Multi-year data breach
Multi-year data breach exposed residents' private health-related information
Education Sector Data Breaches (13068 indexed)
Years-long data breach exposing residents' private health-related information
Years-long data breach exposing residents' private health-related information
Unnamed Law Firm
Law firm breach exposed hospital patient records for approximately 13,000 patients in New Jersey
Multi-year data breach of residents' private health-related information
Multi-year data breach of residents' private health-related information
Yearslong data breach of residents' private health-related information disclosed
Yearslong data breach of residents' private health-related information disclosed
France Telco Subsidiaries
Data regulator fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations including lack of basic security controls
Multiple Water Utilities
Cyberattacks on operational technology across at least 12 US states; Iranian-linked campaign
HCL Technologies
Hacker group claimed access to employee data; company stated data may be years-old
Classified networks compromised with China-linked malware via USB drives, undetected for
Classified networks compromised with China-linked malware via USB drives, undetected for nearly a year
Yearslong breach of residents' private health-related information
Yearslong breach of residents' private health-related information
FirstClass Travel Agency
Sydney-based travel agency; threat actor on underground forum alleged customer records breach
Inadvertent exposure of personal data for 700,000 state residents
Inadvertent exposure of personal data for 700,000 state residents
TrueConf
Client installers compromised with backdoors after server breach by Head Mare group
Unlimited Technology Systems
3.8 million people impacted by data breach at healthcare software company
Cyberattacks on operational technology across water systems in South Dakota, Georgia and
Cyberattacks on operational technology across water systems in South Dakota, Georgia and 10 other states
LexisNexis
Suspicious server activity led to shutdown of Diligence, Metabase API, and Newsdesk services
Yearslong breach exposing residents' private health-related information
Yearslong breach exposing residents' private health-related information
Classified networks compromised via China-made malware USB drives; breach undetected for
Classified networks compromised via China-made malware USB drives; breach undetected for nearly a year
France telecom subsidiaries
Data breach in 2024 resulted in €42 million fine for cybersecurity vulnerabilities and lack of basic security controls
Exact Sciences/Abbott
Sensitive personal health information exposed from at-home diagnostic tests
Allstate
Data breach exposed employee-related records in insurance company cyber incident
Instructure
Supply chain breach of Canvas platform generated 58% of all breach notices in 2026
Years-long data breach of residents' private health-related information
Years-long data breach of residents' private health-related information
Yearslong data breach of residents' private health-related information reported
Yearslong data breach of residents' private health-related information reported