Macquarie Group
450K investment account records compromised
2025 Data Breaches (637 indexed)
Etsy
1.1M seller records compromised in targeted attack
Suncor Energy
890K employee and operations records stolen
Lufthansa
780K passenger records compromised
Singtel
1.1M subscriber records stolen in targeted attack
Great-West Lifeco
890K insurance records stolen in credential harvesting
Alabama Ophthalmology Associates
130K patient records including medical images and insurance details exposed
Fujitsu (2025)
780K employee and client records exposed
Deutsche Post DHL
1.2M shipping records exposed via vendor breach
Bank of China (Hong Kong)
890K customer records stolen in targeted attack
Harrods (UK)
Luxury retailer confirmed cyber incident — restricted internet access as precaution
Fiat Chrysler (Stellantis Italy)
670K vehicle owner records compromised
Harrods Department Store (UK)
Attempted cyberattack forced internet shutdown across all stores — systems isolated
Nova Scotia Power
375K current and 540K former customers — SINs, driver's licenses, account data exposed
Marks & Spencer Cyber Incident
Cyberattack disrupted online ordering and contactless payments across UK stores
Databricks Lakehouse Platform
380K enterprise data pipeline configurations exposed via compromised admin credentials
Service NSW (Australia)
540K citizen records exposed via compromised employee email accounts
Marks & Spencer (UK)
3.2M customer records exposed in DragonForce ransomware attack — loyalty and contact data
University of Alberta (Canada)
290K student and staff records exposed via compromised PeopleSoft HR system
IRS Free File Program
340K taxpayer records exposed via vulnerability in online filing partner systems
Stanford Health (Systems Breach)
92K patient records from Stanford Health Care clinics exposed via ransomware attack
Samsung Germany Customer Tickets
216,333 records exposed — Email addresses, Names, Physical addresses, Purchases and 3 more
Mount Sinai Health System (NYC)
320K patient records exposed via third-party billing vendor ransomware attack
Latitude Financial (Australia)
7.9M driver license records and 53K passport numbers stolen from Australian fintech