RockYou2024
10 billion unique passwords compiled from decades of breaches — posted on dark web
2024 Data Breaches (927 indexed)
Date Hot Brunettes
1,494,078 records exposed — Bios, Email addresses, IP addresses, Passwords and 1 more
Pacific Gas & Electric (PG&E)
850K customer records exposed via compromised contractor portal — meter data and addresses
AutoTrader (dealer breach)
28K customer records exposed
Mercy Medical Center (Baltimore)
54K patient records exposed
OpenAI (2024)
Internal AI research discussions accessed by attacker
mSpy (Spyware Company)
Millions of customer records exposed from mobile surveillance app provider
OTP Bank (Hungary)
560K customer records compromised
CaixaBank
1.2M customer records compromised in targeted attack
NHS Greater Glasgow and Clyde
560K patient records compromised in ransomware
TSMC Supplier (Kinmax)
Server configuration data for TSMC exposed via IT services provider Kinmax breach — LockBit claim
Hudson's Bay Company (TheBay)
670K customer records compromised
Patelco Credit Union
726K member records exposed — SSNs, driver's license numbers, financial data
State Bank of India
3.1M customer records exposed via vendor
Emirates NBD (Dubai)
890K customer banking records compromised
Twilio / Authy
33M phone numbers exposed from authenticator app database
Authy / Twilio (2024)
33M phone numbers associated with authenticator app exposed
New Mexico MVD
1.2M driver license records exposed in vendor breach
Heartland Payment Systems
2.1M transaction records exposed in second major breach
Twilio Authy
33M phone numbers stolen in unauthenticated API endpoint abuse
Rio Tinto
560K employee and mining records compromised
Patelco Credit Union
726K member records exposed in ransomware
Hugging Face AI Platform
120K API tokens exposed — model training data and private repositories accessible
LinkedIn (IntelBroker)
Scraped data of 35M users aggregated and sold