Bank of China (Hong Kong)
890K customer records stolen in targeted attack
2025 Data Breaches (644 indexed)
Fiat Chrysler (Stellantis Italy)
670K vehicle owner records compromised
City of Fredericton
85K resident records stolen in targeted intrusion
Jones Day
560K client records exposed in vendor breach
TehetségKapu
54,357 records exposed — Email addresses, Names, Usernames
NYU (New York University)
560K student records compromised via phishing
Volvo Trucks (Sweden)
340K logistics records compromised in supply chain attack
Lufthansa
780K passenger records compromised
Etsy
1.1M seller records compromised in targeted attack
Great-West Lifeco
890K insurance records stolen in credential harvesting
Macquarie Group
450K investment account records compromised
Suncor Energy
890K employee and operations records stolen
Harrods Department Store (UK)
Attempted cyberattack forced internet shutdown across all stores — systems isolated
Co-op Group (UK)
Attempted cyberattack forced Co-op to shut down IT systems — operations disrupted
Nova Scotia Power
375K current and 540K former customers — SINs, driver's licenses, account data exposed
Marks & Spencer (UK)
3.2M customer records exposed in DragonForce ransomware attack — loyalty and contact data
Databricks Lakehouse Platform
380K enterprise data pipeline configurations exposed via compromised admin credentials
Service NSW (Australia)
540K citizen records exposed via compromised employee email accounts
Marks & Spencer Cyber Incident
Cyberattack disrupted online ordering and contactless payments across UK stores
University of Alberta (Canada)
290K student and staff records exposed via compromised PeopleSoft HR system
IRS Free File Program
340K taxpayer records exposed via vulnerability in online filing partner systems
Stanford Health (Systems Breach)
92K patient records from Stanford Health Care clinics exposed via ransomware attack
Samsung Germany Customer Tickets
216,333 records exposed — Email addresses, Names, Physical addresses, Purchases and 3 more
Mount Sinai Health System (NYC)
320K patient records exposed via third-party billing vendor ransomware attack