Elasticsearch database (infostealer logs)
Publicly exposed database leaked 24 billion stolen credentials, one of largest credential compilations
2026 continues the year-over-year growth trend in confirmed disclosures. The list below updates as new breaches are reported by Verizon DBIR partners and major security news outlets.
Publicly exposed database leaked 24 billion stolen credentials, one of largest credential compilations
Ransomware attack stole thousands of patient records in major healthcare cyberattack
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
Cyberattack on law firm exposed hospital records of nearly 13,000 patients
24 billion stolen credentials leaked in publicly exposed database, largest infostealer log compilation
Thousands of NHS patient records stolen in major ransomware attack affecting healthcare services
Thousands of patient records stolen during major ransomware attack
Customer records and AI model training data exposed; customers not notified
Ransomware attack stole thousands of NHS patient records from Essex healthcare trust
Thousands of patient records stolen in ransomware attack affecting NHS healthcare systems
Ransomware attack on dairy operations by Anubis cybercrime group with data theft
Customer records allegedly breached by threat actors operating on underground forums
FortiBleed campaign exposed verified administrator credentials for 73,932 FortiGate firewalls and VPN devices
Verified administrator credentials and VPN data exposed for 73,932 FortiGate firewalls
SSNs and medical records exposed
Thousands of patient records stolen in ransomware cyberattack on NHS trust in Essex
Canvas platform supply chain breach generating over 50% of all breach notices in 2026
Credential leak exposed administrator credentials for 73,000+ Fortinet VPN and firewall devices
Thousands of patient records stolen in ransomware attack
Server breach exploited by Head Mare group to trojanize client installers with backdoors
Publicly exposed database leaked 24 billion stolen credentials, one of largest infostealer compilations
Publicly exposed Elasticsearch database exposed 24 billion stolen credential records
Thousands of NHS patient records confirmed stolen in ransomware attack
Ransomware attack shut down dairy operations