Multiple financial firms
Hackers breaking into large U.S. financial firms to steal sensitive data and extort victims
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
Hackers breaking into large U.S. financial firms to steal sensitive data and extort victims
Company accounts accessed and customer data stolen in cloud data-theft attacks
ExfilSquad stole 135,000 contact records and leaked on dark web
Wave of cyberattacks by UNC6671 extortion group targeting hedge funds and private-equity firms
Hacker stole data from 165+ Snowflake customers, billions of records compromised
Hackers accessed names, email addresses, phone numbers, and physical addresses of all customers
Hacker stole billions of records from 165+ companies via Snowflake compromise
200 accounts compromised through on-premises Microsoft SharePoint vulnerabilities
Hackers compromised 200 accounts; anomalies detected in on-premises Microsoft servers
Patient health data and intellectual property stolen from cloud environment in cybersecurity breach
Thousands of patient records stolen in major ransomware attack disrupting healthcare services
200 accounts compromised, SharePoint vulnerabilities suspected in on-premises Microsoft servers
Unpatched CMS and missed alerts led to sensitive data leak
Ransomware attack shut down dairy operations; $4 billion brand impacted
Data breach at CEVA Logistics (Valve's European logistics partner) exposed customer names, addresses, and order data
2025 network breach exposed sensitive healthcare billing data affecting 1.26 million people
Exposed private GitHub token gave unauthorized access to internal systems for approximately one year
Police, government and customer contact information compromised and exposed on dark web
Data breach exposed 4.9 million confirmed accounts, 42 million claimed by attackers
Exposed private GitHub token gave unauthorized access to private repos and internal systems for a year
Full medical and financial records confirmed exposed
678,000 personal and financial tax records exposed in cyberattack
Cyberattack exposed hospital records on approximately 13,000 patients in New Jersey
Ransomware attack; hackers deleted stolen data after ransom gang confirmation