Microsoft (Storm-0558)
Chinese hackers accessed 25+ org email accounts including US government officials
Latest Disclosures
Locally
362,619 records exposed — Email addresses, Partial credit card data, Passwords, Phone numbers and 2 more
Canadian Tire (vendor)
Third-party data exposed customer loyalty info
Middlebury College
22K student records exposed
Cetera Financial
33K advisor records exposed
Sutter Health (vendor)
845K patient records exposed through vendor compromise
Ohio History Connection
7.6K records exposed in ransomware
Robeson Health Care Corporation
15K patient records exposed
Movement Mortgage
28K customer records exposed
Independent Living Systems (Florida)
4.2M Medicaid managed care records exposed — largest FL healthcare breach of 2023
HCA Healthcare
11.3M patient records stolen from external storage facility
Northern Arizona University
38K student records exposed
Charles Schwab / TD Ameritrade
3.5M brokerage customer records exposed via MOVEit — account numbers and trading data
Port of Nagoya (Japan)
LockBit ransomware disrupted Japan's largest port for 3 days — cargo operations halted
Schwab Retirement Plan Services
44K participant records exposed
Maximus
11M individuals — government services contractor breach affected Medicare and Medicaid data
Los Alamos National Laboratory
22K records exposed in vendor breach
Barts Health NHS Trust (ALPHV)
7TB of data stolen by ALPHV/BlackCat — largest NHS trust, 2.5M patient catchment
BORN Ontario (Birth Registry)
3.4M newborn screening records exposed via MOVEit vulnerability at Ontario health agency
Barts Health NHS Trust (London)
7TB patient data stolen by BlackCat — largest NHS trust with 2.5M patient catchment
TSMC (Taiwan Semiconductor)
LockBit claimed breach via Kinmax vendor — chip manufacturing client data exposed
Croatian Hospital Centre Zagreb
Ransomware disrupted Croatia's largest hospital — patient systems offline
Western & Southern Financial
66K records exposed in vendor breach
New York City Department of Education
45K student records exposed via MOVEit vulnerability at NYC DOE file transfer system