State of Maine
1.3M resident records exposed via MOVEit Transfer vulnerability — 53% of state population
Latest Disclosures
Ontario Teachers' Pension Plan
MOVEit breach impacted OTPP
Groupe Cloutier (Quebec)
Financial services firm breach exposed advisor and client records
Flagstar Bank
837K customer records exposed via Fiserv MOVEit vulnerability — third breach in 2 years
Royal Dutch Shell (MOVEit)
Employee data exposed through Accellion and MOVEit file transfer vulnerabilities
University of Alberta
290K student and employee records compromised via MOVEit vulnerability exploitation
Humber River Hospital (Toronto)
Daixin Team ransomware targeted hospital systems — patient records at risk
Johns Hopkins University
310K student and employee records exposed via MOVEit Transfer vulnerability
JAXA (Japan Space Agency)
State-sponsored attackers compromised space agency network — research data at risk
Pentagon Federal Credit Union
24K member records exposed
TSA (vendor breach)
18K employee records exposed in third-party breach
PostNL (Netherlands)
Ransomware disrupted Dutch postal service parcel processing
Levi Strauss & Co.
72K customer accounts compromised via credential stuffing on online store
Brunswick Corporation (Marine)
$85M loss from ransomware — boat manufacturing and dealer systems disrupted for 9 days
Levi Strauss
72K customer accounts compromised in credential stuffing
University of Massachusetts Lowell
18K student records exposed
State of Oregon DMV
3.5M driver records exposed via MOVEit vulnerability — 90% of state license holders
HOOPP (Healthcare of Ontario Pension Plan)
MOVEit breach exposed pension data
CoWIN (India)
1B COVID vaccination records exposed — some US residents affected
CoWIN Portal (India)
150M citizen vaccination records allegedly leaked from India's COVID platform
Tata Consultancy Services (Global)
Cybersecurity incident impacted IT systems — client project data at risk
Dorchester County SC
28K records exposed in cyberattack
Fortescue Metals (Australia)
Data breach at iron ore mining giant — employee and contractor data accessed
Swiss Post / PostFinance
DDoS and credential attacks targeted Swiss postal and banking services