City of Vancouver (2025)
450K resident records exposed in vendor breach
Government Data Breaches (565 indexed)
City of Milwaukee (Wisconsin)
195K resident records exposed — property tax, permit, and assessment data compromised
Police Scotland
198K records including officer and witness personal data exposed via third-party print vendor
CISA (Internal Systems)
CISA confirmed breach of two internal systems — Ivanti Connect Secure vulnerability exploited
City of Regina
150K resident and utility records compromised
US OPM / DOGE Data Exposure
Unauthorized DOGE associates accessed sensitive federal personnel records without clearance
City of Oakland
600GB of city data published by Play ransomware group — employee records, financial data
Wisconsin Department of Health
670K patient records exposed
Florida Department of Revenue
1.8M taxpayer records exposed via SQL injection on online tax filing portal
City of Calgary (2025)
670K utility records compromised
Singapore Government Technology Agency (GovTech)
450K citizen records compromised in vendor platform breach
RCMP (Royal Canadian Mounted Police)
Supply chain attack compromised federal law enforcement data systems
Doxbin Scrape
435,784 records exposed — Email addresses
Frame & Optic
15,678 records exposed — Email addresses, Geographic locations, Names, Phone numbers
MSI
249,990 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
Tokyo Metropolitan Government
670K citizen records compromised in targeted attack
City of Saskatoon
120K resident records exposed in ransomware attack
Harris County (Houston) Tax Office
1.4M taxpayer records exposed including property valuations and payment history
Federal Aviation Administration
340K pilot certificate records compromised
Leonardo DRS (US)
450K defense electronics records compromised
US Treasury (China-Linked)
State-sponsored actors accessed Treasury workstations via compromised BeyondTrust API key
US Dept of Treasury (BeyondTrust)
Chinese state-sponsored hackers accessed Treasury workstations via BeyondTrust zero-day
US Treasury (2024)
Chinese state hackers breached Treasury via BeyondTrust vulnerability
US Department of the Treasury
Chinese state hackers accessed unclassified systems via BeyondTrust API key compromise