Qantas Airways
5.7M customer records stolen via third-party Salesforce integration — data posted on dark web
2025 Data Breaches (644 indexed)
Societe Generale
560K customer records exposed
BP plc
890K employee records compromised in vendor platform breach
Via Rail Canada
340K passenger booking records exposed
Aflac Incorporated
13M health insurance records compromised — largest healthcare breach of 2025
Acadia University (Nova Scotia)
65K student records compromised
Suncorp Group
560K insurance records stolen
Fortis Healthcare (India)
670K patient records compromised
Credential Compilation (16B Passwords)
16 billion credentials from Google, Apple, Facebook — largest credential dump in history
MOL Group (Hungary)
210K fuel card records compromised
Free
13,926,173 records exposed — Bank account numbers, Dates of birth, Genders, Names and 2 more
NHS Dumfries and Galloway
Patient data published by INC Ransom group after Scottish health board refused to pay
Fédération Francaise de Rugby
281,977 records exposed — Dates of birth, Email addresses, Names, Phone numbers
Coinbase Global
Customer support agents bribed to steal 97K user records — $20M extortion demand
Scripps Health (San Diego)
530K patient records re-exposed via legacy system — previously thought contained from 2021
Chime Financial
1.1M customer records stolen in targeted attack
Canva Design Platform
2.5M enterprise workspace records exposed via API misconfiguration — design assets leaked
Woolworths Group (Australia 2025)
2.2M MyDeal customer records stolen via compromised subsidiary marketplace platform
Blue Cross Blue Shield of Massachusetts
490K member records exposed via compromised third-party billing vendor
Coinbase
70K user records stolen via bribed overseas support contractors — $20M ransom refused
ChristianaCare (Delaware)
215K patient records exposed via compromised employee credentials — pharmacy data included
Pemex (Mexico)
890K employee and pipeline records exposed
AXA Group
780K policyholder records compromised in ransomware
Plaid Financial API
2.8M bank account linking records exposed via misconfigured staging environment