Live disclosure tracker · updated continuously

Finance & Banking Data Breaches

Banks, payment processors, fintechs, and crypto exchanges sit at the top of every threat actor target list. Below is every finance-sector breach LeakTrace has indexed.

98B+

Records Exposed

11965

Incidents

94+

Countries

+104%

Breach Velocity YoY

View Live Map → Run Free Exposure Scan RSS

Browse by sector

All breaches Healthcare Finance Government Technology Retail Education Legal

Browse by year

2024 2025 2026 2026 Index

Finance & Banking Data Breaches (11965 indexed)

critical · finance · Jul 9, 2026

700Credit Automotive

5.8M consumer records stolen via API compromise

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Oracle PeopleSoft Clients

100+ orgs hit via zero-day CVE-2026-35273

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Canada House of Commons

Employee PII stolen via SharePoint zero-day

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Global Infostealer Credential Dump

24B stolen credentials exposed online

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Conduent Business Services

62.2M records exposed in ransomware attack

View incident → Indexed 1 month, 3 weeks ago

high · healthcare · Jul 9, 2026

One Medical Amazon

Archived senior care records breached via third-party storage

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

Nissan Americas

Employee SSNs, banking, tax data stolen

View incident → Indexed 1 month, 3 weeks ago

critical · healthcare · Jul 9, 2026

AdaptHealth Corp

Patient PHI and billing credentials stolen via contractor

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Intel-sharing platform

Intel-sharing platform breached during live World Cup ops

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Eurail Interrail

300K traveler passports and IBANs exposed

View incident → Indexed 1 month, 3 weeks ago

critical · tech · Jul 9, 2026

Credential Dump Global

24B stolen credentials exposed in public database

View incident → Indexed 1 month, 3 weeks ago

critical · other · Jul 9, 2026

24B Credential Megadump

24B stolen credentials exposed from 36 sources

View incident → Indexed 1 month, 3 weeks ago

high · other · Jul 9, 2026

Air Creebec Canada

70GB data stolen from Canadian regional airline

View incident → Indexed 1 month, 3 weeks ago

high · healthcare · Jul 9, 2026

Lake Region Healthcare

SSNs, biometrics and medical records confirmed stolen

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

Acworth City Government

Government systems hit by INC_RANSOM ransomware

View incident → Indexed 1 month, 3 weeks ago

high · government · Jul 9, 2026

French Tchap Platform

73K government accounts and 643K messages stolen

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

HSIN security planning network

HSIN security planning network breached

View incident → Indexed 1 month, 3 weeks ago

high · finance · Jul 9, 2026

Liberty Mutual Insurance

108GB policyholder and financial records exfiltrated

View incident → Indexed 1 month, 3 weeks ago

critical · healthcare · Jul 9, 2026

NYC Health and Hospitals

1.8M records stolen including biometrics

View incident → Indexed 1 month, 3 weeks ago

high · finance · Jul 9, 2026

NAIC Insurance Commissioners

Regulatory filings and credentials stolen by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Conduent Government Services

62.2M SSNs and health records exposed

View incident → Indexed 1 month, 3 weeks ago

high · tech · Jul 9, 2026

Crunchbase

2M business records exfiltrated by ShinyHunters

View incident → Indexed 1 month, 3 weeks ago

critical · government · Jul 9, 2026

Tchap French Government

73K government accounts and 643K messages stolen

View incident → Indexed 1 month, 3 weeks ago

medium · other · Jul 9, 2026

A new data-extortion group called Helix is using identity-focused tactics such as voice

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. [.

View incident → Original disclosure Indexed 1 month, 3 weeks ago