Aon plc (Insurance)
620K policyholder records from cyber insurance division exposed in targeted attack
Finance & Banking Data Breaches (713 indexed)
Affirm Holdings
470K buy-now-pay-later customer records including credit data exposed via vendor compromise
Bank of Montreal (BMO)
560K customer records accessed via compromised third-party payroll services provider
Leaked Database Sheds Light on
Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors
PayPal Holdings (2026)
35K customer accounts compromised via credential-stuffing attack on checkout integration
Intact Financial (Canada)
560K insurance policyholder records compromised via ransomware attack on claims system
Odido
6,077,025 records exposed — Bank account numbers, Customer service comments, Dates of birth, Driver's licenses and 7 more
Odido
6,077,025 records exposed — Bank account numbers, Customer service records, Dates of birth, Driver's licenses and 7 more
Canadian Tire
38,306,562 records exposed — Dates of birth, Email addresses, Genders, Names and 4 more
PwC (Global)
380K audit client records exposed via compromised file transfer platform
Sun Life Financial (Canada)
890K group benefits records compromised via ransomware at claims administrator
Deloitte (Client Data)
240K audit client records from 12 countries exposed via compromised GlobalProtect VPN
CIBC (Canada)
1.2M customer records compromised via third-party mortgage processing vendor
Figure
967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
Barclays Bank
780K customer records from wealth management division exposed via insider threat
Brookfield Asset Management
480K investor records from Canadian asset manager exposed via compromised fund admin portal
North Korean Hackers Use Deepfake
Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware
Mastercard (EU Processing)
680K European cardholder records exposed via compromised transaction processing node
Banco de Chile
450K customer records exposed in credential harvesting
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
LPL Financial
780K advisor and client records exposed