BridgePay Confirms Ransomware Attack, No
The services of Florida-based payments platform BridgePay are offline due to a ransomware attack
2026 Data Breaches Year-to-Date (462 indexed)
Emirates Airlines
640K Skywards member records including travel history and contact data compromised
Robinhood Markets (2026)
2.8M customer trading records and SSNs exposed via social engineering attack on support staff
ATO Australia (Tax)
1.1M taxpayer records exposed via zero-day in myGov authentication system
Cathay Pacific Airways
9.4M passenger records re-exposed as 2018 breach data reappears on new dark web marketplace
Baystate Health
440K patient records exposed in spear-phishing attack on Massachusetts health system
ServiceNow ITSM Platform
620K enterprise workflow configurations exposed via compromised instance admin accounts
Instacart Grocery Delivery
680K shopper and customer records exposed via third-party payment processor compromise
University of Toronto
380K student and staff records compromised in targeted phishing campaign
CVS Health / Aetna
3.4M patient pharmacy and insurance records exposed via compromised prescription gateway
BridgePay Network Solutions
Payment gateway ransomware attack causes widespread merchant and municipal outages
Goldman Sachs (Contractor)
180K client portfolio records accessed by compromised contractor with elevated privileges
Substack Confirms Data Breach, "Limited
Substack did not specify the number of users affected by the data breach
Substack
697K subscriber records exposed — email addresses, phone numbers, internal metadata
Fortinet (Security Vendor)
440K customer records from FortiGate management portal exposed via zero-day authentication bypass
Couche-Tard (Circle K Canada)
1.2M customer payment records exposed in POS breach
Allen & Overy
290K client records exposed in LockBit ransomware attack
Zara (Inditex)
890K customer records stolen
Baker McKenzie
120K client records from 47 offices worldwide exposed via compromised email gateway
Kinaxis (Ottawa)
210K enterprise supply chain records exposed
Betterment
1,435,174 records exposed — Dates of birth, Device information, Email addresses, Employers and 5 more
National Taiwan University
210K student records exposed
Lonza Group (Switzerland)
280K pharmaceutical manufacturing records exposed
Nutrien (Saskatchewan)
670K agricultural customer records stolen