Air New Zealand
210K passenger records stolen
Latest Disclosures
Plaid Technologies
2.3M linked bank account tokens compromised
Erasmus Medical Center (Rotterdam)
280K patient records compromised
Maybank (Malaysia)
1.1M customer records compromised in vendor breach
Apollo Hospitals (India)
1.5M patient records compromised in ransomware attack
El Corte Ingles
670K customer loyalty records stolen
Piedmont Healthcare
1.3M patient records exposed in third-party vendor breach
University of Johannesburg
180K student records compromised
Twilio (SendGrid)
33M email addresses and API keys exposed via compromised internal support tools
Naver Corp (South Korea)
1.3M user records compromised via LINE shared infrastructure
Have Fun Teaching
27,126 records exposed — Browser user agent details, Email addresses, IP addresses, Names and 3 more
Robinsons Malls
195,597 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 2 more
Canva (Australia)
2.4M user records including hashed passwords exposed via API vulnerability at design platform
Wealthsimple (Canada Fintech)
440K investor records exposed — portfolio holdings and trading activity data compromised
Supabase (YC Startup)
112K database connection strings exposed — open-source backend-as-a-service misconfiguration
Vodafone UK
670K subscriber records exposed via API vulnerability
Government of Yukon
18K resident records stolen in network intrusion
Government of Saskatchewan
340K driver license records compromised
Idaho Transportation Department
560K driver records stolen
Principal Financial
340K retirement account records stolen
Marks and Spencer
1.3M customer loyalty records exposed
Target Corporation (2025)
2.1M customer records exposed via compromised third-party loyalty platform integration
MOVEit Education Victims (Aggregate)
800+ educational institutions affected by CL0P MOVEit exploitation — millions of student records