Ally Financial (Auto Lending)
1.1M auto loan records exposed via compromised dealer management system integration
2026 Data Breaches Year-to-Date (645 indexed)
Zscaler Cloud Security
150K enterprise zero-trust configurations exposed — test environment breach spread to prod
Alimentation Couche-Tard (Canada)
620K Circle K loyalty customer records stolen from Canadian convenience store operator
Harvard University
520K alumni and donor records exposed via compromised advancement office database
Conduent (Government Contracts)
4.3M individuals affected via Fortune 500 contractor — multiple state governments impacted
Match Group (Hinge / OkCupid)
10M+ dating records stolen by ShinyHunters via Okta SSO social engineering
Rogers Bank (Canada)
320K credit card applicant records exposed via compromised underwriting platform
Amazon Web Services (Customer Data)
2.8M customer billing records and account metadata exposed via misconfigured internal tool
JPMorgan Chase (Vendor)
4.7M customer records exposed via compromised third-party payment processing vendor
Microsoft Windows
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
Costco Wholesale
1.9M customer records stolen from payment processing system via skimming malware at warehouses
Telus Health (Canada)
1.8M employee benefits records from Canadian health benefits platform compromised
New Zealand Ministry of Health
890K patient vaccination records exposed via misconfigured COVID-era data sharing portal
Gogs Gogs
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
Kirkland & Ellis LLP
Client M&A deal documents and litigation files exposed via compromised document management system
Tesla Inc.
75K employee records leaked by former staff to German newspaper — payroll, SSNs, complaints
6,215,150 records exposed — Display names, Email addresses, Geographic locations, Phone numbers and 1 more
Datadog Inc.
APM and logging data from 340 enterprise customers exposed via compromised CI/CD pipeline
Booking.com
2.3M guest records compromised in phishing campaign targeting hotels
Utah Division of Technology
670K citizen records exposed
Inova Health (Virginia)
670K patient records exposed in vendor breach
AIIMS Delhi
2.1M patient records stolen in second cyberattack
Shinhan Financial Group
780K banking records stolen
Teck Resources (BC)
450K mining records compromised