Microsoft Windows
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
2026 Data Breaches Year-to-Date (1188 indexed)
Costco Wholesale
1.9M customer records stolen from payment processing system via skimming malware at warehouses
Telus Health (Canada)
1.8M employee benefits records from Canadian health benefits platform compromised
New Zealand Ministry of Health
890K patient vaccination records exposed via misconfigured COVID-era data sharing portal
Gogs Gogs
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
Kirkland & Ellis LLP
Client M&A deal documents and litigation files exposed via compromised document management system
6,215,150 records exposed — Display names, Email addresses, Geographic locations, Phone numbers and 1 more
Tesla Inc.
75K employee records leaked by former staff to German newspaper — payroll, SSNs, complaints
Datadog Inc.
APM and logging data from 340 enterprise customers exposed via compromised CI/CD pipeline
City of Toronto (2026)
420K resident records stolen in targeted attack
Spark New Zealand
450K customer records exposed in targeted attack
BreachForums (2025)
672,247 records exposed — Email addresses, Forum posts, Passwords, Private messages and 1 more
Teck Resources (BC)
450K mining records compromised
Garuda Indonesia
450K passenger records exposed
ABB Ltd (Switzerland)
560K automation records exposed
Utah Division of Technology
670K citizen records exposed
Inova Health (Virginia)
670K patient records exposed in vendor breach
AIIMS Delhi
2.1M patient records stolen in second cyberattack
Shinhan Financial Group
780K banking records stolen
Instagram (Alleged Leak)
17.5M account records posted to BreachForums
Booking.com
2.3M guest records compromised in phishing campaign targeting hotels
Scotiabank (Canada)
2.1M customer records from Caribbean and Central American operations exposed
CIRO (Canadian Investment Regulatory Org)
750K Canadian investors exposed — SINs, income, account statements via phishing attack
Societe Generale (2026)
1.5M customer records compromised in second incident