Deezer
229,037,936 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 4 more
Latest Disclosures
Benchmark
93,343 records exposed — Email addresses, IP addresses, Passwords, Usernames
Memorial University (NL)
Cyberattack disrupted systems for months
CentraState Healthcare
617K patient records exposed in ransomware
Railway Board India
30M passenger records reportedly leaked from Indian Railways database
Slack / GitHub (2022)
Employee tokens stolen, private code repositories accessed
Arnold Clark (Scotland)
Largest UK car dealer hit by Play ransomware — customer IDs, bank details stolen
Pepsi Bottling Ventures
28K employee records exposed in data breach
LastPass
Encrypted password vaults and customer metadata stolen via compromised developer account
The Guardian Newspaper
Ransomware attack disrupted newsroom operations — staff personal data stolen
Queensland University of Technology
Royal ransomware compromised university IT systems — student data stolen
Toronto SickKids Hospital
LockBit ransomware hit children's hospital — clinical and corporate systems impacted
SickKids Hospital (Canada)
LockBit ransomware disrupted clinical operations at Toronto children's hospital
SickKids Hospital
Ransomware attack disrupted clinical operations and phone lines
Gemini
5,274,214 records exposed — Email addresses, Partial phone numbers
SPTrans (Sao Paulo)
13M passenger transit card records stolen — CPFs, addresses, DOBs exposed
Cedar Rapids Schools (IA)
40K student records exposed
St. Rose Hospital
42K patient records exposed
TPG Telecom (Australia)
15,000 email accounts compromised — business customer data accessed
Penncrest School District (PA)
7K student records exposed in ransomware
Norton LifeLock / Gen Digital
925K customer password manager vaults potentially compromised
CoinTracker
1,557,153 records exposed — Email addresses, Partial phone numbers
EPM Medellin (Colombia)
BlackCat ransomware disrupted water and energy utility for 4M residents
Norton LifeLock (Gen Digital)
6,450 customer password vaults potentially accessed via credential-stuffing campaign