LastPass
Data breach at third-party vendor exposed customer data
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
Data breach at third-party vendor exposed customer data
Breach affected internal datasets and credentials, users urged to rotate tokens
Data breach involving 35GB of internal data including source code and credentials
Hackers accessed customer loyalty accounts using stolen usernames and passwords
Ransomware attack shut down dairy operations, disclosed to SEC
Ransomware attack on Coca-Cola's dairy unit affected production-related systems
Ransomware attack resulted in data theft; hackers confirmed deletion of stolen data
Hospital software vendor breach exposed healthcare customer data through supply-chain attack
Ransomware attack with hackers claiming data deletion; financial institution impacted
Internal datasets and credentials exposed; users urged to rotate access tokens
Cyber incident under investigation affecting medical device company
35GB of internal data stolen including source code and credentials
State-owned forestry company still restoring systems weeks after ransomware attack
Ransomware attack on Coca-Cola's dairy unit affecting production-related systems; operations forced offline
Hospital software vendor breach exposing customer healthcare data through supply-chain attack
Insurer disclosed data breach; extent of data exposure and record count not yet determined
Breach exposed client tax records and financial information
Patient records stolen in cyberattack on Australian healthcare provider affecting 21 clinics
CMD Organization stole and deleted 10 TB in ransomware attack, demanded $1.9M ransom
Rogue femtocell breach exposed 16,647 subscribers and stole SMS payment information
Personal data breach and unauthorized micropayment damages caused by illegal base stations
Hackers stole names, phone numbers, and physical addresses of 55M users
Hackers accessed cloud environment, stealing patient health data and proprietary company information
Hacker claimed to steal information of 2 million customers from Australian energy giant