Instagram (Alleged Leak)
17.5M account records posted to BreachForums
2026 Data Breaches Year-to-Date (462 indexed)
CIRO (Canadian Investment Regulatory Org)
750K Canadian investors exposed — SINs, income, account statements via phishing attack
Social Security Administration
3.6M beneficiary records exposed via compromised contractor with access to benefits system
Linear (Project Management)
120K workspace records exposed via OAuth misconfiguration
Accenture (Client Data)
1.4M client consulting records from 23 countries exposed via LockBit affiliate intrusion
MedStar Health (2026)
2.1M patient records compromised in ransomware incident
Epic Systems (Vendor Incident)
2.1M patient records accessed via compromised third-party integration at EHR giant
Cleveland Clinic
1.3M patient records exposed via zero-day in medical imaging PACS system
Hewlett Packard Enterprise (HPE) OneView
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code ex
Microsoft Office
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineT
SNC-Lavalin / AtkinsRealis (Canada)
190K employee and project records from Canadian engineering firm compromised
WhiteDate
20,363 records exposed — Ages, Astrological signs, Bios, Device information and 18 more
Bombardier Aerospace
Engineering documents and employee data stolen via Accellion FTA exploit — posted on CL0P leak site
Chicago Public Schools (2026)
670K student records stolen in ransomware attack
Bandai Namco (Japan)
340K gaming records exposed in ransomware
NHS England (GP Surgeries)
2.6M patient records from 150+ GP surgeries exposed via shared IT platform compromise
ATCO Ltd (Alberta)
210K utility customer records compromised
Rice University
180K student records stolen
Copenhagen University Hospital
280K patient records stolen
Banca Transilvania (Romania)
340K customer records stolen
Bank Leumi (Israel)
560K customer records exposed in credential harvesting
Falabella (Chile)
450K customer records stolen
ESB Networks (Ireland)
280K utility records compromised
Illinois State Government
System failure exposed personal data of residents publicly for four years