Agency
Agency leaked thousands of people's personal information but delayed public notification
Government Data Breaches (12536 indexed)
Tribeca Film Festival
Unprotected database exposed 666,000 records including celebrity contact information with no password or encryption
Exposed personal information of 700,000 state residents after inadvertent exposure
Exposed personal information of 700,000 state residents after inadvertent exposure
French telecoms company
Breach in October 2024 compromised 24+ million personal records including financial data; €42M fine
Yearslong data breach of residents' private health-related information exposed
Yearslong data breach of residents' private health-related information exposed
Exposed sensitive data of 700,000 individuals online
Exposed sensitive data of 700,000 individuals online
LiteLLM
Supply chain attack compromising over 2,500 organizations through distribution of information-stealing malware
200 accounts compromised due to Microsoft SharePoint vulnerabilities in on-premises
200 accounts compromised due to Microsoft SharePoint vulnerabilities in on-premises servers
Armenia Government
Alleged sale of 8M government records on hacker forum; authorities launched investigation
Coca-Cola (Fairlife)
Ransomware attack on dairy subsidiary resulted in data breach; operational shutdown confirmed
Żabka Polska
Data breach exposing 541,000 Jira issues and customer information
Inadvertent exposure of personal information belonging to 700,000 state residents
Inadvertent exposure of personal information belonging to 700,000 state residents
Multiple Water Utilities
Cyberattacks on operational technology across at least 12 US states; Iranian-linked campaign
Ransomware attack resulted in stolen data; hackers confirmed deletion
Ransomware attack resulted in stolen data; hackers confirmed deletion
Years-long data breach of residents' private health-related information affecting state
Years-long data breach of residents' private health-related information affecting state health program beneficiaries
Water utilities (12 states)
Cyberattacks on operational technology systems across South Dakota, Georgia and 10 other states
Multi-year data breach of residents' health-related information
Multi-year data breach of residents' health-related information
Instructure
Supply chain breach of Canvas platform generated 58% of all breach notices in 2026
Years-long data breach of residents' private health-related information exposed
Years-long data breach of residents' private health-related information exposed
Classified networks compromised with China-linked malware via USB drives, undetected for
Classified networks compromised with China-linked malware via USB drives, undetected for nearly a year
Fortinet FortiGate
FortiBleed campaign exposed administrative and VPN credentials for 73,932 FortiGate firewalls
High-profile data breach; Montana court cleared path for regulatory enforcement action
High-profile data breach; Montana court cleared path for regulatory enforcement action
Data breach
Data breach leaked thousands of people's personal information
Armenia
Hackers offering to sell alleged 8 million government records on hacker forum