State of California (DMV Vendor)
2.4M drivers license records exposed via compromised address verification contractor
Latest Disclosures
VIQ Solutions (Court Transcripts)
Legal transcription vendor breach — sensitive court proceedings compromised via subcontractor
Canadian Tire
1.1M customer loyalty records exposed in platform breach
Cisco SD-WAN
Cisco SD-WAN Path Traversal Vulnerability — Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands w
Bell Canada (2026)
2.2M customer records exposed via compromised residential internet provisioning system
Soliton Systems K.K FileZen
Soliton Systems K.K FileZen OS Command Injection Vulnerability — Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP
Raytheon Technologies
430K defense contractor employee records and clearance data compromised via vendor
University of Mississippi Medical Center
University of Mississippi Medical Center is still scrambling to respond to a ransomware attack last Thursday
Leading Semiconductor Supplier Advantest Hit
Advantest, a Japanese specialist in testing computer chips for major semiconductor manufacturers, has deployed incident response protocols following a cybersecurity incident
PwC (Global)
380K audit client records exposed via compromised file transfer platform
Sun Life Financial (Canada)
890K group benefits records compromised via ransomware at claims administrator
CarGurus
12,461,887 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more
Deloitte (Client Data)
240K audit client records from 12 countries exposed via compromised GlobalProtect VPN
Atlassian Confluence Cloud
4.8M wiki pages from enterprise customers exposed via critical authentication bypass
Province of Quebec (Revenu)
670K taxpayer records exposed via compromised e-filing integration at provincial revenue agency
Roundcube Webmail
RoundCube Webmail Cross-site Scripting Vulnerability — RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.
VIQ Solutions (Canada)
Sensitive court transcripts compromised after Indian subcontractor breach — ignored warnings
CarMax
431,371 records exposed — Email addresses, Names, Phone numbers, Physical addresses
Roundcube Webmail
RoundCube Webmail Deserialization of Untrusted Data Vulnerability — RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users because the _from
Hydro-Quebec (Canada)
640K customer billing records exposed via compromised metering data system
University of Sydney (Australia)
340K student records including visa and financial information exposed in targeted attack
Figure
967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
CIBC (Canada)
1.2M customer records compromised via third-party mortgage processing vendor
Dell RecoverPoint for Virtual Machines (RP4VMs)
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability — Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an un