Manitoba Hydro
560K customer records stolen in credential harvesting attack
2024 Data Breaches (863 indexed)
Turkish Airlines
670K passenger records exposed
Connecticut State IT Systems
890K resident records from multiple agencies exposed via shared cloud platform compromise
Advocat Health (North Carolina)
421K skilled nursing and rehabilitation patient records exposed via phishing
HealthEC LLC
4.5M patient records from 17 healthcare providers exposed via population health platform breach
Squarespace DNS
Mass domain hijacking via OAuth registration flaw
Disney (Slack Breach)
1.1TB of internal data stolen via compromised Slack workspace — NullBulge group
Rite Aid
2.2M customer records including purchase history and ID data stolen in ransomware attack
AT&T (Snowflake)
110M call and text metadata records stolen from Snowflake environment
National Security Agency (NSA)
NSA employee data exposed via AT&T telecom breach — metadata and communication records
AT&T (Call Records)
109M customer call and text records stolen from Snowflake cloud environment
Snowflake Customer Campaign (AT&T)
110M AT&T call and text metadata records — phone numbers, duration, cell tower locations
mSpy (2024)
2,394,179 records exposed — Email addresses, IP addresses, Names, Photos
KT Corporation (Korea Telecom)
1.1M subscriber records exposed
BAE Systems (UK)
780K defense contractor records exposed in supply chain attack
PLDT Inc (Philippines)
890K subscriber records exposed
The Heritage Foundation
72,004 records exposed — Email addresses, IP addresses, Names, Passwords and 1 more
Rakuten Group (Japan)
4.3M e-commerce user records exposed via API misconfiguration on marketplace platform
Astellas Pharma (Japan)
340K clinical trial records exposed
Itau Unibanco (Brazil)
1.5M customer records compromised in vendor breach
Ulta Beauty
770K customer records exposed via credential stuffing on loyalty program — Ultamate Rewards
Neiman Marcus
31,152,842 records exposed — Dates of birth, Email addresses, IP addresses, Names and 4 more
State of Nevada DMV
1.1M driver license records exposed via vendor compromise — photos and biometric data
TD Bank (US)
62K customer records exposed