Catwatchful
61,641 records exposed — Email addresses, Passwords
Latest Disclosures
QIMR Berghofer (Australia)
Medical research data from 68K clinical trial participants exposed in targeted attack
Marqeta Card Issuing Platform
1.3M virtual card records and transaction data exposed via API vulnerability
Plaid Technologies
2.3M linked bank account tokens compromised
Piedmont Healthcare
1.3M patient records exposed in third-party vendor breach
Air New Zealand
210K passenger records stolen
University of Johannesburg
180K student records compromised
Apollo Hospitals (India)
1.5M patient records compromised in ransomware attack
Naver Corp (South Korea)
1.3M user records compromised via LINE shared infrastructure
Erasmus Medical Center (Rotterdam)
280K patient records compromised
El Corte Ingles
670K customer loyalty records stolen
Maybank (Malaysia)
1.1M customer records compromised in vendor breach
Twilio (SendGrid)
33M email addresses and API keys exposed via compromised internal support tools
Have Fun Teaching
27,126 records exposed — Browser user agent details, Email addresses, IP addresses, Names and 3 more
Robinsons Malls
195,597 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 2 more
Wealthsimple (Canada Fintech)
440K investor records exposed — portfolio holdings and trading activity data compromised
Canva (Australia)
2.4M user records including hashed passwords exposed via API vulnerability at design platform
Vodafone UK
670K subscriber records exposed via API vulnerability
Supabase (YC Startup)
112K database connection strings exposed — open-source backend-as-a-service misconfiguration
Target Corporation (2025)
2.1M customer records exposed via compromised third-party loyalty platform integration
Idaho Transportation Department
560K driver records stolen
Principal Financial
340K retirement account records stolen
MOVEit Education Victims (Aggregate)
800+ educational institutions affected by CL0P MOVEit exploitation — millions of student records
Government of Yukon
18K resident records stolen in network intrusion