135,000 contact records stolen and leaked on dark web by ExfilSquad
135,000 contact records stolen and leaked on dark web by ExfilSquad
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
135,000 contact records stolen and leaked on dark web by ExfilSquad
200 accounts compromised in on-premises Microsoft servers, suspected SharePoint vulnerabilities
Cyberattack exposed 19 million records including personal data linked to identity documents
Cyberattack exposed personal information of Xfinity customers; $117.5 million settlement reached
At least 1.2 million individuals impacted; names, addresses, phone numbers, Social Security numbers and financial information stolen
Exposed private GitHub token gave unauthorized access to private repos and internal systems for a year
Data breach exposed 4.9 million confirmed accounts, 42 million claimed by attackers
1.26 million patients exposed in PEAR ransomware attack; medical billing and practice management data compromised
62.2 million people affected in third-largest US healthcare hack with breach notices
Ransomware gang stole data in attack; gang later confirmed data deletion
Cyberattack forced closure of 10 facilities; nonprofit health system operating in limited capacity
Cyberattack exposed personal information of Xfinity customers; $117.5M settlement reached
Ransomware attack on government contractor exposed data of at least 25 million people
Hacking group claims data breach at logistics division, cyberattack and extortion
135,000 contact records stolen, police and government data leaked on dark web
Healthcare billing company breach exposed sensitive data affecting 1.26 million people
Xfinity data breach exposed personal information; Comcast settled class-action lawsuit for $117.5 million
135,000 contact records stolen, data published on dark web
Corporate data stolen via social engineering; hackers accessed three employee computers
CEVA Logistics breach exposed names and addresses of European Steam hardware buyers
62.2 million people affected; third-largest US healthcare breach ever
Ransomware attack resulted in data leak including driver's license numbers and voter registration data
Genetic testing company data breach exposed IVF patient information