Instructure
Supply chain breach of Canvas platform generated 58% of all breach notices in 2026
Law Firm Data Breaches (10669 indexed)
Puerto Rico Government Agency
1 million social security numbers exposed via cybersecurity loophole in mapping service
Inadvertent exposure of personal information for over 700,000 state residents
Inadvertent exposure of personal information for over 700,000 state residents
Epic Systems
300,000 people's digital health information records were accessed and sold from health records networks to law firms
North Carolina Ports
Cyberattack forced shift to manual operations, systems being restored
Canada Life
Threat actor claims 5.5 million customer, employee, and corporate records exposed for sale
French telecom subsidiaries
Data breach resulting in €42 million fine for cybersecurity vulnerabilities and GDPR violations
Swiss Federal IT Office
Microsoft SharePoint breach compromised 200 government accounts
Huntsville Hospital
Patient health information compromised through third-party vendor breach
Inadvertent exposure of personal information of 700,000 state residents
Inadvertent exposure of personal information of 700,000 state residents
Inadvertent exposure of personal data belonging to over 700,000 state residents
Inadvertent exposure of personal data belonging to over 700,000 state residents
Years-long data breach of residents' private health-related information
Years-long data breach of residents' private health-related information
French Telco Subsidiaries
Data regulator fined subsidiaries €42 million for cybersecurity vulnerabilities contributing to 2024 breach
MCBS Medical
1.26 million patients exposed in PEAR ransomware attack on medical billing/practice-management system
Coldcard
Hardware wallet data breach resulting in theft of over $100M worth of bitcoin
HCL Technologies
Hacker group claimed access to employee data; company stated data may be years-old
Yearslong breach
Yearslong breach exposed residents' private health-related information
Inadvertently
Inadvertently exposed personal information of 700,000 state residents
Exact Sciences/Abbott
Sensitive personal health information exposed from at-home diagnostic tests
Central Maine Healthcare
Data breach impacting personal, treatment, and health insurance information of 145,381 patients
French Telecom Subsidiaries
Data breach with inadequate security controls resulted in €42M GDPR fines from French data regulator
Yearslong breach of residents' private health-related information
Yearslong breach of residents' private health-related information
Levi Strauss & Co.
Corporate data stolen through social engineering attack on employees
Orange (France telecom subsidiaries)
Fined €42 million for cybersecurity vulnerabilities contributing to 2024 breach; three major GDPR violations