Breaches disclosed in 2025

2,985 breaches

MCMedical CenterHacking exposed names and health records. Reported to the HHS OCR.Hacking32K affectedHealthcareUSDec 19, 2025MDMcElroy Deutsch Mulvaney & CarpenterBreach notice filed with the Indiana AG, details not stated.6,690 affectedUSDec 19, 2025JFJenkins FenstermakerBreach notice filed with the Indiana AG, details not stated.1,345 affectedUSDec 19, 2025JAJeff Anderson & AssociatesBreach notice filed with the California AG, details not stated.480 affectedUSDec 19, 2025HHydroServeBreach notice filed with the Indiana AG, details not stated.138 affectedUSDec 19, 2025HBHoward Brown HealthHacking exposed names and health records. Reported to the HHS archive.Hacking8,357 affectedHealthcareUSDec 19, 2025HHHerrman & HerrmanExposed Social Security numbers, health records, insurance details and names. Reported to the Indiana AG.14K affectedRetailUSDec 19, 2025GEG5 EnterprisesBreach notice filed with the Indiana AG, details not stated.3,575 affectedUSDec 19, 2025BUBaker UniversityExposed Social Security numbers, government IDs, health records, insurance details, addresses and names. Reported to the California AG.54K affectedEducationUSDec 19, 2025APAnesthesiology & Pain ConsultantsInsider exposed names and health records. Reported to the HHS archive.Insider538 affectedHealthcareUSDec 19, 2025AAAdamson AhdootBreach notice filed with the California AG, details not stated.USDec 19, 2025University of SydneyHacking exposed names, dates of birth, phone numbers, addresses, employment records and education records.Hacking27K affectedEducationAUUnverifiedDec 18, 2025NENorth East Medical ServicesHacking exposed names and health records. Reported to the California AG.Hacking92K affectedHealthcareUSDec 18, 2025MFMezrah FinancialBreach notice filed with the Indiana AG, details not stated.1,000 affectedFinanceUSDec 18, 2025MCMercy CenterBreach notice filed with the Indiana AG, details not stated.USDec 18, 2025DXS InternationalNHS England tech supplier DXS confirms office server breachRansomwareHealthcareGBUnverifiedDec 18, 2025CVConifer Value-Based CareHacking exposed names and health records. Reported to the California AG.Hacking12K affectedHealthcareUSDec 18, 2025CHCole HardwoodBreach notice filed with the Indiana AG, details not stated.148 affectedUSDec 18, 2025Botting NetworkExposed dates of birth, emails and passwords.96K accountsTechUnverifiedDec 18, 2025BBerendsenBreach notice filed with the Indiana AG, details not stated.345 affectedUSDec 18, 2025AUTOSURExposed emails, names, phone numbers and addresses.487K accountsTechDec 18, 2025ASArtivo SurfacesBreach notice filed with the Indiana AG, details not stated.1,036 affectedUSDec 18, 2025Albertsons CompaniesHacking, data exposed not stated. Reported to the Washington AG.HackingTechUSDec 18, 2025Web Hosting TalkExposed emails, IP addresses and passwords.515K accountsTechDec 17, 2025SASentry AdvisorsBreach notice filed with the Indiana AG, details not stated.1,234 affectedFinanceUSDec 17, 2025PPawlingBreach notice filed with the Vermont AG, details not stated.USDec 17, 2025PIParexel InternationalExposed Social Security numbers, payment cards, financial details, dates of birth and names. Reported to the California AG.66K affectedUSDec 17, 2025NPNews-Press & GazetteExposed Social Security numbers, dates of birth and names. Reported to the California AG.11K affectedMediaUSDec 17, 2025MLMcIntosh LaboratoryBreach notice filed with the California AG, details not stated.HealthcareUSDec 17, 2025LPLonich Patton Ehrlich PolicastriBreach notice filed with the California AG, details not stated.USDec 17, 2025EHExcellent Home Care ServicesHacking exposed names and health records. Reported to the HHS archive.Hacking16K affectedHealthcareUSDec 17, 2025EYEckerd Youth AlternativesExposed Social Security numbers, health records, payment cards, financial details, dates of birth, addresses and names. Reported to the Indiana AG.69K affectedUSDec 17, 2025BEBox Elder CountyBreach notice filed with the Indiana AG, details not stated.82K affectedGovernmentUSDec 17, 2025ACAlbemarle CountyHacking exposed names and health records. Reported to the HHS OCR.Hacking17K affectedInsuranceUSDec 17, 2025WPWood Personnel ServicesBreach notice filed with the Indiana AG, details not stated.78K affectedUSDec 16, 2025SGScharine GroupBreach notice filed with the Indiana AG, details not stated.997 affectedUSDec 16, 2025SSaxExposed names, government IDs, health records, insurance details and Social Security numbers. Reported to the California AG.229K affectedFinanceUSDec 16, 2025FOFriends of Family Health CenterHacking exposed names and health records. Reported to the California AG.Hacking2,256 affectedHealthcareUSDec 16, 2025WTWashington Trust Company, of WesterlyBreach notice filed with the Vermont AG, details not stated.FinanceUSDec 15, 2025WTWashington TrustBreach notice filed with the Indiana AG, details not stated.6,126 affectedFinanceUSDec 15, 2025VLVernon Law FirmBreach notice filed with the Indiana AG, details not stated.781 affectedLegal and servicesUSDec 15, 2025UCUrban Cyber SecurityFeatured VPN browser extension harvested AI chats of millions and sent them to data brokerInsiderTechUnverifiedDec 15, 2025SoundCloudHacking exposed emails, location data and names.Hacking30M accountsMediaDEDec 15, 2025LLKQExposed Social Security numbers, addresses and names. Reported to the California AG.9,070 affectedRetailUSDec 15, 2025IHIndian Health Board of MinneapolisInsider exposed names and health records. Reported to the HHS archive.Insider503 affectedHealthcareUSDec 15, 2025FSFullsteam Software HoldingsExposed payment cards, financial details and names. Reported to the California AG.13K affectedTechUSDec 15, 2025FFPMCMInsider exposed names and health records. Reported to the HHS OCR.Insider2,072 affectedHealthcareUSDec 15, 2025WIWharton Independent School DistrictExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details and names. Reported to the Texas AG.1,302 affectedEducationUSDec 12, 2025WSWedbush SecuritiesBreach notice filed with the California AG, details not stated.FinanceUSDec 12, 2025UUpgradeBreach notice filed with the Indiana AG, details not stated.45 affectedUSDec 12, 2025