Citibank Consumer Division
1.8M credit card records exposed via vulnerability in online account management platform
Latest Disclosures
WiredBucks
918,529 records exposed — Earnings, Email addresses, IP addresses, Names and 3 more
ETH Zurich
210K student and research records exposed
Latham & Watkins
340K client records compromised via vendor breach
ANU (Australian National University)
210K student records exposed in repeat incident
HWL Ebsworth (Australia)
4TB of client legal files stolen from top-10 Australian law firm by ALPHV ransomware
City of Kansas City (Missouri)
380K resident records exposed via ransomware on municipal court and permitting systems
Mr. Cooper Group (Mortgage)
14.7M customer records confirmed stolen — names, addresses, SSNs, mortgage details
Disk Union
690,667 records exposed — Email addresses, Geographic locations, Names, Passwords and 2 more
Elastic Cloud (Elasticsearch)
1.2M customer cluster configurations exposed via misconfigured internal tooling
Children's Hospital of Philadelphia
185K pediatric patient records exposed via phishing — developmental assessment data included
AutoZone
184K customer records exposed including SSNs via MOVEit Transfer vulnerability exploitation
ColoCrossing
7,183 records exposed — Email addresses, Names, Passwords
Trinity Health (Michigan)
2.1M patient records exposed via compromised remote monitoring vendor — 97 hospitals affected
MOL Group (Hungary)
210K fuel card records compromised
Credential Compilation (16B Passwords)
16 billion credentials from Google, Apple, Facebook — largest credential dump in history
Bahrain Ministry of Interior
180K citizen records exposed in targeted attack
Societe Generale
560K customer records exposed
Acadia University (Nova Scotia)
65K student records compromised
Suncorp Group
560K insurance records stolen
Via Rail Canada
340K passenger booking records exposed
Smith & Nephew
210K surgical records compromised
Aflac Incorporated
13M health insurance records compromised — largest healthcare breach of 2025
Fortis Healthcare (India)
670K patient records compromised