Disney (Slack Breach)
1.1TB of internal data stolen via compromised Slack workspace — NullBulge group
2024 Data Breaches (927 indexed)
Squarespace DNS
Mass domain hijacking via OAuth registration flaw
Rite Aid
2.2M customer records including purchase history and ID data stolen in ransomware attack
National Security Agency (NSA)
NSA employee data exposed via AT&T telecom breach — metadata and communication records
AT&T (Call Records)
109M customer call and text records stolen from Snowflake cloud environment
AT&T (Snowflake)
110M call and text metadata records stolen from Snowflake environment
Snowflake Customer Campaign (AT&T)
110M AT&T call and text metadata records — phone numbers, duration, cell tower locations
Park'N Fly (Canada)
1M customer records stolen from Canadian airport parking provider
mSpy (2024)
2,394,179 records exposed — Email addresses, IP addresses, Names, Photos
BAE Systems (UK)
780K defense contractor records exposed in supply chain attack
The Heritage Foundation
72,004 records exposed — Email addresses, IP addresses, Names, Passwords and 1 more
KT Corporation (Korea Telecom)
1.1M subscriber records exposed
Itau Unibanco (Brazil)
1.5M customer records compromised in vendor breach
PLDT Inc (Philippines)
890K subscriber records exposed
Astellas Pharma (Japan)
340K clinical trial records exposed
Rakuten Group (Japan)
4.3M e-commerce user records exposed via API misconfiguration on marketplace platform
Ulta Beauty
770K customer records exposed via credential stuffing on loyalty program — Ultamate Rewards
Neiman Marcus
31,152,842 records exposed — Dates of birth, Email addresses, IP addresses, Names and 4 more
TD Bank (US)
62K customer records exposed
State of Nevada DMV
1.1M driver license records exposed via vendor compromise — photos and biometric data
University of Florida
86K student records and research grant data exposed via compromised department servers
Husky Owners
16,502 records exposed — Dates of birth, Email addresses, Time zones, Usernames
FNTECH
10,386 records exposed — Email addresses, IP addresses, Names
Weil Gotshal & Manges LLP
420K bankruptcy case records exposed — creditor claims and restructuring plans compromised