NHS Dumfries & Galloway (INC Ransom)
INC Ransom gang published 3TB of stolen patient data on dark web
Latest Disclosures
Perry Johnson & Associates (PJ&A)
9M patient transcription records stolen — medical histories, diagnoses, SSNs exposed
ClickASnap
3,262,980 records exposed — Email addresses, Names, Passwords, Physical addresses and 3 more
France Travail / Pole Emploi
43M citizen records stolen from French employment agency — names, SINs, contact info
Discord
180K user records exposed via support agent compromise
Allegheny Health Network
88K patient records exposed
Kennesaw State University (GA)
68K student records exposed
ING Group (Netherlands)
1.2M customer records accessed via compromised mobile banking API
Singapore Airlines
580K frequent flyer records exposed via compromised SITA passenger service system
Panda Express
190K employee records exposed in corporate breach
Ochsner Health (Louisiana)
660K patient records exposed via tracking pixels — metabolic and cancer screening data shared
Stellantis (Chrysler/Fiat)
1.2M customer records from connected vehicle telematics exposed via API vulnerability
Wayfair
1.3M customer records exposed in targeted attack
NTT Data (Japan)
1.4M enterprise records exposed in cloud infrastructure breach
Deutsche Telekom
2.1M customer records exposed in targeted credential harvesting campaign
NHS Wales
670K patient records exposed in ransomware attack on shared infrastructure
Saputo Inc (Montreal)
450K employee and supplier records compromised
HDFC Bank (India)
2.1M customer records exposed in API vulnerability
BC Hydro
780K customer records exposed in vendor data breach
APK.TW
2,451,197 records exposed — Email addresses, IP addresses, Passwords, Usernames
Roku (Account Breach)
576K accounts compromised via credential stuffing — payment data accessed on 15K accounts
Salem Clinic / OHSU Health
443K patient records exposed in vendor breach
College of Nurses of Ontario
Cyberattack compromised member personal data
Roku Streaming Platform
576K accounts compromised via credential stuffing — payment methods accessed