Oman Ministry of Health
280K patient records exposed
2026 Data Breaches Year-to-Date (1187 indexed)
Microsoft Windows
Microsoft Windows NULL Pointer Dereference Vulnerability — Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny service locally.
BridgePay Confirms Ransomware Attack, No
The services of Florida-based payments platform BridgePay are offline due to a ransomware attack
Researchers Find 40,000+ Exposed OpenClaw
SecurityScorecard has identified over 40,000 OpenClaw deployments exposed to potential attack
Emirates Airlines
640K Skywards member records including travel history and contact data compromised
Thales Group (France)
340K defense and aerospace employee records exposed via LockBit 3.0 ransomware
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
Baystate Health
440K patient records exposed in spear-phishing attack on Massachusetts health system
ATO Australia (Tax)
1.1M taxpayer records exposed via zero-day in myGov authentication system
ServiceNow ITSM Platform
620K enterprise workflow configurations exposed via compromised instance admin accounts
Instacart Grocery Delivery
680K shopper and customer records exposed via third-party payment processor compromise
Cathay Pacific Airways
9.4M passenger records re-exposed as 2018 breach data reappears on new dark web marketplace
CVS Health / Aetna
3.4M patient pharmacy and insurance records exposed via compromised prescription gateway
University of Toronto
380K student and staff records compromised in targeted phishing campaign
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Fortinet (Security Vendor)
440K customer records from FortiGate management portal exposed via zero-day authentication bypass
Substack
697K subscriber records exposed — email addresses, phone numbers, internal metadata
Substack Confirms Data Breach, "Limited
Substack did not specify the number of users affected by the data breach
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
Substack
663,121 records exposed — Email addresses, Phone numbers
Discovery Health (South Africa)
560K medical records compromised
National Taiwan University
210K student records exposed
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
Couche-Tard (Circle K Canada)
1.2M customer payment records exposed in POS breach