Banco de Chile
450K customer records exposed in credential harvesting
2026 Data Breaches Year-to-Date (663 indexed)
“Digital Parasite” Warning as Attackers
Picus Security warns of the increasingly sophisticated ways malicious activity is staying hidden
Deutsche Telekom (Germany)
3.1M customer records accessed via compromised customer service platform
Toy Battles
1,017 records exposed — Chat logs, Email addresses, IP addresses, Usernames
Association Nationale des Premiers Secours
5,600 records exposed — Dates of birth, Email addresses, Names, Places of birth and 1 more
KU Leuven (Belgium)
190K student records exposed
SaskPower (Canada)
340K customer utility records exposed via compromised billing system vendor
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
Emirates Airlines
640K Skywards member records including travel history and contact data compromised
Researchers Find 40,000+ Exposed OpenClaw
SecurityScorecard has identified over 40,000 OpenClaw deployments exposed to potential attack
BridgePay Confirms Ransomware Attack, No
The services of Florida-based payments platform BridgePay are offline due to a ransomware attack
Thales Group (France)
340K defense and aerospace employee records exposed via LockBit 3.0 ransomware
ServiceNow ITSM Platform
620K enterprise workflow configurations exposed via compromised instance admin accounts
ATO Australia (Tax)
1.1M taxpayer records exposed via zero-day in myGov authentication system
Instacart Grocery Delivery
680K shopper and customer records exposed via third-party payment processor compromise
Cathay Pacific Airways
9.4M passenger records re-exposed as 2018 breach data reappears on new dark web marketplace
Baystate Health
440K patient records exposed in spear-phishing attack on Massachusetts health system
University of Toronto
380K student and staff records compromised in targeted phishing campaign
CVS Health / Aetna
3.4M patient pharmacy and insurance records exposed via compromised prescription gateway
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Substack
697K subscriber records exposed — email addresses, phone numbers, internal metadata
Substack Confirms Data Breach, "Limited
Substack did not specify the number of users affected by the data breach
Fortinet (Security Vendor)
440K customer records from FortiGate management portal exposed via zero-day authentication bypass