Coinbase
70K user records stolen via bribed overseas support contractors — $20M ransom refused
Finance & Banking Data Breaches (713 indexed)
Plaid Financial API
2.8M bank account linking records exposed via misconfigured staging environment
AXA Group
780K policyholder records compromised in ransomware
Lloyds Banking Group
1.1M customer records exposed via third-party vendor
Bank of China (Hong Kong)
890K customer records stolen in targeted attack
Macquarie Group
450K investment account records compromised
Great-West Lifeco
890K insurance records stolen in credential harvesting
Wealthsimple
340K client investment records compromised
Latitude Financial (Australia)
7.9M driver license records and 53K passport numbers stolen from Australian fintech
Access Bank (Nigeria)
890K customer records exposed
Wealthsimple (Canada)
280K client investment account records accessed via compromised API endpoint
DNB Bank (Norway)
560K customer records exposed in phishing
Edward Jones
1.1M client records compromised in vendor platform breach
Interac
1.2M transaction records exposed in vendor platform breach
Manulife Financial (Canada)
2.4M policyholder records exposed via compromised third-party benefits administrator
Kuwait Finance House
340K banking records compromised
Paytm (India)
1.3M payment records exposed via API vulnerability
BNP Paribas
1.3M customer records compromised
ANZ Banking Group
1.2M customer records exposed in vendor incident
Mercury Financial (Fintech)
620K startup banking customer records exposed via compromised employee credentials
Mizuho Financial Group
1.2M banking records compromised in vendor breach
Genworth Financial
2.5M policyholder records exposed via MOVEit vulnerability at life insurance provider
Marcus by Goldman Sachs
340K savings account records exposed in cloud misconfiguration
Orange Romania
556,557 records exposed — Email addresses, Partial credit card data, Phone numbers