Erasmus Medical Center (Rotterdam)
280K patient records compromised
Latest Disclosures
Twilio (SendGrid)
33M email addresses and API keys exposed via compromised internal support tools
Robinsons Malls
195,597 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 2 more
Have Fun Teaching
27,126 records exposed — Browser user agent details, Email addresses, IP addresses, Names and 3 more
Wealthsimple (Canada Fintech)
440K investor records exposed — portfolio holdings and trading activity data compromised
Canva (Australia)
2.4M user records including hashed passwords exposed via API vulnerability at design platform
Vodafone UK
670K subscriber records exposed via API vulnerability
Supabase (YC Startup)
112K database connection strings exposed — open-source backend-as-a-service misconfiguration
IAMGOLD (Toronto)
340K mining operations records exposed
Idaho Transportation Department
560K driver records stolen
Target Corporation (2025)
2.1M customer records exposed via compromised third-party loyalty platform integration
CI Financial
340K client records stolen
ASML
340K chip manufacturing records exposed in supply chain attack
Principal Financial
340K retirement account records stolen
Marks and Spencer
1.3M customer loyalty records exposed
Government of Yukon
18K resident records stolen in network intrusion
Government of Saskatchewan
340K driver license records compromised
MOVEit Education Victims (Aggregate)
800+ educational institutions affected by CL0P MOVEit exploitation — millions of student records
Ualabee
472,296 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
University of Virginia
280K student and alumni records exposed via compromised career services platform vendor
Ford Motor Company
680K customer connected vehicle telematics records exposed via compromised API gateway
Clifford Chance LLP
920K client records from international finance transactions exposed via email compromise
Citibank Consumer Division
1.8M credit card records exposed via vulnerability in online account management platform
Latham & Watkins
340K client records compromised via vendor breach