Generali Group
890K insurance records stolen in targeted attack
Finance & Banking Data Breaches (713 indexed)
Swiss Re (Insurance)
340K reinsurance policyholder records from global operations exposed in targeted attack
Capital One (2025)
3.2M credit card applicant records exposed via new cloud misconfiguration — second incident
Japan Post Holdings
1.5M postal banking records exposed
Block Inc (Square)
1.4M merchant records compromised in insider incident
Deutsche Bank
1.8M customer records from private banking division exposed via compromised document management
FICOBA (French National Bank Registry)
1.2M bank accounts potentially compromised in national registry breach
Charles Schwab
920K brokerage account records exposed via compromised data analytics vendor
Commonwealth Bank (Australia)
1.9M customer records from wealth management division exposed via partner API vulnerability
HSBC (Global)
1.6M customer records from US and UK operations exposed via MOVEit successor vulnerability
Morgan Stanley (Cloud)
680K wealth management client records exposed via misconfigured cloud storage bucket
Visa Inc. (Token Service)
1.1M tokenized card records exposed via vulnerability in token provisioning service
Ally Financial (Auto Lending)
1.1M auto loan records exposed via compromised dealer management system integration
Rogers Bank (Canada)
320K credit card applicant records exposed via compromised underwriting platform
JPMorgan Chase (Vendor)
4.7M customer records exposed via compromised third-party payment processing vendor
TMX Group (TSX)
450K market data records exposed
Shinhan Financial Group
780K banking records stolen
CIRO (Canadian Investment Regulatory Org)
750K Canadian investors exposed — SINs, income, account statements via phishing attack
Societe Generale (2026)
1.5M customer records compromised in second incident
Scotiabank (Canada)
2.1M customer records from Caribbean and Central American operations exposed
Mapfre Insurance
450K policyholder records compromised
Banca Transilvania (Romania)
340K customer records stolen
Bank Leumi (Israel)
560K customer records exposed in credential harvesting
Discover Financial Services
520K card holder records exposed via vulnerability in mobile banking application