Breaches disclosed in 2025

2,985 breaches

The Home DepotLeaked GitHub token exposed Home Depot internal systems for a yearExposed dataRetailUSUnverifiedDec 12, 2025RDRockrose DevelopmentExposed Social Security numbers, health records, insurance details, payment cards, financial details, addresses and names. Reported to the California AG.47K affectedUSDec 12, 2025RCRicca ChemicalBreach notice filed with the Indiana AG, details not stated.217 affectedManufacturingUSDec 12, 2025PornhubHackers extort Pornhub over Premium members' viewing data from MixpanelVendor breachMediaCAUnverifiedDec 12, 2025OFOnset FinancialBreach notice filed with the Indiana AG, details not stated.682 affectedFinanceUSDec 12, 2025OOCATInsider exposed names and health records. Reported to the HHS OCR.Insider1,629 affectedHealthcareUSDec 12, 2025NHNorthwest HardwoodsBreach notice filed with the Indiana AG, details not stated.265 affectedUSDec 12, 2025MQMcElroy Quirk & BurchBreach notice filed with the Indiana AG, details not stated.6,242 affectedUSDec 12, 2025LCLydig ConstructionRansomware, data exposed not stated. Reported to the Washington AG.RansomwareManufacturingUSDec 12, 2025HHHeywood Healthcare Inc. including Henry Heywood Memorial Hospital, Athol Memorial Hospital, and Heywood Medical GroupHacking exposed names and health records. Reported to the HHS OCR.Hacking500 affectedHealthcareUSDec 12, 2025FWFort Worth Club of Fort Worth TexasExposed Social Security numbers, health records, payment cards, financial details, addresses and names. Reported to the Texas AG.842 affectedRetailUSDec 12, 2025DPDriven PSCBreach notice filed with the Indiana AG, details not stated.202 affectedUSDec 12, 2025DSDonaghy SalesBreach notice filed with the California AG, details not stated.USDec 12, 2025CRCove Risk ServicesBreach notice filed with the Indiana AG, details not stated.46K affectedUSDec 12, 2025COCity of HoustonExposed Social Security numbers, dates of birth and names. Reported to the Texas AG.GovernmentUSDec 12, 2025CCatwigExposed Social Security numbers, health records, dates of birth, addresses and names. Reported to the California AG.24K affectedUSDec 12, 2025BSBrevard Skin and Cancer CenterHacking exposed names and health records. Reported to the HHS OCR.Hacking55K affectedHealthcareUSDec 12, 2025BMBaltimore Medical SystemHacking exposed names and health records. Reported to the HHS OCR.Hacking197K affectedHealthcareUSDec 12, 2025ACAtrium CentersHacking exposed names, health records and Social Security numbers. Reported to the HHS OCR.Hacking39K affectedHealthcareUSDec 12, 2025AOAffiliates of Nexion HealthInsider exposed names and health records. Reported to the HHS archive.Insider1,027 affectedHealthcareUSDec 12, 2025RBRain BirdHacking exposed payment cards, financial details and names. Reported to the California AG.Hacking25K affectedRetailUSDec 11, 2025MMorningsideRansomware, data exposed not stated. Reported to the Indiana AG.Ransomware1,564 affectedNonprofitUSDec 11, 2025MMMassachusetts Mutual Life InsuranceExposed names, Social Security numbers and health records. Reported to the Indiana AG.272 affectedFinanceUSDec 11, 2025GIGirtz IndustriesBreach notice filed with the Indiana AG, details not stated.835 affectedManufacturingUSDec 11, 2025Freedom ChatExposed data exposed phone numbers and credentials and tokens.Exposed dataTechUSUnverifiedDec 11, 2025CoinbaseInsider exposed names, emails, phone numbers, dates of birth, government IDs and financial details. Reported to the Indiana AG.Insider32 affectedCryptoUSDec 11, 2025700CreditHack of 700Credit exposes SSNs of 5.6 million car buyersHacking5.8M affectedFinanceUSDec 11, 20252A21 AirBreach notice filed with the Indiana AG, details not stated.419 affectedUSDec 11, 2025SBSapp BrosBreach notice filed with the Indiana AG, details not stated.16K affectedUSDec 10, 2025JFJewish Family and Community Services- East BayHacking exposed names and health records. Reported to the California AG.Hacking987 affectedHealthcareUSDec 10, 2025HOHeart of Texas Behavioral Health NetworkInsider exposed Social Security numbers, health records, insurance details, dates of birth, addresses and names. Reported to the HHS archive.Insider1,309 affectedHealthcareUSDec 10, 2025EBEast Bay Regional Park DistrictBreach notice filed with the California AG, details not stated.EducationUSDec 10, 2025COCity of PuyallupHacking, data exposed not stated. Reported to the Washington AG.HackingGovernmentUSDec 10, 2025CHCentric HealthHacking exposed names and health records. Reported to the HHS OCR.Hacking6,855 affectedHealthcareUSDec 10, 2025CLCareNexa, LLCExposed Social Security numbers, health records and addresses. Reported to the California AG.259K affectedHealthcareUSDec 10, 2025BCBoise Consumer CooperativeBreach notice filed with the Vermont AG, details not stated.USDec 10, 2025WDWilliam Doyle GalleriesBreach notice filed with the Indiana AG, details not stated.2,123 affectedUSDec 9, 2025WUWheels Up PartnersExposed Social Security numbers and names. Reported to the Indiana AG.5,710 affectedUSDec 9, 2025SOSouthern Oregon Neurosurgical and Spine AssociatesHacking exposed names and health records. Reported to the HHS OCR.Hacking1,000 affectedHealthcareUSDec 9, 2025SFShields Facilities MaintenanceBreach notice filed with the Indiana AG, details not stated.1,314 affectedUSDec 9, 2025RSRemarket SpaceBreach notice filed with the Indiana AG, details not stated.7,147 affectedUSDec 9, 2025PMProsper MarketplaceHacking exposed names, credentials and tokens, Social Security numbers, government IDs, payment cards, financial details and dates of birth. Reported to the California AG.Hacking13M affectedFinanceUSDec 9, 2025OLOchsner LSU Health – Regional UrologyHacking exposed names and health records. Reported to the HHS OCR.Hacking4,519 affectedHealthcareUSDec 9, 2025LCLycoming CountyBreach notice filed with the Indiana AG, details not stated.1,876 affectedGovernmentUSDec 9, 2025HFHertz Farm ManagementBreach notice filed with the Indiana AG, details not stated.1,596 affectedUSDec 9, 2025HHeimbrockBreach notice filed with the Indiana AG, details not stated.44 affectedUSDec 9, 2025GIGreen ImagingHacking exposed names, health records, Social Security numbers, insurance details and addresses. Reported to the HHS OCR.Hacking30K affectedHealthcareUSDec 9, 2025CCohenMaladBreach notice filed with the Indiana AG, details not stated.1 affectedUSDec 9, 2025CPCharles PrattBreach notice filed with the Vermont AG, details not stated.USDec 9, 2025ACAlvin Community CollegeExposed addresses and names. Reported to the Texas AG.EducationUSDec 9, 2025