach exposed names, Social Security numbers, dates of birth, government IDs, financial details, credentials and tokens, emails, employment records, payment cards and addresses. Reported to the California AG.187K affectedRetailUSSep 4DropboxLenovo ID verification flaw let attacker access about 5,000 Dropbox accounts5,000 affectedTechUSUnverifiedSep 2BSBoston ScientificMaterial cybersecurity incident reported to the SEC (8-K Item 1.05)USAug 26Hospital for Sick ChildrenSickKids careers system flaw exposes employee and job applicant dataHealthcareCAAug 21Pokemon CenterVendor breach exposed names, addresses, phone numbers and emails.RetailUSUnverifiedAug 17TrezorVendor breach exposed names, addresses, emails and phone numbers.81K affectedCryptoCZAug 13ValveVendor breach exposed names, addresses, phone numbers and emails.GamingUSUnverifiedAug 10AmgenVendor breach exposed health records, internal documents, Social Security numbers, government IDs, insurance details, payment cards, financial details, dates of birth, addresses and names. Reported to the California AG.40K affectedHealthcareUSJul 31HHealthStreamCybersecurity incident disclosed to the SEC (8-K Item 8.01)1,631 affectedHealthcareUSJul 29Ernst & YoungEY notifies clients of tax data theft from third-party support ticket system11K affectedFinanceUSJul 14LidlVendor breach exposed names, phone numbers, emails and dates of birth.RetailDEUnverifiedJul 13NavientVendor breach exposed names, dates of birth, addresses and Social Security numbers. Reported to the SEC 8-K.FinanceUSJul 2Texas Parks and Wildlife DepartmentTexas Parks and Wildlife vendor breach exposes 3,087,721 license holders3.1M affectedGovernmentUSJun 18PPopularCybersecurity incident disclosed to the SEC (8-K Item 8.01)USJun 9University of OxfordOxford CareerConnect platform breach at vendor Group GTI exposes student loginsEducationGBJun 8SoFi SecuritiesSoFi Hong Kong warns customers of breach at third-party vendor databaseFinanceHKUnverifiedJun 8OFOrrstown Financial ServicesCybersecurity incident disclosed to the SEC (8-K Item 8.01)FinanceUSMay 29Oncology InstituteVendor breach exposed health records and names. Reported to the SEC 8-K.HealthcareUSMay 22ZaraVendor breach exposed emails, location data, financial details and messages.197K accountsRetailESUnverifiedMay 8NVIDIA GeForce NOWArmenian GeForce NOW partner breached, exposing user contact detailsGamingAMUnverifiedMay 8VimeoVendor breach exposed emails and names.119K accountsMediaUSApr 27Rockstar GamesShinyHunters leaks Rockstar Games analytics data stolen via AnodotGamingUSUnverifiedApr 13CrunchyrollVendor breach exposed emails, names, IP addresses, location data, messages and payment cards.1.2M accountsMediaUSUnverifiedMar 23HackerOneVendor breach exposed names, Social Security numbers, addresses, phone numbers, dates of birth and emails. Reported to the Indiana AG.287 affectedTechUSMar 18Divine SkinsVendor breach exposed emails and financial details.106K accountsTechMar 15NYC Health + HospitalsVendor breach exposed health records, insurance details, financial details, Social Security numbers, government IDs, biometric data, location data and names. Reported to the HHS archive.59K affectedHealthcareUSMar 10EricssonVendor breach exposed names, addresses, Social Security numbers, government IDs, financial details, health records, dates of birth and payment cards. Reported to the California AG.16K affectedTelecomUSMar 9HungerRushHacker emails HungerRush restaurant patrons after marketing platform breachTechUSUnverifiedMar 4ManoManoVendor breach exposed names, emails, phone numbers and messages.38M affectedRetailFRUnverifiedFeb 26Canada GooseVendor breach exposed emails, IP addresses, names, payment cards, phone numbers, addresses and financial details.582K accountsTechUnverifiedFeb 17FlickrVendor breach exposed names, emails, IP addresses and location data.MediaUSUnverifiedFeb 6Korean Air Catering & Duty-FreeHack of catering supplier KC&D exposes Korean Air employee dataTransportKRUnverifiedDec 29, 2025NissanVendor breach exposed names, addresses, phone numbers and emails.21K affectedManufacturingJPUnverifiedDec 22, 2025PornhubHackers extort Pornhub over Premium members' viewing data from MixpanelMediaCAUnverifiedDec 12, 2025PEPhoenix Education PartnersCybersecurity incident disclosed to the SEC (8-K Item 8.01)EducationUSDec 2, 2025OpenAIMixpanel analytics vendor breach exposed limited data on OpenAI API usersAIUSUnverifiedNov 26, 2025IberiaVendor breach exposed names and emails.TransportESUnverifiedNov 23, 2025VultrVendor breach exposed emails, location data, IP addresses and names.188K accountsTechNov 20, 2025VITAS Hospice ServicesCompromised vendor account exposes 319,177 VITAS hospice patients319K affectedHealthcareUSNov 19, 2025MANGOVendor breach exposed names, emails, phone numbers and addresses.RetailESUnverifiedOct 14, 2025BTBK TechnologiesCybersecurity incident disclosed to the SEC (8-K Item 8.01)USOct 6, 2025DiscordVendor breach exposed government IDs, IP addresses, names, emails, messages, payment cards, dates of birth and addresses. Reported to the California AG.75K affectedTechUSOct 3, 2025Renault UKRenault and Dacia UK customer data taken from third-party providerManufacturingGBUnverifiedOct 2, 2025HarrodsThird-party breach exposes 430,000 Harrods e-commerce customer records430K affectedRetailGBUnverifiedSep 26, 2025