Every public disclosure, dated and sourced.

Incidents worldwide, by country.

75 incidents from 12 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

1. United States26 Oct 2026Monmouth UniversityThe source does not say how they got in.Vermont Attorney General
2. United States26 Oct 2026Denver Health Medical PlanThe source does not say how they got in.HIPAA Journal
3. United States24 Oct 2026Brooklyn Counseling ServicesThe source does not say how they got in.Vermont Attorney General
4. United States24 Oct 2026Northeastern Mental Health CenterThe source does not say how they got in.Vermont Attorney General
5. United States23 Oct 2026Industrial and healthcare organizationsHow they got in: a known flaw in software the victim ran.The Hacker News
6. United States23 Oct 2026RL Schreiber, Inc.The source does not say how they got in.Vermont Attorney General
7. United States23 Oct 2026Ford Audio-Video Systems, LLCThe source does not say how they got in.Vermont Attorney General
8. United States23 Oct 2026EyeMed Vision Care, LLCThe source does not say how they got in.Vermont Attorney General
9. United States23 Oct 2026Alabama Fire CollegeThe source does not say how they got in.Vermont Attorney General
10. United States23 Oct 2026UltraMobile ImagingThe source does not say how they got in.HIPAA Journal
11. United States23 Oct 2026Washington GastroenterologyThe source does not say how they got in.HIPAA Journal
12. United States23 Oct 2026Tarter Krinsky & DroginThe source does not say how they got in.HIPAA Journal