US State Department (China)
Microsoft cloud email breach — 60K State Dept emails accessed via stolen signing key
Government Data Breaches (655 indexed)
Ohio History Connection
7.6K records exposed in ransomware
Maximus
11M individuals — government services contractor breach affected Medicare and Medicaid data
Los Alamos National Laboratory
22K records exposed in vendor breach
New York City Department of Education
45K student records exposed via MOVEit vulnerability at NYC DOE file transfer system
City of Scottsdale AZ
32K records exposed in data breach
State of Colorado (HCPF)
4M health plan members affected via MOVEit breach — largest state government data exposure
Colorado Dept of Higher Education
16 years of student data exposed in ransomware
US State Dept (Storm-0558)
Chinese hackers accessed email of senior State Dept officials
US Dept of Commerce (Storm-0558)
Commerce Secretary Raimondo email accessed by Chinese hackers
State of Maine
1.3M resident records exposed via MOVEit Transfer vulnerability — 53% of state population
Clop MOVEit (US Dept of Energy)
Nuclear waste and contractor data accessed at US government nuclear facilities
TSA (vendor breach)
18K employee records exposed in third-party breach
JAXA (Japan Space Agency)
State-sponsored attackers compromised space agency network — research data at risk
Dorchester County SC
28K records exposed in cyberattack
Ofcom (MOVEit)
UK communications regulator hit by MOVEit vulnerability — confidential company data exposed
State of Oregon DMV
3.5M driver records exposed via MOVEit vulnerability — 90% of state license holders
City of Cornwall (Ontario)
Ransomware disrupted city operations — public-facing services offline
Arkansas State Police
56K records exposed in data breach
Government of Nova Scotia
100K citizen records exposed via MOVEit Transfer vulnerability — health and pension data
City of Macon-Bibb County GA
42K records exposed in data breach
JD Group
521,878 records exposed — Email addresses, Government issued IDs, Names, Phone numbers and 1 more
Xplain AG (Switzerland)
Play ransomware stole Swiss government data — police, customs, military records published
Oregon DMV (MOVEit)
3.5M driver's license and ID card records exposed via MOVEit file-transfer exploit