Ernst & Young (EY)
Third-party IT service breach exposed client tax data (March 28 - April 12, 2026)
2026 Data Breaches Year-to-Date (3100 indexed)
Adams County
Ransomware attack crippled county servers, week-long restoration
Mexican Government (9 agencies)
Single hacker exploited Claude Code and OpenAI platforms to breach 9 Mexican government agencies
Adams County Government
Ransomware attack disabled county systems for over a week; $250K restoration
Fortinet
75,000 firewalls compromised exposing global enterprises
24 billion exposed records including usernames, passwords, URLs from infostealer malware
24 billion exposed records including usernames, passwords, URLs from infostealer malware
Intesa Sanpaolo S.p.A.
Employee unlawfully accessed customer data over two years
Bank of Baroda
Alleged data breach affecting customer data
Instructure Canvas
ShinyHunters breach claimed 275 million records from 8,809 schools, exposing student and staff data
South Florida Injury Centers
1,525 individuals affected; SSNs and medical records exposed
Ryanair
Attackers claim to have stolen court documents, flight data, and banking details posted on hacker forums.
ANTS (French Identity Agency)
19 million records exposed in cyberattack on France's national identity agency
China-linked malware on USB drives used on classified networks, undetected for nearly a
China-linked malware on USB drives used on classified networks, undetected for nearly a year
ANTS (France ID Agency)
Cyberattack exposed 19 million records from French national identity agency
ANTS (France Identity Agency)
19 million records exposed in cyberattack on French national ID agency
Laurel Eye Clinic
Security incident exposed patient data in ransomware attack
CISA (U.S. Federal Agency)
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March 2026
Marquis
Ransomware attack exposed 672,000-788,000 records; names, addresses, card numbers stolen
ANTS
Cyberattack on France's national identity agency exposed 19 million records
Puerto Rico Government Agency
Mapping service exposed 1 million Social Security numbers
Vercel
OAuth supply chain compromise exposing environment variables through trusted third-party apps
T-Mobile USA
Insider incident data breach with limited impact
CISA/US Department
US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March
Fortinet FortiGate
73,932 FortiGate firewall systems exposed with valid administrative and VPN credentials