CISA/US Government Agency
Unnamed U.S. department breached through Cisco vulnerability; FIRESTARTER backdoor provided persistent access through March 2026
Law Firm Data Breaches (10629 indexed)
Unnamed U.S. Department (CISA)
Breached through Cisco vulnerability; FIRESTARTER backdoor allowed unauthorized access through March
Ransomware attack affected 169,000 patients across two facilities
Ransomware attack affected 169,000 patients across two facilities
SplitVPN
Data breach exposed personal records of approximately 865,000 users (Russian VPN provider)
Paidwork
22 million user records exposed including emails, passwords, and banking data
Valley Kidney Specialists
Data breach compromised personal and health information of patients
Marquis
Ransomware attack exposed 672,000-788,000 records; names, addresses, card numbers stolen
Bank of Baroda
Alleged data breach affecting customer data
UK BioBank / Alibaba
500,000 Britons' private health records offered for sale on Chinese website; de-identified data advertised
T-Mobile USA
Insider incident data breach with limited impact
ANTS (French ID Agency)
Cyberattack exposed 19 million records linked to personal identity data
ANTS (French National Agency)
Cyberattack exposed 19 million records from France's identity agency with personal data linked to ID systems
Tribeca Festival
Data leak exposed hundreds of thousands of records and contact info for celebrities
24 billion exposed records including usernames, passwords, URLs from infostealer malware
24 billion exposed records including usernames, passwords, URLs from infostealer malware
US Government Agency (unnamed)
CISA agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed persistent access through March 2026
Cognizant
Data breach occurring April 21, 2026 affecting customers with personal information exposed
Vercel
OAuth supply chain compromise exposed trusted third-party apps and platform environment variables
UK Biobank
Confidential health records exposed online and advertised for sale on Chinese website
Heart South Cardiovascular Group
Data breach affected 46,666 patients, exposing personal and health records
FirstClass
Australian travel agency customer records compromised; threat actor claimed data on underground hacking forums
Legend Senior Care
Senior care provider affected by ransomware attack exposing patient data
Rockstar Games
Breach through compromised Anodot Snowflake access by ShinyHunters group; 165 organizations affected in cascading attack.
ANTS (French Identity Agency)
19 million records exposed in cyberattack on France's national identity agency
ShinyHunters
ShinyHunters breached Rockstar Games via Snowflake; 165 organizations affected in supply chain attack