BC Cancer Agency
680K patient treatment records exposed via compromised research data warehouse
2025 Data Breaches (637 indexed)
Freshfields Bruckhaus Deringer
670K records from antitrust investigations and merger reviews exposed via insider access
MedStar Health (Washington DC)
183K patient records exposed via compromised email accounts — phishing attack
Nissan Oceania
100K customer and employee records stolen — government IDs, insurance, and loan data exposed
Manulife Financial (Canada)
2.4M policyholder records exposed via compromised third-party benefits administrator
Police Scotland
198K records including officer and witness personal data exposed via third-party print vendor
BT Group (British Telecom)
890K customer records compromised in network intrusion
Paytm (India)
1.3M payment records exposed via API vulnerability
University of Regina
130K student records exposed
BNP Paribas
1.3M customer records compromised
Shell plc
1.3M employee and operational records exposed in supply chain attack
Tokyo Metropolitan Cancer Hospital
287K patient oncology records exfiltrated — unauthorized access via VPN zero-day
Videotron (Quebec)
340K subscriber records compromised
ANZ Banking Group
1.2M customer records exposed in vendor incident
Telus Health
1.4M patient records compromised in targeted attack
Kuwait Finance House
340K banking records compromised
EnBW Energie Baden-Wurttemberg (Germany)
180K customer records exposed via ransomware on customer service systems
CISA (Internal Systems)
CISA confirmed breach of two internal systems — Ivanti Connect Secure vulnerability exploited
Mercury Financial (Fintech)
620K startup banking customer records exposed via compromised employee credentials
Yale New Haven Health System
5.6M patient records exposed including SSNs and medical record numbers — $18M settlement
Cerebral Inc.
3.1M mental health patient records shared with advertising platforms via tracking pixels
Dollar Tree / Family Dollar
2M customer and employee records exposed via Zeroed-In Technologies vendor breach
Olympus Corporation (Japan)
280K medical device records exposed
Fraser Health (BC)
890K patient records exposed in network breach