City of Indianapolis
340K resident records stolen
Latest Disclosures
Royal Adelaide Hospital
340K patient records exposed
Enbridge Inc
780K customer and pipeline operational records exposed
Sharp Corporation
340K customer records stolen
OpenPLC ScadaBR
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability — OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload a
Amazon (Ring / Alexa)
2.8M smart home device user records exposed via misconfigured internal analytics pipeline
Android Framework
Android Framework Privilege Escalation Vulnerability — Android Framework contains an unspecified vulnerability that allows for privilege escalation.
Android Framework
Android Framework Information Disclosure Vulnerability — Android Framework contains an unspecified vulnerability that allows for information disclosure.
US Patent and Trademark Office
340K patent application records exposed
Cedars-Sinai Medical Center
420K patient records exposed via phishing attack on physician email accounts
University of Warsaw
180K student records compromised
Ameriprise Financial
560K client records stolen
ManageMyHealth (New Zealand)
1.8M registered health platform users — 126K patients directly affected
Zilvia.net
287,863 records exposed — Email addresses, IP addresses, Passwords, Usernames
GitLab
560K repository metadata and pipeline records stolen
Santander (2025)
1.1M customer records compromised in vendor breach
Blake Cassels & Graydon
340K client records stolen in ransomware
White & Case
180K client records compromised
Baker & Hostetler (Law Firm Sector)
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
Mubadala Investment (UAE)
210K investment records stolen
Sainsbury's
670K customer records exposed via vendor breach
OpenPLC ScadaBR
OpenPLC ScadaBR Cross-site Scripting Vulnerability — OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.
China Software Developer Network
6,414,990 records exposed — Email addresses, Passwords, Usernames