Bancolombia
560K customer records exposed in phishing campaign
2025 Data Breaches (637 indexed)
Simon Fraser University
310K student records exposed in network intrusion
Intermountain Health (Utah)
1.8M patient records exposed via vendor compromise — largest Intermountain breach to date
Dubai Health Authority
670K patient records exposed in vendor breach
Kohl's
670K customer records stolen
Czech National Cyber Agency (NUKIB)
280K government records exposed
Norton Rose Fulbright Canada
340K client records compromised in second incident
St. Joseph Healthcare (Hamilton)
210K patient records exposed in phishing attack
University of Sydney
340K student records exposed in credential stuffing
Novo Nordisk (Denmark)
450K patient records stolen
Scottish Power
340K customer records exposed in phishing campaign
Proximus (Belgium)
340K subscriber records stolen
Omnicuris
215,298 records exposed — Email addresses, Geographic locations, Names, Phone numbers
Akamai Technologies
190K enterprise CDN customer configurations exposed via compromised edge node management
Vercel
340K deployment secrets exposed via build log misconfiguration
Labrador-Grenfell Health
55K patient records compromised
Bell Canada (2025)
2.1M subscriber records compromised in vendor platform breach
Hyundai Motor Company
1.4M vehicle owner records stolen in targeted attack
DaVita Kidney Care
1.6M dialysis patient records exposed via vendor credential compromise
Shell (Energy)
MOVEit Transfer vulnerability exploited — employee payroll and benefits data stolen by CL0P
Catwatchful
61,641 records exposed — Email addresses, Passwords
QIMR Berghofer (Australia)
Medical research data from 68K clinical trial participants exposed in targeted attack
Marqeta Card Issuing Platform
1.3M virtual card records and transaction data exposed via API vulnerability
Naver Corp (South Korea)
1.3M user records compromised via LINE shared infrastructure