IRCC Canada (Immigration)
420K immigration applicant records accessed via compromised case management portal
2026 Data Breaches Year-to-Date (462 indexed)
Freshfields Bruckhaus
340K transaction records compromised
Cenovus Energy
450K employee and operations records compromised
Molina Healthcare
3.1M Medicaid and Medicare patient records exfiltrated via compromised claims portal
‘Project Compass’ Cracks Down on
International law enforcement operation led by Europol targets network of teenagers and young adults involved in ransomware attacks, extortion and other crimes
Intact Financial (Canada)
560K insurance policyholder records compromised via ransomware attack on claims system
OVHcloud (France)
920K customer records and server configurations exposed via compromised management portal
Odido
6,077,025 records exposed — Bank account numbers, Customer service comments, Dates of birth, Driver's licenses and 7 more
Canadian Tire
1.1M customer loyalty records exposed in platform breach
Cisco SD-WAN
Cisco SD-WAN Path Traversal Vulnerability — Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands w
VIQ Solutions (Court Transcripts)
Legal transcription vendor breach — sensitive court proceedings compromised via subcontractor
Cisco Catalyst SD-WAN Controller and Manager
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability — Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authenti
State of California (DMV Vendor)
2.4M drivers license records exposed via compromised address verification contractor
Bell Canada (2026)
2.2M customer records exposed via compromised residential internet provisioning system
Soliton Systems K.K FileZen
Soliton Systems K.K FileZen OS Command Injection Vulnerability — Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP
Leading Semiconductor Supplier Advantest Hit
Advantest, a Japanese specialist in testing computer chips for major semiconductor manufacturers, has deployed incident response protocols following a cybersecurity incident
Raytheon Technologies
430K defense contractor employee records and clearance data compromised via vendor
University of Mississippi Medical Center
University of Mississippi Medical Center is still scrambling to respond to a ransomware attack last Thursday
PwC (Global)
380K audit client records exposed via compromised file transfer platform
Sun Life Financial (Canada)
890K group benefits records compromised via ransomware at claims administrator
CarGurus
12,461,887 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more
Deloitte (Client Data)
240K audit client records from 12 countries exposed via compromised GlobalProtect VPN
VIQ Solutions (Canada)
Sensitive court transcripts compromised after Indian subcontractor breach — ignored warnings
Roundcube Webmail
RoundCube Webmail Cross-site Scripting Vulnerability — RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.