SpyX
1,977,011 records exposed — Device information, Email addresses, Geographic locations, IP addresses and 1 more
Latest Disclosures
Lexipol
672,546 records exposed — Email addresses, Names, Passwords, Phone numbers and 1 more
City of Milwaukee (Wisconsin)
195K resident records exposed — property tax, permit, and assessment data compromised
Freshfields Bruckhaus Deringer
670K records from antitrust investigations and merger reviews exposed via insider access
BC Cancer Agency
680K patient treatment records exposed via compromised research data warehouse
MedStar Health (Washington DC)
183K patient records exposed via compromised email accounts — phishing attack
Nissan Oceania
100K customer and employee records stolen — government IDs, insurance, and loan data exposed
BT Group (British Telecom)
890K customer records compromised in network intrusion
Police Scotland
198K records including officer and witness personal data exposed via third-party print vendor
Manulife Financial (Canada)
2.4M policyholder records exposed via compromised third-party benefits administrator
Kuwait Finance House
340K banking records compromised
ANZ Banking Group
1.2M customer records exposed in vendor incident
Shell plc
1.3M employee and operational records exposed in supply chain attack
Paytm (India)
1.3M payment records exposed via API vulnerability
Videotron (Quebec)
340K subscriber records compromised
BNP Paribas
1.3M customer records compromised
University of Regina
130K student records exposed
Tokyo Metropolitan Cancer Hospital
287K patient oncology records exfiltrated — unauthorized access via VPN zero-day
Telus Health
1.4M patient records compromised in targeted attack
Cerebral Inc.
3.1M mental health patient records shared with advertising platforms via tracking pixels
EnBW Energie Baden-Wurttemberg (Germany)
180K customer records exposed via ransomware on customer service systems
Yale New Haven Health System
5.6M patient records exposed including SSNs and medical record numbers — $18M settlement
Mercury Financial (Fintech)
620K startup banking customer records exposed via compromised employee credentials
CISA (Internal Systems)
CISA confirmed breach of two internal systems — Ivanti Connect Secure vulnerability exploited