Amazon (Ring / Alexa)
2.8M smart home device user records exposed via misconfigured internal analytics pipeline
Latest Disclosures
GitLab
560K repository metadata and pipeline records stolen
Mubadala Investment (UAE)
210K investment records stolen
Santander (2025)
1.1M customer records compromised in vendor breach
White & Case
180K client records compromised
Zilvia.net
287,863 records exposed — Email addresses, IP addresses, Passwords, Usernames
ManageMyHealth (New Zealand)
1.8M registered health platform users — 126K patients directly affected
US Patent and Trademark Office
340K patent application records exposed
Cedars-Sinai Medical Center
420K patient records exposed via phishing attack on physician email accounts
Blake Cassels & Graydon
340K client records stolen in ransomware
Cineplex
890K customer records stolen
University of Warsaw
180K student records compromised
Baker & Hostetler (Law Firm Sector)
Law firm cyberattacks nearly doubled in 2025 — average breach cost $5.08M
Sainsbury's
670K customer records exposed via vendor breach
Ameriprise Financial
560K client records stolen
OpenPLC ScadaBR
OpenPLC ScadaBR Cross-site Scripting Vulnerability — OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.
China Software Developer Network
6,414,990 records exposed — Email addresses, Passwords, Usernames
ADDA
1,829,314 records exposed — Email addresses, Names, Passwords, Phone numbers
CodeStepByStep
103,077 records exposed — Email addresses, Names, Usernames
Exxon Mobil Corporation
340K employee records exposed via compromised HR onboarding system — global impact
Staples Inc.
Customer order data and employee information compromised in November cyberattack
Oracle Fusion Middleware
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability — Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attack
International Kiteboarding Organization
340,349 records exposed — Email addresses, Geographic locations, Names, Usernames
Vultr
187,872 records exposed — Email addresses, Geographic locations, IP addresses, Names