MCBS Medical Billing
1.26 million patients exposed in PEAR ransomware attack on medical billing company
2026 Data Breaches Year-to-Date (3095 indexed)
1.26M patient records exposed in PEAR ransomware attack; medical billing data compromised
1.26M patient records exposed in PEAR ransomware attack; medical billing data compromised
Elasticsearch Database (Infostealer logs)
Publicly exposed database leaked 24 billion stolen credentials in June 2026, largest infostealer compilation
Ransomware attack stole thousands of NHS patient records held by Essex healthcare trust
Ransomware attack stole thousands of NHS patient records held by Essex healthcare trust
Law firm (New Jersey)
Data from 13,000 patients exposed via cyberattack on law firm representing hospitals
Thousands of NHS patient records
Thousands of NHS patient records confirmed stolen during major ransomware attack disrupting healthcare
Thousands of NHS patient records
Thousands of NHS patient records confirmed stolen in ransomware attack
FirstClass (Australian Travel Agency)
Customer records allegedly breached by threat actor operating on underground hacking forums
Valve
European logistics partner hit with data breach, customers warned of scam emails
Thailand Digital Ministry
221 million login records exposed, prompting MFA mandate for state systems
Canvas (Learning Management Platform)
Learning platform attacked by ShinyHunters hacker group, security breach disclosed
Police and government contact details including names and emails leaked on dark web
Police and government contact details including names and emails leaked on dark web
Synnovis/NHS (Essex)
Thousands of NHS patient records stolen in ransomware attack affecting Mid South Essex Foundation Trust
Partnered Health (Australian clinics)
Medical records breached including Medicare numbers, treatment details, and pathology results exposed on dark web.
Unknown (Elasticsearch database)
Publicly exposed Elasticsearch database leaked 24 billion stolen credentials; largest infostealer log compilation
Evanston Township High School
Ransomware attack disrupted phone systems and network services
Medical Billing Company (unnamed)
Ransomware attack in 2025 exposed protected health data on 1.3 million people, leaked to dark web
Analog Devices
Semiconductor company data breach from hacker attack detected last month
Unknown (Elasticsearch)
Publicly exposed Elasticsearch database with 24 billion stolen credential records accessible to anyone
Hugging Face
Internal datasets and credentials compromised in breach, users urged to rotate access tokens
Coca-Cola Fairlife
Ransomware attack shut down $4 billion dairy brand operations
Department for Education (DfE)
Cyber attack exposed 607,000 records
Ransomware cyberattack
Ransomware cyberattack exposed thousands of patient records
Oracle WebLogic Server
Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.