Vanderbilt University
190K student and medical center records exposed via ransomware on administrative systems
2025 Data Breaches (637 indexed)
Discover Financial Services
520K card holder records exposed via vulnerability in mobile banking application
D-Link Routers
D-Link Routers Buffer Overflow Vulnerability — D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (E
Array Networks ArrayOS AG
Array Networks ArrayOS AG OS Command Injection Vulnerability — Array Networks ArrayOS AG contains an OS command injection vulnerability that could allow an attacker to execute arbitrary commands.
KinoKong
817,808 records exposed — Email addresses, IP addresses, Names, Passwords and 1 more
Gibson Dunn & Crutcher LLP
280K antitrust investigation records exposed via phishing attack on senior associates
Enbridge Inc
780K customer and pipeline operational records exposed
Sharp Corporation
340K customer records stolen
Meta React Server Components
Meta React Server Components Remote Code Execution Vulnerability — Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw i
Stripe vendor incident
450K merchant records exposed via third-party integration
City of Indianapolis
340K resident records stolen
Confluent (Kafka Cloud)
180K enterprise streaming configurations exposed via SSRF vulnerability in management API
Royal Adelaide Hospital
340K patient records exposed
OpenPLC ScadaBR
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability — OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload a
Android Framework
Android Framework Privilege Escalation Vulnerability — Android Framework contains an unspecified vulnerability that allows for privilege escalation.
Android Framework
Android Framework Information Disclosure Vulnerability — Android Framework contains an unspecified vulnerability that allows for information disclosure.
Amazon (Ring / Alexa)
2.8M smart home device user records exposed via misconfigured internal analytics pipeline
US Patent and Trademark Office
340K patent application records exposed
Cedars-Sinai Medical Center
420K patient records exposed via phishing attack on physician email accounts
ManageMyHealth (New Zealand)
1.8M registered health platform users — 126K patients directly affected
Blake Cassels & Graydon
340K client records stolen in ransomware
Baker & Hostetler (Law Firm Sector)
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
University of Warsaw
180K student records compromised
Ameriprise Financial
560K client records stolen