CISA (US Agency)
Unnamed US department breached via Cisco vulnerability, FIRESTARTER backdoor allowed persistent access
2026 Data Breaches Year-to-Date (3100 indexed)
Sandhills Medical Foundation
Ransomware breach affecting 170,000 individuals in South Carolina
Nissan
Data breach via compromise of third-party vendor file-transfer system
CISA/Unnamed US Federal Department
Breach via Cisco vulnerability with FIRESTARTER backdoor malware allowing access through March
Department for Education
Cyberattack exposed approximately 607,000 records
Ernst & Young
Third-party IT service management platform breached; client tax data exposed March 28 - April 12, 2026
Tribeca Film Festival
666,000 records including celebrity contact data exposed from unprotected database without password or encryption
CISA
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
ANTS (France)
Cyberattack on French identity agency exposed 19 million records with personal data
Cognizant
Data breach on April 21, 2026; personal information exposed; company offers $1 million identity theft cover
Cherry Creek School District
Student data breach resulted in lawsuit against school district
US Government Agency (unnamed)
CISA agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
Vercel
OAuth supply chain compromise exposed trusted third-party apps and platform environment variables
SISVISA (Brazil)
102,215 Brazilian health surveillance records leaked including IDs and tax data
CISA/US Government
US agency breached via Cisco vulnerability with FIRESTARTER backdoor malware allowing persistent access
165 organizations breached via Snowflake platform by ShinyHunters through compromised
165 organizations breached via Snowflake platform by ShinyHunters through compromised Anodot access
Data breach
Data breach exposed SSNs and medical records of patients
Allstate
Breach exposed employee-related records, part of pattern targeting insurers
ShinyHunters (multiple brands)
Hacking group claimed compromise of 9 major brands including Zara, affecting 9M+ records
Sandhills Medical Foundation
170,000 individuals affected in ransomware breach of South Carolina healthcare provider
Nissan
Data breach involving information held by third-party vendor; hacking group claimed breach
Tribeca Festival
Data leak exposed hundreds of thousands of records and contact info for celebrities
Żabka Polska
Data breach exposing 541,000 Jira issues and customer data from major Polish retailer
ANTS (French National Agency)
Cyberattack exposed 19 million records from France's identity agency with personal data linked to ID systems