CISA (Internal Systems)
CISA confirmed breach of two internal systems — Ivanti Connect Secure vulnerability exploited
Latest Disclosures
Dollar Tree / Family Dollar
2M customer and employee records exposed via Zeroed-In Technologies vendor breach
Elastic (Elasticsearch)
1.9M customer deployment records exposed
Genworth Financial
2.5M policyholder records exposed via MOVEit vulnerability at life insurance provider
Allegro (Poland)
780K customer records exposed in platform breach
Gap Inc
780K customer records exposed in loyalty platform breach
Cardiff University
210K student and research records compromised
University of Southern California
160K student and donor records exposed via compromised development office systems
Mizuho Financial Group
1.2M banking records compromised in vendor breach
Olympus Corporation (Japan)
280K medical device records exposed
Rouge Valley Health System (Ontario)
230K patient records including surgical notes exposed via compromised portal
City of Regina
150K resident and utility records compromised
Fraser Health (BC)
890K patient records exposed in network breach
Davies Ward Phillips (Canada)
210K client records stolen
Color Dating
220,503 records exposed — Bios, Dates of birth, Email addresses, Geographic locations and 3 more
Flat Earth Sun, Moon and Zodiac App
33,294 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 3 more
Berkeley Research Group
Ransomware during $700M leveraged buyout — M&A intelligence from hundreds of deals exposed
Marcus by Goldman Sachs
340K savings account records exposed in cloud misconfiguration
University of Manitoba
Cyberattack disrupted campus systems — student and staff PII potentially accessed
Concentra Health Services
Occupational health provider breach affecting hundreds of thousands of patient records
Dentons
670K client records stolen in ransomware attack
City of Oakland
600GB of city data published by Play ransomware group — employee records, financial data
US OPM / DOGE Data Exposure
Unauthorized DOGE associates accessed sensitive federal personnel records without clearance
Spyzie
518,643 records exposed — Email addresses