Illinois Secretary of State
880K voter registration records exposed via compromised election management system
Government Data Breaches (582 indexed)
Maricopa County (Arizona) Elections
320K voter records and election worker PII exposed via misconfigured file server
Los Angeles County Assessor
2.2M property records exposed via vulnerable GIS mapping application — owner data leaked
Massachusetts Registry of Motor Vehicles
1.1M records compromised
Salt Typhoon / US telecom wiretap
Chinese hackers accessed US lawful intercept systems at major carriers
Rheinmetall (Germany)
340K defense records stolen
Swedish Social Insurance Agency (Forsakringskassan)
2.2M citizen records exposed via misconfigured benefits portal — SSN equivalents leaked
Virginia Department of Elections
65K voter registration records with SSN fragments exposed via misconfigured portal
City of Independence MO
Ransomware encrypted city government systems
Virginia State Corporation Commission
560K business entity records exposed via SQL injection on public filing search
Welsh Government Digital Services
180K citizen records stolen in targeted attack
Michigan Department of Health
2.6M Medicaid patient records exposed via compromised eligibility verification system
Ontario Lottery and Gaming (Canada)
Employee records accessed in targeted cyberattack on provincial gaming corporation
Seattle-Tacoma International Airport
Rhysida ransomware disrupted airport systems for three days — passenger data accessed
City of Montreal (2024)
420K resident records compromised
City of Fort Worth (Texas)
500K resident records exposed via misconfigured public records portal — property data leaked
Georgia Department of Labor
450K unemployment claimant records exposed via compromised benefits portal
City of Flint MI
Ransomware disrupted city services and billing
Oklahoma Department of Education
620K student and educator records exposed via compromised certification tracking system
Missouri Department of Social Services
740K Medicaid recipients notified after IBM MOVEit vulnerability exposed personal data
US Social Security Administration
295K beneficiary records accessed via compromised mySSA portal accounts
Oregon DMV
780K driver license records exposed
City of Columbus, Ohio
500K resident records stolen in Rhysida ransomware attack — SSNs and bank details exposed
City of Columbus OH
500K resident records stolen in Rhysida ransomware