Every confirmed data breach we've indexed across 6669+ incidents from healthcare, finance, technology, government, retail, and education. Sourced from Verizon DBIR, public disclosure feeds, and major security news outlets. Updated automatically.
PORTLAND, Ore.— An Armenian national extradited from Ukraine to the United States pleaded guilty yesterday for his role in Ryuk ransomware attacks and an extortion conspiracy targeting companies throughout the United Sta
793,925 records exposed — Academic records, Dates of birth, Email addresses, Genders and 4 more
Brandon Richards reports: California resident Sean Mortazi filed a class action lawsuit against TikTok Inc. on June 11, 2026, alleging a data breach exposed the personal data of more than 2.4 billion users worldwide. The
Daryna Antoniuk reports: Dutch police said Thursday they had uncovered evidence suggesting that Dutch criminals were involved in the cyberattack on telecom provider Odido that exposed the personal data of more than 6 mil
NHS tells staff they could face prison for “inappropriate” access to patients’ medical records
A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner workings: the hacking tools, the activity logs, and target lists naming more than 1.4 million
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability — iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of arbitrary files in the file attachment
Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO. The post In Other News: DHS Database Hacked, Ad
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability — Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an unauthenticated arbitrary file upload w
CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository
NHS tells staff they could face prison for “inappropriate” access to patients’ medical records
A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey with an aim to carry out data extortion atta
4K code repositories stolen by TeamPCP group
200 firms hit via stolen OAuth tokens and CRM keys
SSNs and banking data stolen from US and Canadian employees
PeopleSoft zero-day breach, regulatory filing data stolen
62.2M SSNs and medical records exposed in ransomware
Clinical trials and patient data stolen from internal IT systems
HSIN intelligence platform breached late May 2026
280M student and staff records stolen via ShinyHunters
300+ instances hit, 100+ orgs, HR/payroll data stolen
8.8TB senior patient clinical records stolen by ShinyHunters
300+ instances breached across 100 orgs via zero-day
280M student and staff records stolen by ShinyHunters