Klue Supply Chain
200 firms hit via stale credential including LastPass and HackerOne
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
200 firms hit via stale credential including LastPass and HackerOne
114GB patient data stolen in ransomware attack
2.7M SSNs and benefits records exposed
Comcast debt-collection vendor FBCS breach exposed personal data of approximately 237K Comcast customers alongside the broader FBCS victim count.
Police and government contacts published on dark web
Client SSNs and PII exposed in intrusion
Nearly 1 petabyte stolen in extortion attack
Client tax documents accessed via third-party platform
900K customer PII records stolen via vishing
Data breach exposed personal and health information of patients
Data breach of Horizon IT scandal victims' records, reprimanded by ICO as entirely preventable
655GB patient and financial records exfiltrated
Law firm pulled into litigation over MOVEit data breach
Cyberattack on law firm exposed hospital records of approximately 13,000 patients in New Jersey
Student and faculty data exfiltrated via ransomware
Financial institution fined $36M by Italian regulator for serious data security failures
2M government records leaked
Data breach affecting hundreds of thousands of Washington customers, notification law violations
5.5 million records alleged stolen and put up for sale on dark web