Australian Medical Clinics (Partnered)
Cyberattack exposed Medicare numbers, treatment details, and pathology results
Law Firm Data Breaches (10310 indexed)
Instructure/Canvas
Ransomware attack resulted in data breach; apparent payment made to threat actors
7-Eleven
Unauthorized third party gained access to systems storing franchisee documents
West Pharmaceutical Services
Ransomware attack forced systems offline globally, disrupting operations
Canvas
Massive data breach affecting schools and colleges nationwide, with data extortion attack
Exact Sciences / Abbott
Patient personal information exposed through at-home diagnostic tests
DentaQuest
15 million patients affected; largest 2026 US health breach exposed SSNs and dental/vision health info
Canvas (Instructure)
Ransomware attack shut down education platform used by universities and K-12 schools across US, impacting thousands of students during finals week
Queensland Schools (Australia)
Tens of thousands of students and teachers affected in education technology data breach
EY
Third-party vendor breach exposed tax client data; 81-day notification delay
DentaQuest
Second-largest dental benefits administrator breached; 15M patients impacted in largest 2026 healthcare breach
Canvas (Instructure)
Data breach after ransomware attack; appears payment was made to threat actors
Tens of thousands of Queensland students and teachers affected in significant global
Tens of thousands of Queensland students and teachers affected in significant global education technology breach
FirstClass
Australian travel agency; threat actor alleged customer records breach on underground hacking forums
The Oncology Institute
Patient data potentially exposed through third-party vendor breach detected by Kroll administrator
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical
WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability — WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerabil
Microsoft Windows
Microsoft Windows Protection Mechanism Failure Vulnerability — Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.
ConnectWise ScreenConnect
ConnectWise ScreenConnect Path Traversal Vulnerability — ConnectWise ScreenConnect contains a path traversal vulnerability which could allow an attacker to execute remote code or directly impact confidential data and cri
ADT
5,488,888 records exposed — Dates of birth, Email addresses, Names, Partial government issued IDs and 2 more
View incident → Indexed 4 months ago
Pitney Bowes
8,243,989 records exposed — Email addresses, Job titles, Names, Phone numbers and 1 more
View incident → Indexed 4 months ago
Udemy
1,401,259 records exposed — Email addresses, Employers, Job titles, Names and 3 more
View incident → Indexed 4 months ago
SimpleHelp SimpleHelp
SimpleHelp Missing Authorization Vulnerability — SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be
Carnival
7,531,359 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 3 more
D-Link DIR-823X
D-Link DIR-823X Command Injection Vulnerability — D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to