Skip to content
Breaches.

Vendor breach breaches

148 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Genworth FinancialVendor MOVEit breach exposes data of 2.5 to 2.7 million life insurance customersJun 22, 20233 years agoVendor breach2.5M
CalPERSVendor MOVEit breach exposes data of about 770,000 pension membersJun 22, 20233 years agoVendor breach770K
British AirwaysStaff payroll data including bank details taken in Zellis MOVEit breachJun 5, 20233 years agoVendor breachUnverifiedUnknown
Boots UKBoots staff data stolen through payroll provider Zellis's MOVEit serverJun 5, 20233 years agoVendor breachUnverifiedUnknown
BBC Pension SchemeStaff data including national insurance numbers taken via Zellis MOVEit breachJun 5, 20233 years agoVendor breachUnverifiedUnknown
Aer LingusAer Lingus staff data exposed in MOVEit payroll breachJun 5, 20233 years agoVendor breachUnverifiedUnknown
Gain Capital UKUK ICO reprimand for security failingsMar 10, 20233 years agoVendor breachUnknown
First Merchants BankVendor MOVEit breach exposes online banking customers' dataMar 9, 20233 years agoVendor breach54
LBBMar 5, 20233 years agoVendor breachUnverified39Kacct
Chartered Institute for Securities & InvestmentUK ICO reprimand for security failingsFeb 21, 20233 years agoVendor breachUnknown
GeminiDec 16, 20223 years agoVendor breachUnverified5.3Macct
Morgan StanleySEC fines Morgan Stanley $35M over lost drives holding data of 15M customersSep 20, 20224 years agoVendor breach15M
DoorDashHackers linked to Twilio breach use vendor credentials to access DoorDash dataAug 25, 20224 years agoVendor breachUnverified367Kacct
SignalTwilio breach exposes phone numbers and SMS codes of about 1,900 Signal usersAug 15, 20224 years agoVendor breachUnverified1,900
Direct ClothingUK ICO reprimand for security failingsJul 18, 20224 years agoVendor breachUnknown
OktaLapsus$ accesses Okta support engineer's machine at vendor SitelMar 22, 20224 years agoVendor breachUnknown
AudiJul 23, 20215 years agoVendor breachUnverified2.7Macct
Air IndiaAttack on passenger system provider SITA exposes 4.5 million Air India customersMay 21, 20215 years agoVendor breachUnverified4.5M
DriveSureMay 10, 20215 years agoVendor breachUnverified3.7Macct
SonicbidsJun 16, 20206 years agoVendor breach5,503
VianetApr 22, 20206 years agoVendor breachUnverified94Kacct
LabCorpAMCA collection agency breach affects 7.7 million LabCorp consumersJun 4, 20197 years agoVendor breach7.7M
Quest DiagnosticsBilling vendor AMCA breach exposes data of 11.9 million Quest patientsJun 3, 20197 years agoVendor breach12M
Ascension Data & AnalyticsVendor's exposed server leaked millions of mortgage documents; FTC orderJan 23, 20197 years agoVendor breachUnverifiedUnknown
BannerBitJan 8, 20197 years agoVendor breachUnverified213Kacct
KnownCircleNov 17, 20187 years agoVendor breachUnverified2Macct
FacebookData of up to 87 million Facebook users improperly shared with Cambridge AnalyticaMar 17, 20188 years agoVendor breach87M
Community Health Plan of WashingtonVendor's unsecured FTP server exposes data of 381,504 health plan membersDec 21, 20169 years agoVendor breach382K
GeekedInNov 17, 20169 years agoVendor breachUnverified1.1Macct
Radiology Regional CenterBoxes of 483,063 patient records fell off a truck on the way to incinerationJan 4, 201610 years agoVendor breach484K
ExperianExperian server breach exposes 15 million T-Mobile credit applicantsOct 1, 201510 years agoVendor breach15M
Court VenturesExperian unit's data resold to ID theft service run by Vietnamese fraudsterOct 20, 201312 years agoVendor breachUnverifiedUnknown
Zurich Insurance UKUnencrypted backup tape with data of 46,000 policyholders lost in South AfricaAug 24, 201016 years agoVendor breach46K
US National Archives and Records AdministrationFailed hard drive with 76 million veterans' records returned to vendorOct 2, 200916 years agoVendor breachUnverified76M
National Guard BureauContractor laptop stolen with data of 131,000 National Guard soldiersAug 13, 200917 years agoVendor breachUnverified131K
GE MoneyMissing Iron Mountain tape held data of J.C. Penney and other store card holdersJan 17, 200818 years agoVendor breachUnverified150K
Wisconsin Department of Health and Family ServicesVendor EDS printed SSNs on 260,000 Medicaid brochuresJan 8, 200818 years agoVendor breachUnverified260K
GapStolen vendor laptop held data of 800,000 Gap job applicantsSep 28, 200719 years agoVendor breachUnverified800K
CalPERSElection brochures printed SSNs of 445,000 California retireesAug 22, 200719 years agoVendor breachUnverified445K
IBMVendor loses tapes with SSNs of IBM employees, mostly formerMay 15, 200719 years agoVendor breachUnverifiedUnknown
Neiman MarcusPension consultant's stolen computer held data of 160,000 employeesApr 25, 200719 years agoVendor breachUnverified160K
Georgia Department of Community HealthVendor loses disk with 2.9 million Medicaid and PeachCare members' dataApr 10, 200719 years agoVendor breachUnverified2.9M
AnthemTapes with names and SSNs of 196,000 members stolen from vendorJan 26, 200719 years agoVendor breachUnverified196K
Wisconsin Department of RevenueSSNs printed on tax booklets mailed to 171,000 Wisconsin taxpayersJan 1, 200719 years agoVendor breachUnverified171K
Concentra Preferred SystemsStolen backup tapes expose Aetna and other health plan claim dataDec 12, 200619 years agoVendor breachUnverified130K
Sisters of St. Francis Health ServicesBilling contractor misplaced CDs with SSNs of 266,200 hospital patients and staffOct 23, 200619 years agoVendor breachUnverified266K
Hotels.comLaptop stolen from auditor's car held card data of 243,000 Hotels.com customersJun 1, 200620 years agoVendor breachUnverified243K
Texas Guaranteed Student LoanSubcontractor loses equipment holding 1.7 million student borrowers' SSNsMay 30, 200620 years agoVendor breachUnverified1.7M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.