Live disclosure tracker · updated continuously

Education Sector Data Breaches

Universities, K-12 districts, and ed-tech vendors hold massive student-record databases that attract identity-theft operations and ransomware groups. Below is every education-sector breach LeakTrace has indexed.

98B+
Records Exposed
12535
Incidents
94+
Countries
+104%
Breach Velocity YoY
Browse by sector
All breaches Healthcare Finance Government Technology Retail Education Legal
Browse by year
2024 2025 2026 2026 Index

Education Sector Data Breaches (12535 indexed)

high · retail · May 30, 2026

Atlas Menu

63,926 records exposed — Email addresses, IP addresses, Passwords, Support tickets and 1 more

View incident → Indexed 3 months ago
high · tech · May 29, 2026

Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability — Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorize

medium · finance · May 28, 2026

Kemper

269,299 records exposed — Email addresses, Names, Partial credit card data, Phone numbers and 2 more

View incident → Indexed 3 months, 1 week ago
high · government · May 28, 2026

Charter

4,851,517 records exposed — Email addresses, Job titles, Names, Phone numbers and 1 more

View incident → Indexed 3 months, 1 week ago
critical · tech · May 27, 2026

Nx Nx Console

Nx Console Embedded Malicious Code Vulnerability — Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfusca

View incident → Original disclosure Indexed 3 months, 1 week ago
medium · finance · May 27, 2026

Mytheresa

84,108 records exposed — Email addresses, Names, Partial credit card data, Phone numbers and 3 more

View incident → Indexed 3 months, 1 week ago
critical · tech · May 27, 2026

TanStack TanStack

TanStack Unspecified Vulnerability — TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a truste

View incident → Original disclosure Indexed 3 months, 1 week ago
high · finance · May 26, 2026

Ameriprise

502,597 records exposed — Email addresses, Employers, Financial transactions, Job titles and 3 more

View incident → Indexed 3 months, 1 week ago