Credential Compilation (16B Passwords)
16 billion credentials from Google, Apple, Facebook — largest credential dump in history
Latest Disclosures
Smith & Nephew
210K surgical records compromised
BP plc
890K employee records compromised in vendor platform breach
Aflac Incorporated
13M health insurance records compromised — largest healthcare breach of 2025
Bahrain Ministry of Interior
180K citizen records exposed in targeted attack
Suncorp Group
560K insurance records stolen
Fortis Healthcare (India)
670K patient records compromised
WestJet Airlines
1.2M passenger records including government IDs and travel documents
MOL Group (Hungary)
210K fuel card records compromised
Chinese Surveillance Network Breach
4 billion records exposed including banking details and home addresses
Acadia University (Nova Scotia)
65K student records compromised
Via Rail Canada
340K passenger booking records exposed
Societe Generale
560K customer records exposed
Qantas Airways
5.7M customer records stolen via third-party Salesforce integration — data posted on dark web
NHS Dumfries and Galloway
Patient data published by INC Ransom group after Scottish health board refused to pay
Free
13,926,173 records exposed — Bank account numbers, Dates of birth, Genders, Names and 2 more
Fédération Francaise de Rugby
281,977 records exposed — Dates of birth, Email addresses, Names, Phone numbers
Chime Financial
1.1M customer records stolen in targeted attack
Scripps Health (San Diego)
530K patient records re-exposed via legacy system — previously thought contained from 2021
Canva Design Platform
2.5M enterprise workspace records exposed via API misconfiguration — design assets leaked
Coinbase Global
Customer support agents bribed to steal 97K user records — $20M extortion demand
Woolworths Group (Australia 2025)
2.2M MyDeal customer records stolen via compromised subsidiary marketplace platform
Blue Cross Blue Shield of Massachusetts
490K member records exposed via compromised third-party billing vendor
Coinbase
70K user records stolen via bribed overseas support contractors — $20M ransom refused