US Government Agency (CISA)
Unnamed US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
Unnamed US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
500,000 Britons' private health records offered for sale on Chinese website; de-identified data advertised
Data breach occurring April 21, 2026 affecting customers with personal information exposed
Employee unlawfully accessed customer data over two years; insider threat breach
Major cyberattack on France's identity agency exposed 19 million personal records
Breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed unauthorized access through March
Third-party data breach compromised patient information
Australian travel agency customer records compromised; threat actor claimed data on underground hacking forums
Breach claimed on hacker forums, exposing legal emails, flight data, and banking details
Confidential health records from 500k Britons exposed and offered for sale on Chinese website
Breach exposed legal emails, flight data, and banking details; data claimed on hacker forums
253,510 records exposed — Device information, Email addresses, IP addresses, Names and 4 more
Data breach involving information held by third-party vendor
Single hacker compromised 9 government agencies using Claude Code and OpenAI tools
ShinyHunters breached Rockstar Games via Snowflake; 165 organizations affected in supply chain attack
Senior care provider affected by ransomware attack exposing patient data
Breach through compromised Anodot Snowflake access by ShinyHunters group; 165 organizations affected in cascading attack.
Ransomware attack with data stolen; hackers confirmed data deletion
22 million user records exposed including emails, passwords, and banking data
Data breach on April 21, 2026 exposing personal information of customers
Data breach resulting in $1.25M regulatory fine
Confidential health records exposed online and advertised for sale on Chinese website
Major cyberattack on national identity agency exposed 19 million records with personal data