Nubank (Brazil)
1.1M fintech records compromised in API vulnerability
2024 Data Breaches (927 indexed)
Commerzbank AG (Germany)
730K customer records compromised via third-party document processor vulnerability
Intesa Sanpaolo
780K banking records compromised via insider threat
Westpac Banking
340K mortgage application records compromised
Snowflake Cloud (Second Wave)
89 additional customer environments compromised — stolen credentials from infostealer malware
POSCO Steelworks (South Korea)
320K employee and production records exposed — blast furnace operational data compromised
Princeton University
15K student and faculty records exposed via compromised research computing cluster
Lazada (Southeast Asia)
890K customer records exposed
Not SOCRadar
282,478,425 records exposed — Email addresses
View incident → Indexed 1 year, 10 months ago
ADT Inc.
32K customer home security records exposed including system configurations and addresses
MC2 Data
100M+ background check records exposed in unsecured database
National Public Data (NPD)
2.9B records with SSNs of nearly all Americans leaked — background check company breach
National Public Data (tech)
2.9B records including SSNs — largest data broker breach ever
Avis
300K customer records exposed in business application breach
Huntington Bancshares
28K customer records exposed
US Social Security Administration
295K beneficiary records accessed via compromised mySSA portal accounts
Royal Free London NHS Trust
340K patient records exposed
Nordstrom
340K customer loyalty records exposed
Notion Productivity Platform
2.1M workspace metadata records exposed via misconfigured internal API endpoint
Tim Hortons (parent RBI)
1.1M loyalty program records exposed
Shoe Zone
46,140 records exposed — Email addresses, Names, Partial credit card data, Physical addresses and 1 more
GameStop
340K customer records exposed — payment card data and Power Up Rewards member information
Huntington Bancshares
340K customer records stolen
Avis Budget Group
299K customer records accessed via business application vulnerability