Telus Health (Canada)
1.8M employee benefits records from Canadian health benefits platform compromised
Latest Disclosures
Microsoft Windows
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
Costco Wholesale
1.9M customer records stolen from payment processing system via skimming malware at warehouses
New Zealand Ministry of Health
890K patient vaccination records exposed via misconfigured COVID-era data sharing portal
Gogs Gogs
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
Kirkland & Ellis LLP
Client M&A deal documents and litigation files exposed via compromised document management system
6,215,150 records exposed — Display names, Email addresses, Geographic locations, Phone numbers and 1 more
Tesla Inc.
75K employee records leaked by former staff to German newspaper — payroll, SSNs, complaints
Datadog Inc.
APM and logging data from 340 enterprise customers exposed via compromised CI/CD pipeline
Starbucks Corporation
950K rewards member records exposed via API vulnerability in mobile order-ahead system
Scotiabank (Canada)
2.1M customer records from Caribbean and Central American operations exposed
Inova Health (Virginia)
670K patient records exposed in vendor breach
CIRO (Canadian Investment Regulatory Org)
750K Canadian investors exposed — SINs, income, account statements via phishing attack
ABB Ltd (Switzerland)
560K automation records exposed
TMX Group (TSX)
450K market data records exposed
Societe Generale (2026)
1.5M customer records compromised in second incident
Shinhan Financial Group
780K banking records stolen
AIIMS Delhi
2.1M patient records stolen in second cyberattack
BreachForums (2025)
672,247 records exposed — Email addresses, Forum posts, Passwords, Private messages and 1 more
Booking.com
2.3M guest records compromised in phishing campaign targeting hotels
Spark New Zealand
450K customer records exposed in targeted attack
Garuda Indonesia
450K passenger records exposed
Teck Resources (BC)
450K mining records compromised
MEC (Mountain Equipment)
450K member records compromised