Lexipol
672,546 records exposed — Email addresses, Names, Passwords, Phone numbers and 1 more
2025 Data Breaches (644 indexed)
SpyX
1,977,011 records exposed — Device information, Email addresses, Geographic locations, IP addresses and 1 more
City of Milwaukee (Wisconsin)
195K resident records exposed — property tax, permit, and assessment data compromised
BC Cancer Agency
680K patient treatment records exposed via compromised research data warehouse
Freshfields Bruckhaus Deringer
670K records from antitrust investigations and merger reviews exposed via insider access
MedStar Health (Washington DC)
183K patient records exposed via compromised email accounts — phishing attack
Nissan Oceania
100K customer and employee records stolen — government IDs, insurance, and loan data exposed
BT Group (British Telecom)
890K customer records compromised in network intrusion
Police Scotland
198K records including officer and witness personal data exposed via third-party print vendor
Manulife Financial (Canada)
2.4M policyholder records exposed via compromised third-party benefits administrator
Kuwait Finance House
340K banking records compromised
Videotron (Quebec)
340K subscriber records compromised
ANZ Banking Group
1.2M customer records exposed in vendor incident
University of Regina
130K student records exposed
Telus Health
1.4M patient records compromised in targeted attack
BNP Paribas
1.3M customer records compromised
Tokyo Metropolitan Cancer Hospital
287K patient oncology records exfiltrated — unauthorized access via VPN zero-day
Shell plc
1.3M employee and operational records exposed in supply chain attack
Paytm (India)
1.3M payment records exposed via API vulnerability
Mercury Financial (Fintech)
620K startup banking customer records exposed via compromised employee credentials
EnBW Energie Baden-Wurttemberg (Germany)
180K customer records exposed via ransomware on customer service systems
Cerebral Inc.
3.1M mental health patient records shared with advertising platforms via tracking pixels
Yale New Haven Health System
5.6M patient records exposed including SSNs and medical record numbers — $18M settlement
CISA (Internal Systems)
CISA confirmed breach of two internal systems — Ivanti Connect Secure vulnerability exploited