Nissan Oceania
100K customer and employee records stolen — government IDs, insurance, and loan data exposed
Latest Disclosures
BT Group (British Telecom)
890K customer records compromised in network intrusion
Police Scotland
198K records including officer and witness personal data exposed via third-party print vendor
Manulife Financial (Canada)
2.4M policyholder records exposed via compromised third-party benefits administrator
Videotron (Quebec)
340K subscriber records compromised
Paytm (India)
1.3M payment records exposed via API vulnerability
Kuwait Finance House
340K banking records compromised
Shell plc
1.3M employee and operational records exposed in supply chain attack
Tokyo Metropolitan Cancer Hospital
287K patient oncology records exfiltrated — unauthorized access via VPN zero-day
ANZ Banking Group
1.2M customer records exposed in vendor incident
University of Regina
130K student records exposed
BNP Paribas
1.3M customer records compromised
Telus Health
1.4M patient records compromised in targeted attack
Cerebral Inc.
3.1M mental health patient records shared with advertising platforms via tracking pixels
EnBW Energie Baden-Wurttemberg (Germany)
180K customer records exposed via ransomware on customer service systems
Yale New Haven Health System
5.6M patient records exposed including SSNs and medical record numbers — $18M settlement
Mercury Financial (Fintech)
620K startup banking customer records exposed via compromised employee credentials
CISA (Internal Systems)
CISA confirmed breach of two internal systems — Ivanti Connect Secure vulnerability exploited
Dollar Tree / Family Dollar
2M customer and employee records exposed via Zeroed-In Technologies vendor breach
Elastic (Elasticsearch)
1.9M customer deployment records exposed
Genworth Financial
2.5M policyholder records exposed via MOVEit vulnerability at life insurance provider
Allegro (Poland)
780K customer records exposed in platform breach
Gap Inc
780K customer records exposed in loyalty platform breach
Cardiff University
210K student and research records compromised