CVS Health / Aetna
3.4M patient pharmacy and insurance records exposed via compromised prescription gateway
2026 Data Breaches Year-to-Date (645 indexed)
Substack
697K subscriber records exposed — email addresses, phone numbers, internal metadata
Fortinet (Security Vendor)
440K customer records from FortiGate management portal exposed via zero-day authentication bypass
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
Substack Confirms Data Breach, "Limited
Substack did not specify the number of users affected by the data breach
LPL Financial
780K advisor and client records exposed
Confluent
180K streaming platform records exposed
Discovery Health (South Africa)
560K medical records compromised
Nutrien (Saskatchewan)
670K agricultural customer records stolen
AGL Energy
450K customer records exposed in targeted attack
Baker McKenzie
120K client records from 47 offices worldwide exposed via compromised email gateway
Equinor (Norway)
780K employee and operations records compromised
Generali Group
890K insurance records stolen in targeted attack
SmarterTools SmarterMail
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability — SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This co
React Native Community CLI
React Native Community CLI OS Command Injection Vulnerability — React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the M
Lonza Group (Switzerland)
280K pharmaceutical manufacturing records exposed
Zara (Inditex)
890K customer records stolen
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
Kinaxis (Ottawa)
210K enterprise supply chain records exposed
National Taiwan University
210K student records exposed
Swiss Re (Insurance)
340K reinsurance policyholder records from global operations exposed in targeted attack
Betterment
1,435,174 records exposed — Dates of birth, Device information, Email addresses, Employers and 5 more
Allen & Overy
290K client records exposed in LockBit ransomware attack