CIBC (Canada)
1.2M customer records compromised via third-party mortgage processing vendor
Finance & Banking Data Breaches (604 indexed)
Figure
967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
Barclays Bank
780K customer records from wealth management division exposed via insider threat
Brookfield Asset Management
480K investor records from Canadian asset manager exposed via compromised fund admin portal
North Korean Hackers Use Deepfake
Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware
Mastercard (EU Processing)
680K European cardholder records exposed via compromised transaction processing node
Banco de Chile
450K customer records exposed in credential harvesting
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
Generali Group
890K insurance records stolen in targeted attack
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
LPL Financial
780K advisor and client records exposed
Betterment
1,435,174 records exposed — Dates of birth, Device information, Email addresses, Employers and 5 more
Swiss Re (Insurance)
340K reinsurance policyholder records from global operations exposed in targeted attack
Block Inc (Square)
1.4M merchant records compromised in insider incident
Japan Post Holdings
1.5M postal banking records exposed
Deutsche Bank
1.8M customer records from private banking division exposed via compromised document management
Charles Schwab
920K brokerage account records exposed via compromised data analytics vendor
FICOBA (French National Bank Registry)
1.2M bank accounts potentially compromised in national registry breach
Commonwealth Bank (Australia)
1.9M customer records from wealth management division exposed via partner API vulnerability
HSBC (Global)
1.6M customer records from US and UK operations exposed via MOVEit successor vulnerability
Morgan Stanley (Cloud)
680K wealth management client records exposed via misconfigured cloud storage bucket
Visa Inc. (Token Service)
1.1M tokenized card records exposed via vulnerability in token provisioning service