Foster City
Ransomware attack forced city computer system offline; state of emergency declared
2026 Data Breaches Year-to-Date (3100 indexed)
UK BioBank
Confidential health records from flagship medical research project exposed online multiple times
CISA
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
Ransomware attack caused data
Ransomware attack caused data leak exposing patient information from Multiethnic Cohort Study including driver's license and voter data
TriZetto Provider Solutions
Year-long unauthorized access to IT environment exposed PHI of 3.4 million individuals
CareCloud
Electronic health records of patients leaked after hackers accessed healthcare software systems
Ransomware attack led to data leak from Multiethnic Cohort Study including driver's
Ransomware attack led to data leak from Multiethnic Cohort Study including driver's license numbers
Loblaw
Data breach affecting Canadian customers of Loblaw-owned stores
LexisNexis
400K users exposed including federal judges and .gov accounts via cloud system breach
CISA (US Department)
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
UK BioBank
Confidential health records from medical research project exposed online multiple times
Ransomware attack led to data
Ransomware attack led to data leak including driver's license numbers and voter information
LiteLLM
Supply chain attack exposed over 430,000 CI/CD pipelines affecting over 2,500 organizations
UK Biobank
Confidential health records from flagship medical research project exposed online, with data leaked multiple times
UnitedHealthcare
One of the largest healthcare data breaches in American history involving multiple companies
UK BioBank
Confidential health records from flagship medical research project exposed online, leaked dozens of times
Ransomware attack with data
Ransomware attack with data leak including Multiethnic Cohort Study data with driver's license numbers and voter IDs
Companies House (UK)
Data exposed during five-month security issue affecting UK firm records
Marquis
Ransomware attack stole personal and financial data of over 672,000 people from fintech company
Driver's license numbers and voter information from Multiethnic Cohort Study exposed in
Driver's license numbers and voter information from Multiethnic Cohort Study exposed in ransomware attack
UK Biobank
Confidential health records from medical research project exposed online multiple times
LexisNexis
Cloud systems breach exposed records of 400K users including federal judges and .gov accounts
TriZetto (Year-long hack)
Year-long network hack exposed records on 3.4 million people
CareCloud
Healthcare software firm informed SEC of potential patient data leak; electronic health records may have been leaked after system intrusion