700Credit
5.8M consumer records stolen via compromised third-party API at auto lending provider
2025 marked a continued acceleration in confirmed-breach disclosures. Below is every 2025 incident LeakTrace has indexed.
5.8M consumer records stolen via compromised third-party API at auto lending provider
1.3M subscriber records stolen in targeted attack
Customer names, transaction histories, government IDs
38M unique email addresses with names, phone numbers, and partial credit card data
190K student records exposed
890K social services records compromised
450K patient records compromised in ransomware
280K passenger records compromised in credential stuffing
8,500 employee records — third-party contractor access
150K student records compromised
450K employee records compromised
340K medical records exposed
210K postal records exposed
340K patient records compromised
Zero-day exploit in ERP suite — ransom demands sent to executives across multiple orgs
1,462,025 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
5,685,771 records exposed — Bank account numbers, Dates of birth, Email addresses, Names and 2 more
808,034 records exposed — Email addresses, Genders, Names, Passwords and 1 more
530K employee and supplier records exposed via compromised Turkish Airlines partner access
960,213 records exposed — Email addresses, IP addresses, Passwords, Usernames
1.6M customer records exposed via compromised treasury management platform API
870,108 records exposed — Dates of birth, Email addresses, Genders, Government issued IDs and 3 more
1.7M customer records exposed via compromised SaaS vendor managing pro contractor accounts
390K customer loyalty program records stolen including purchase history and contact data