Qantas Airways
5.7M customer records stolen via third-party Salesforce integration — data posted on dark web
2025 Data Breaches (637 indexed)
MOL Group (Hungary)
210K fuel card records compromised
Credential Compilation (16B Passwords)
16 billion credentials from Google, Apple, Facebook — largest credential dump in history
Smith & Nephew
210K surgical records compromised
Societe Generale
560K customer records exposed
Suncorp Group
560K insurance records stolen
Chinese Surveillance Network Breach
4 billion records exposed including banking details and home addresses
Aflac Incorporated
13M health insurance records compromised — largest healthcare breach of 2025
WestJet Airlines
1.2M passenger records including government IDs and travel documents
Bahrain Ministry of Interior
180K citizen records exposed in targeted attack
Free
13,926,173 records exposed — Bank account numbers, Dates of birth, Genders, Names and 2 more
NHS Dumfries and Galloway
Patient data published by INC Ransom group after Scottish health board refused to pay
Fédération Francaise de Rugby
281,977 records exposed — Dates of birth, Email addresses, Names, Phone numbers
Canva Design Platform
2.5M enterprise workspace records exposed via API misconfiguration — design assets leaked
Chime Financial
1.1M customer records stolen in targeted attack
Coinbase Global
Customer support agents bribed to steal 97K user records — $20M extortion demand
Scripps Health (San Diego)
530K patient records re-exposed via legacy system — previously thought contained from 2021
Woolworths Group (Australia 2025)
2.2M MyDeal customer records stolen via compromised subsidiary marketplace platform
Blue Cross Blue Shield of Massachusetts
490K member records exposed via compromised third-party billing vendor
Coinbase
70K user records stolen via bribed overseas support contractors — $20M ransom refused
Plaid Financial API
2.8M bank account linking records exposed via misconfigured staging environment
AXA Group
780K policyholder records compromised in ransomware
Pemex (Mexico)
890K employee and pipeline records exposed
Trinity College Dublin
210K student records exposed