Breaches disclosed in 2025

2,985 breaches

SESteel EncountersHacking exposed names and health records. Reported to the HHS OCR.Hacking959 affectedHealthcareUSDec 31, 2025SHStandards Home HealthHacking exposed names, health records, Social Security numbers, government IDs, insurance details, payment cards, financial details, dates of birth and addresses. Reported to the HHS OCR.Hacking6,847 affectedHealthcareUSDec 31, 2025POPines of Sarasota HealthcareHacking exposed names and health records. Reported to the HHS OCR.Hacking1,258 affectedHealthcareUSDec 31, 2025CDCyrus D. Mehta & PartnersBreach notice filed with the Indiana AG, details not stated.8,845 affectedUSDec 31, 2025CConnorBreach notice filed with the Indiana AG, details not stated.USDec 31, 2025CSCarter & ShandsBreach notice filed with the Indiana AG, details not stated.479 affectedUSDec 31, 2025BBDMPABreach notice filed with the Indiana AG, details not stated.6,205 affectedUSDec 31, 2025AEAndover Eye AssociatesHacking exposed names and health records. Reported to the HHS OCR.Hacking1,638 affectedHealthcareUSDec 31, 2025ASAbsentee Shawnee Tribal Health AuthorityHacking exposed names and health records. Reported to the HHS archive.Hacking1,112 affectedHealthcareUSDec 31, 2025SBStark BancsharesBreach notice filed with the Indiana AG, details not stated.391 affectedFinanceUSDec 30, 2025SASSL and ACL and their current and former affiliatesExposed Social Security numbers, health records, insurance details, payment cards and financial details. Reported to the California AG.57K affectedInsuranceUSDec 30, 2025SSasserathBreach notice filed with the Vermont AG, details not stated.USDec 30, 2025PAPratt & AssociatesBreach notice filed with the Indiana AG, details not stated.2,641 affectedUSDec 30, 2025PPPlanned Parenthood Northern CaliforniaBreach notice filed with the California AG, details not stated.USDec 30, 2025MSMid-South Pulmonary & Sleep SpecialistsHacking exposed names and health records. Reported to the HHS OCR.Hacking70K affectedHealthcareUSDec 30, 2025MAMalicious AI sidebar Chrome extensionsTwo Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chatsSupply chainTechUnverifiedDec 30, 2025KIKomar IndustriesBreach notice filed with the Indiana AG, details not stated.1,078 affectedManufacturingUSDec 30, 2025GCGold Coast Health PlanHacking exposed names and health records. Reported to the HHS archive.Hacking540 affectedInsuranceUSDec 30, 2025FIForesight InsuranceBreach notice filed with the Indiana AG, details not stated.641 affectedInsuranceUSDec 30, 2025EEakasBreach notice filed with the Indiana AG, details not stated.1,364 affectedUSDec 30, 2025CBChesapeake Bay Maritime MuseumBreach notice filed with the Indiana AG, details not stated.5,181 affectedUSDec 30, 2025C2Cabinets 2000Breach notice filed with the California AG, details not stated.USDec 30, 2025ACAppalachian Community Federal Credit UnionBreach notice filed with the Indiana AG, details not stated.31K affectedFinanceUSDec 30, 2025ACAdvantage Capital HoldingsHacking exposed names and health records. Reported to the HHS OCR.Hacking26K affectedInsuranceUSDec 30, 2025ACAbri Credit UnionRansomware, data exposed not stated. Reported to the Indiana AG.Ransomware212K affectedFinanceUSDec 30, 2025UOUrban OneBreach notice filed with the Indiana AG, details not stated.1,770 affectedUSDec 29, 2025UHUnity HuntExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details, dates of birth, addresses and names. Reported to the Texas AG.5,333 affectedUSDec 29, 2025SJSoapy Joe's Car WashBreach notice filed with the California AG, details not stated.3,769 affectedUSDec 29, 2025RFRio FarmsBreach notice filed with the California AG, details not stated.USDec 29, 2025PAProgressive Auto GroupBreach notice filed with the Indiana AG, details not stated.1,680 affectedTransportUSDec 29, 2025OSOakland Smile DentalBreach notice filed with the California AG, details not stated.HealthcareUSDec 29, 2025MCMetroWest Community Federal Credit UnionBreach notice filed with the Indiana AG, details not stated.21K affectedFinanceUSDec 29, 2025MRMeridian Risk ManagementBreach notice filed with the Indiana AG, details not stated.1,383 affectedUSDec 29, 2025MCMendocino Community Health ClinicHacking exposed names and health records. Reported to the HHS archive.Hacking3,538 affectedHealthcareUSDec 29, 2025Korean Air Catering & Duty-FreeHack of catering supplier KC&D exposes Korean Air employee dataVendor breachTransportKRUnverifiedDec 29, 2025ESExact Sciences LaboratoriesInsider exposed names and health records. Reported to the HHS archive.Insider2,658 affectedHealthcareUSDec 29, 2025EFEpika Fleet ServicesBreach notice filed with the Indiana AG, details not stated.445 affectedUSDec 29, 2025ALAWBF LawBreach notice filed with the Indiana AG, details not stated.2,178 affectedUSDec 29, 2025ARAssociated Radiologists of the Finger LakesHacking exposed names and health records. Reported to the HHS OCR.Hacking501 affectedHealthcareUSDec 29, 2025ALApro, LLC d/Breach notice filed with the Oregon DOJ, details not stated.USDec 29, 2025APAlaska Pacific UniversityBreach notice filed with the Vermont AG, details not stated.EducationUSDec 29, 2025APABC Pest Control of HoustonExposed Social Security numbers, health records, insurance details, payment cards, financial details and names. Reported to the Texas AG.442 affectedRetailUSDec 29, 2025TSTooling Systems GroupBreach notice filed with the Indiana AG, details not stated.1,755 affectedTechUSDec 28, 2025WIREDHacking exposed dates of birth, emails, location data, names, phone numbers and addresses.Hacking2.4M accountsTechUnverifiedDec 27, 2025DMDocs Medical GroupHacking exposed names and health records. Reported to the California AG.Hacking4,035 affectedHealthcareUSDec 27, 2025UtairExposed dates of birth, emails, names, government IDs, phone numbers and addresses.401K accountsTechUnverifiedDec 26, 2025UAUnipres AlabamaBreach notice filed with the Indiana AG, details not stated.898 affectedUSDec 26, 2025SOShare OurselvesHacking exposed names and health records. Reported to the California AG.Hacking2,864 affectedHealthcareUSDec 26, 2025GEGuideStar EldercareBreach notice filed with the Indiana AG, details not stated.255 affectedUSDec 26, 2025DCDan Clasby Company CPASBreach notice filed with the Vermont AG, details not stated.FinanceUSDec 26, 2025