City of Tulsa (Oklahoma)
250K resident records exposed — water billing, court records, and police reports stolen
Government Data Breaches (565 indexed)
Indian Railways (IRCTC)
3.1M passenger records compromised in credential leak
City of San Antonio
450K resident records stolen in ransomware
German Federal Police (BKA)
Confidential investigator identities exposed via compromised witness protection database
Leonardo SpA
340K defense contractor records stolen
Manitoba Government
310K health card records exposed
City of Charlotte (North Carolina)
280K resident records exposed via compromised vendor managing water and sewer billing
Illinois Secretary of State
880K voter registration records exposed via compromised election management system
Maricopa County (Arizona) Elections
320K voter records and election worker PII exposed via misconfigured file server
Los Angeles County Assessor
2.2M property records exposed via vulnerable GIS mapping application — owner data leaked
Massachusetts Registry of Motor Vehicles
1.1M records compromised
Salt Typhoon / US telecom wiretap
Chinese hackers accessed US lawful intercept systems at major carriers
Rheinmetall (Germany)
340K defense records stolen
Swedish Social Insurance Agency (Forsakringskassan)
2.2M citizen records exposed via misconfigured benefits portal — SSN equivalents leaked
Virginia Department of Elections
65K voter registration records with SSN fragments exposed via misconfigured portal
City of Independence MO
Ransomware encrypted city government systems
Virginia State Corporation Commission
560K business entity records exposed via SQL injection on public filing search
Welsh Government Digital Services
180K citizen records stolen in targeted attack
Michigan Department of Health
2.6M Medicaid patient records exposed via compromised eligibility verification system
Ontario Lottery and Gaming (Canada)
Employee records accessed in targeted cyberattack on provincial gaming corporation
City of Montreal (2024)
420K resident records compromised
Seattle-Tacoma International Airport
Rhysida ransomware disrupted airport systems for three days — passenger data accessed
City of Fort Worth (Texas)
500K resident records exposed via misconfigured public records portal — property data leaked
Georgia Department of Labor
450K unemployment claimant records exposed via compromised benefits portal