Allen & Overy
290K client records exposed in LockBit ransomware attack
2026 Data Breaches Year-to-Date (1187 indexed)
Kinaxis (Ottawa)
210K enterprise supply chain records exposed
Zara (Inditex)
890K customer records stolen
SmarterTools SmarterMail
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability — SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This co
React Native Community CLI
React Native Community CLI OS Command Injection Vulnerability — React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the M
Swiss Re (Insurance)
340K reinsurance policyholder records from global operations exposed in targeted attack
Generali Group
890K insurance records stolen in targeted attack
Equinor (Norway)
780K employee and operations records compromised
AGL Energy
450K customer records exposed in targeted attack
LPL Financial
780K advisor and client records exposed
Confluent
180K streaming platform records exposed
Weil Gotshal & Manges
280K restructuring records stolen
Nutrien (Saskatchewan)
670K agricultural customer records stolen
Baker McKenzie
120K client records from 47 offices worldwide exposed via compromised email gateway
Betterment
1,435,174 records exposed — Dates of birth, Device information, Email addresses, Employers and 5 more
Lonza Group (Switzerland)
280K pharmaceutical manufacturing records exposed
Indian Council of Medical Research
81M citizen health records from Aadhaar-linked database exposed via API vulnerability
Home Depot (2026)
3.2M customer records exposed via SaaS vendor breach affecting loyalty program data
GitLab Community and Enterprise Editions
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability — GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized exte
Sangoma FreePBX
Sangoma FreePBX OS Command Injection Vulnerability — Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known
Toyota Motor (Global)
2.15M customer records from connected vehicle services exposed via misconfigured cloud database
ServiceNow
1.7M ITSM records from enterprise customers exposed via zero-day in Washington DC instance
Sangoma FreePBX
Sangoma FreePBX Improper Authentication Vulnerability — Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services
Vibe-Coded Moltbook Exposes User Data,
Wiz Security claims Moltbook misconfiguration allowed full read and write access