Raaga
10,225,145 records exposed — Ages, Dates of birth, Email addresses, Genders and 3 more
2026 Data Breaches Year-to-Date (462 indexed)
Magna International (Canada)
180K employee records from automotive parts manufacturer exposed via phishing attack
Morgan Stanley (Cloud)
680K wealth management client records exposed via misconfigured cloud storage bucket
Fujitsu (Japan)
1.2M customer records from government IT contracts exposed via compromised ProjectWEB portal
Pass'Sport
6,366,133 records exposed — Email addresses, Genders, Names, Phone numbers and 1 more
Salesforce (Data Cloud)
3.4M CRM records from multiple tenants exposed via privilege escalation in Data Cloud module
InterContinental Hotels (IHG)
1.3M guest reservation records including passport and payment data compromised
Visa Inc. (Token Service)
1.1M tokenized card records exposed via vulnerability in token provisioning service
Optus (Australia 2026)
2.8M customer records stolen via API vulnerability in self-service portal
Harvard University
520K alumni and donor records exposed via compromised advancement office database
Ally Financial (Auto Lending)
1.1M auto loan records exposed via compromised dealer management system integration
Match Group (Hinge / OkCupid)
10M+ dating records stolen by ShinyHunters via Okta SSO social engineering
Zscaler Cloud Security
150K enterprise zero-trust configurations exposed — test environment breach spread to prod
Conduent (Government Contracts)
4.3M individuals affected via Fortune 500 contractor — multiple state governments impacted
Alimentation Couche-Tard (Canada)
620K Circle K loyalty customer records stolen from Canadian convenience store operator
JPMorgan Chase (Vendor)
4.7M customer records exposed via compromised third-party payment processing vendor
Amazon Web Services (Customer Data)
2.8M customer billing records and account metadata exposed via misconfigured internal tool
Rogers Bank (Canada)
320K credit card applicant records exposed via compromised underwriting platform
Costco Wholesale
1.9M customer records stolen from payment processing system via skimming malware at warehouses
Microsoft Windows
Microsoft Windows Information Disclosure Vulnerability — Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.
Telus Health (Canada)
1.8M employee benefits records from Canadian health benefits platform compromised
New Zealand Ministry of Health
890K patient vaccination records exposed via misconfigured COVID-era data sharing portal
Gogs Gogs
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution.
Kirkland & Ellis LLP
Client M&A deal documents and litigation files exposed via compromised document management system