Newcastle University
440K admissions records exfiltrated by ExfilSquad
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
440K admissions records exfiltrated by ExfilSquad
Massive data breach; company allegedly knew about it but delayed reporting to regulators
100K+ officer and staff contact records exposed
Ongoing malware attack closes 83 facilities
Billions of records stolen across 165 organizations
Canadian nonprofit breached by TheGentlemen
1.26 million patients exposed in PEAR ransomware attack; healthcare billing and practice-management data
42 million records exposed in 2025 data breach
Thousands of NHS patient records stolen in major ransomware attack
2.6M customer and employee PII records leaked
2.7M SSNs and health benefits records exfiltrated via API
62.2M records exposed, SSNs and health data
607K parent and staff contact records stolen
90M records including financial and PII data claimed stolen
135K law enforcement contact records published on dark web
Internal legal data stolen by INC_RANSOM
Breach exposed hospital records on 13,000 New Jersey patients through cyberattack on law firm
135K police officer contact records leaked
2.7M SSNs and benefits data exfiltrated
100K+ officer and gov contact records leaked
440K admissions records stolen by ExfilSquad
One of the largest healthcare data breaches in American history; multiple companies affected
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions.
Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.