Bosch Group
560K manufacturing and IoT device records exposed
2026 Data Breaches Year-to-Date (1189 indexed)
Government of Prince Edward Island
78K health card records compromised
MEC (Mountain Equipment)
450K member records compromised
City of Winnipeg (2026)
280K resident records compromised
The Ottawa Hospital
780K patient records exposed in data exfiltration
NEC Corporation
560K corporate client records stolen
Starbucks Corporation
950K rewards member records exposed via API vulnerability in mobile order-ahead system
City of Toronto (2026)
420K resident records stolen in targeted attack
TMX Group (TSX)
450K market data records exposed
Social Security Administration
3.6M beneficiary records exposed via compromised contractor with access to benefits system
Linear (Project Management)
120K workspace records exposed via OAuth misconfiguration
MedStar Health (2026)
2.1M patient records compromised in ransomware incident
Epic Systems (Vendor Incident)
2.1M patient records accessed via compromised third-party integration at EHR giant
Cleveland Clinic
1.3M patient records exposed via zero-day in medical imaging PACS system
Accenture (Client Data)
1.4M client consulting records from 23 countries exposed via LockBit affiliate intrusion
Hewlett Packard Enterprise (HPE) OneView
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code ex
SNC-Lavalin / AtkinsRealis (Canada)
190K employee and project records from Canadian engineering firm compromised
Microsoft Office
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineT
Bombardier Aerospace
Engineering documents and employee data stolen via Accellion FTA exploit — posted on CL0P leak site
WhiteDate
20,363 records exposed — Ages, Astrological signs, Bios, Device information and 18 more
Banca Transilvania (Romania)
340K customer records stolen
Mapfre Insurance
450K policyholder records compromised
ESB Networks (Ireland)
280K utility records compromised
Chicago Public Schools (2026)
670K student records stolen in ransomware attack