Royal Ahold Delhaize
1.1M customer records exposed via Albert Heijn loyalty breach
2025 Data Breaches (637 indexed)
Korea Electric Power Corp (KEPCO)
890K customer records exposed
HCL Technologies
560K enterprise client records stolen in network breach
CN Rail
670K shipment and employee records compromised in targeted attack
Access Bank (Nigeria)
890K customer records exposed
Valley Oaks Health (Indiana)
Behavioral health provider breach exposed 750K patient mental health records
Blue Shield of California
4.7M member records shared with Google Analytics via misconfigured web tracking
Qraved
984,519 records exposed — Dates of birth, Email addresses, Names, Passwords and 1 more
Boulanger
2,077,078 records exposed — Email addresses, Geographic locations, Names, Phone numbers and 1 more
Wealthsimple (Canada)
280K client investment account records accessed via compromised API endpoint
Pentagon Leak (Discord)
Classified national defense documents leaked via Discord server — intelligence assessments exposed
Hospital Clinic Barcelona
340K patient records compromised in RansomHouse attack
City of Detroit (Michigan)
340K resident records compromised — property records and utility billing data exposed
HSE Ireland (Health Service Executive)
890K patient records compromised in new attack
DNB Bank (Norway)
560K customer records exposed in phishing
Capita plc (UK)
90TB of data stolen from major UK government outsourcing firm — pension, NHS, MOD records
Vercel Hosting Platform
190K deployment secrets exposed via environment variable misconfiguration in preview builds
Samsung (2025 Incident)
270K customer support tickets exfiltrated from German operations — device data, contact info
Canada Revenue Agency (CRA)
190K taxpayer accounts locked after credential-stuffing attack on GCKey and CRA portals
Greater Manchester Police
340K officer and staff records compromised
Bombardier (Montreal)
890K manufacturing and employee records stolen
VA Healthcare System
1.8M veteran records exposed in contractor breach
Scottish Government
450K citizen records compromised via third-party platform
CD Projekt Red (Poland)
1.1M gaming records compromised in follow-up breach