23andMe (Global)
6.9M user profiles scraped via credential stuffing — ancestry and genetic data exposed worldwide
2024 Data Breaches (927 indexed)
Ally Financial
42K customer records exposed
Froedtert Health (Wisconsin)
188K patient records exposed via phishing attack on medical staff email accounts
Salt Typhoon / US telecom wiretap
Chinese hackers accessed US lawful intercept systems at major carriers
Casio
700K user records exposed in ransomware attack
Reliance Jio (India)
1.8M subscriber records compromised
Vitalite Health (New Brunswick)
190K patient records exposed
Lumen Technologies (Salt Typhoon)
Chinese espionage campaign targeted carrier infrastructure
BBVA
890K customer records stolen via compromised API
AT&T (Salt Typhoon)
Salt Typhoon wiretap access affected AT&T infrastructure
Fortescue Metals
340K employee and contractor records stolen
Qatar National Bank
560K customer records exposed in credential leak
T-Mobile (Salt Typhoon)
Chinese Salt Typhoon hackers accessed customer wiretap data at carrier
Verizon (Salt Typhoon)
Chinese hackers accessed wiretap request data at Verizon
Pacific Premier Trust
500K retirement account holders — self-directed IRA records including alternative investments
Erste Group (Austria)
670K banking records stolen
Metro Inc (grocery)
890K customer records stolen in credential stuffing
Massachusetts Registry of Motor Vehicles
1.1M records compromised
Switch
5,397 records exposed — Email addresses, Job applications, Names, Social media profiles
University of Edinburgh
340K student and staff records stolen
Volvo Cars
340K vehicle owner records exposed in contractor breach
Heritage Valley Health System (Pennsylvania)
847K patient records compromised via unpatched Citrix NetScaler vulnerability
Fidelity Investments (Oct)
28K additional customer records exposed in second incident
Fiverr Marketplace
900K seller records exposed — portfolio data, earnings history, and client communications