Breaches disclosed in 2025

2,985 breaches

Illuminate EducationHacker used ex-employee's credentials to access data of 10.1M students; FTC orderHacking10M affectedEducationUSDec 1, 2025FCFedEx Corporation Group Health PlanHacking exposed names and health records. Reported to the HHS OCR.Hacking1,066 affectedInsuranceUSDec 1, 2025SMSports Medicine & OrthopaedicsHacking exposed names and health records. Reported to the HHS archive.Hacking4,000 affectedHealthcareUSNov 30, 2025CCerenadeHacking exposed dates of birth, addresses, names and health records. Reported to the California AG.Hacking1,697 affectedHealthcareUSNov 30, 2025CoupangFormer employee took data of 34M customers; record KRW 624B PIPC fineInsider34M affectedRetailUSNov 29, 2025SCSpindletop CenterHacking exposed names and health records. Reported to the HHS OCR.Hacking89K affectedHealthcareUSNov 28, 2025RBRichmond Behavioral Health AuthorityHacking exposed names and health records. Reported to the HHS OCR.Hacking113K affectedHealthcareUSNov 28, 2025KGKerner GroupBreach notice filed with the Indiana AG, details not stated.827 affectedUSNov 28, 2025GIGap InternationalBreach notice filed with the Vermont AG, details not stated.USNov 28, 2025French Football FederationHacking exposed names, dates of birth, addresses, emails and phone numbers.HackingFRUnverifiedNov 28, 2025WPWood Patel & AssociatesBreach notice filed with the Indiana AG, details not stated.502 affectedUSNov 26, 2025WEWaterborne EnvironmentalBreach notice filed with the Indiana AG, details not stated.423 affectedUSNov 26, 2025VIVisage ImagingBreach notice filed with the Indiana AG, details not stated.51 affectedHealthcareUSNov 26, 2025Tyler TechnologiesFlaw in Tyler juror websites exposed potential jurors' personal dataExposed dataGovernmentUSUnverifiedNov 26, 2025TJTami J. Dunham, CPABreach notice filed with the California AG, details not stated.FinanceUSNov 26, 2025TMTakeuchi ManufacturingBreach notice filed with the Indiana AG, details not stated.880 affectedUSNov 26, 2025SSearchBreach notice filed with the Indiana AG, details not stated.2,484 affectedUSNov 26, 2025RIRhode Island AirportBreach notice filed with the Vermont AG, details not stated.TransportUSNov 26, 2025PHPersante Health CareHacking exposed names and health records. Reported to the HHS OCR.Hacking112K affectedHealthcareUSNov 26, 2025OpenAIMixpanel analytics vendor breach exposed limited data on OpenAI API usersVendor breachAIUSUnverifiedNov 26, 2025NUNational University of Natural MedicineBreach notice filed with the Indiana AG, details not stated.2,189 affectedHealthcareUSNov 26, 2025MixpanelPhishing exposed names, emails and location data.PhishingData brokersUSUnverifiedNov 26, 2025MSMarquis Software Solutions etalBreach notice filed with the Indiana AG, details not stated.TechUSNov 26, 2025Marquis Software SolutionsRansomware at bank marketing vendor Marquis exposes 400,000+ customersRansomware400K affectedFinanceUSNov 26, 2025MSMA Silva Corks USABreach notice filed with the Indiana AG, details not stated.265 affectedUSNov 26, 2025KAKeystone AllianceHacking exposed names and health records. Reported to the HHS OCR.Hacking1,021 affectedHealthcareUSNov 26, 2025ICIndustrial Credit Union of Whatcom CountyRansomware, data exposed not stated. Reported to the Washington AG.RansomwareFinanceUSNov 26, 2025HFHenry Ford HealthInsider exposed names and health records. Reported to the HHS OCR.Insider1,984 affectedHealthcareUSNov 26, 2025DEDubroff, Easley, & LovellBreach notice filed with the California AG, details not stated.2,277 affectedUSNov 26, 2025DFDarvin FurnitureBreach notice filed with the Indiana AG, details not stated.2,280 affectedRetailUSNov 26, 2025CFCenter for Urologic Care of BerksHacking exposed names and health records. Reported to the HHS OCR.Hacking543 affectedHealthcareUSNov 26, 2025CCCatholic Charities of the Diocese of AlbanyBreach notice filed with the Vermont AG, details not stated.USNov 26, 2025ANAlternate Number FiveBreach notice filed with the Indiana AG, details not stated.398 affectedUSNov 26, 2025AHAlleghany HealthHacking exposed names and health records. Reported to the HHS archive.Hacking2,187 affectedHealthcareUSNov 26, 2025WCWilliams & ConnollyBreach notice filed with the Indiana AG, details not stated.577 affectedUSNov 25, 2025TTTrailer TransitBreach notice filed with the Indiana AG, details not stated.257 affectedTransportUSNov 25, 2025TMTanner Medical CenterInsider exposed names and health records. Reported to the HHS OCR.Insider1,000 affectedHealthcareUSNov 25, 2025Royal Borough of Kensington and ChelseaCyberattack disrupts shared IT of three London councilsHackingGovernmentGBUnverifiedNov 25, 2025CKCentral Kansas Mental Health CenterHacking exposed names, health records, Social Security numbers, government IDs, insurance details, payment cards, financial details, dates of birth and addresses. Reported to the HHS OCR.Hacking81K affectedHealthcareUSNov 25, 2025CKCB King Memorial SchoolBreach notice filed with the Indiana AG, details not stated.1,810 affectedEducationUSNov 25, 2025BIBarktek IngredientsBreach notice filed with the Vermont AG, details not stated.USNov 25, 2025UFUnited Food Workers Local 7Breach notice filed with the Vermont AG, details not stated.RetailUSNov 24, 2025UFUnited Food & Commercial Workers Local No. 7Breach notice filed with the California AG, details not stated.RetailUSNov 24, 2025TSThomas Safran and AssociatesBreach notice filed with the California AG, details not stated.USNov 24, 2025SLSpectra LogicBreach notice filed with the Indiana AG, details not stated.2,305 affectedUSNov 24, 2025SCSomnoSleep ConsultantsHacking exposed names and health records. Reported to the HHS archive.Hacking913 affectedHealthcareUSNov 24, 2025MHMennonite Home Communities of OhioBreach notice filed with the Indiana AG, details not stated.35 affectedUSNov 24, 2025GMGreater Meridian Health ClinicHacking exposed names and health records. Reported to the HHS OCR.Hacking4,651 affectedHealthcareUSNov 24, 2025DMDavies, McFarland & CarrollHacking exposed names and health records. Reported to the HHS OCR.Hacking55K affectedHealthcareUSNov 24, 2025Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsSupply chain99K affectedEducationUSNov 24, 2025