Spyzie
518,643 records exposed — Email addresses
2025 Data Breaches (644 indexed)
Bybit Exchange
$1.4B in Ethereum stolen from cold wallet via compromised multi-sig signing process
Cocospy
1,798,059 records exposed — Email addresses
Dentons (Global)
2.8M records from 79 offices — largest law firm in world breached via supply chain attack
Spyic
875,999 records exposed — Email addresses
T-Mobile (2025 Incident)
37M customer records accessed via compromised API — second major breach in two years
Party City
540K customer records exposed in cyberattack during bankruptcy proceedings
Elligence Health (Maryland)
550K Medicare Advantage patient records exposed via third-party data processor
Storenvy
11,052,071 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 3 more
Barclays UK
1.4M customer records compromised in credential harvesting campaign
Genea Fertility (Australia)
Patient reproductive health data and IVF records compromised in targeted attack
Medibank (Continued Impact)
9.7M customer records from 2024 breach continue to surface on dark web — regulatory action ongoing
Sanford Health
1.5M patient records compromised in ransomware attack on Midwestern health system
Doxbin (TOoDA)
136,461 records exposed — Email addresses, Usernames
GitLab DevOps Platform
350K developer accounts affected by session hijacking via XSS in CI/CD pipeline configs
Zacks (2024)
11,994,223 records exposed — Email addresses, IP addresses, Names, Passwords and 3 more
Royal Mail (UK)
44M customer shipping records exposed in LockBit ransomware attack — addresses, tracking data
LandAirSea
337,373 records exposed — Email addresses, Names, Partial credit card data, Passwords and 2 more
Poste Italiane
560K postal banking records exposed
Raymond James Financial
670K client records exposed in phishing attack
Wisconsin Department of Health
670K patient records exposed
Ashurst LLP
180K client records stolen in targeted attack
Ulster University
130K student records compromised
University of Maryland
340K student records compromised via network intrusion