Trillium Health Partners (Ontario)
420K patient records compromised in ransomware attack
Latest Disclosures
City of Savannah GA
Ransomware disrupted city services
Regal Medical Group
3.3M patient records exposed in data exfiltration incident
Hathway
4,670,080 records exposed — Device information, Email addresses, IP addresses, Names and 5 more
Sam's Club
90K customer records exposed in credential stuffing
Edmonds School District (WA)
14K student records exposed in data breach
Cravath Swaine & Moore LLP
SEC insider trading investigation — Chinese hackers targeted deal data in M&A cases
University of California system
3.4M student and staff records exposed via MOVEit
Vietnam Social Security (VNPT)
5M citizen records exposed from government social security system
Montefiore Medical Center
260K patient records stolen by insider threat employee
Ivanti
Multiple zero-day VPN vulnerabilities exploited by Chinese APT
Ivanti VPN (Multiple Victims)
Critical zero-day chain exploited by state-sponsored actors — CISA emergency directive
Ivanti VPN (CVE-2024-21887)
Chinese state hackers mass-exploited Ivanti VPN zero-days — 1,700+ organizations breached
Ivanti (Pulse Secure)
Chinese APT exploited VPN zero-days affecting thousands of organizations
LCBO (Ontario)
Customer credit card data skimmed via Magecart web injection on provincial liquor retailer
City of Irving TX
36K records exposed in ransomware
LoanDepot Inc.
16.6M customer records stolen in ransomware attack — SSNs, financial account numbers exposed
Blackhawk Network
73K customer records exposed
Equifax (2024 Settlement)
$700M settlement payments began — 147M affected consumers eligible for monitoring credit
Flair Airlines (Canada)
Internal systems compromised — pilot training and scheduling data exposed
Hathway Cable (India)
41.5M subscriber records exposed — emails, addresses, device info
LoanDepot Mortgage
17M customer records stolen in ALPHV ransomware attack — mortgage applications and SSNs
Riverside Community Care
25K patient records exposed
Integris Health (Oklahoma)
2.4M patient records stolen — attackers emailed patients directly demanding payment