PowerSchool (Education)
62.4M student and 9.5M teacher records stolen from K-12 student information system
2025 Data Breaches (644 indexed)
Gravy Analytics
17B location data points exposed including precise GPS tracking
Ethiopian Airlines
450K passenger records stolen
Federal Aviation Administration
340K pilot certificate records compromised
Philips NV
340K employee and product records compromised
Hydro-Quebec
560K customer records exposed in phishing campaign
Leonardo DRS (US)
450K defense electronics records compromised
Shaw Communications (remnant)
560K legacy customer records exposed
POSCO (South Korea)
340K employee records stolen in targeted attack
Coles Group
560K customer records compromised via third-party platform
Bank Central Asia (Indonesia)
560K customer records stolen
Axis Bank (India)
1.1M customer records exposed via third-party vendor
Pearson Education (UK)
15M student learning records exposed via compromised cloud infrastructure — test scores leaked
GLAMIRA
874,594 records exposed — Email addresses, Names, Phone numbers, Purchases
Anna Jaques Hospital
316K patient records stolen in Christmas Day ransomware attack on Massachusetts hospital
Community Health Center Inc
1M patient records exposed in data breach
Community Health Center (Connecticut)
1M+ patient records including SSNs and health diagnoses accessed by threat actor
US Treasury (China-Linked)
State-sponsored actors accessed Treasury workstations via compromised BeyondTrust API key
Zacks Investment Research
12M user records exposed — emails, usernames, IP addresses leaked
SickKids Toronto
Patient and research data temporarily encrypted in LockBit attack — decryptor provided after backlash