Canada Life
Threat actor claims 5.5 million records for sale including customer, employee, and corporate data
Law Firm Data Breaches (11238 indexed)
Ecopetrol
Cyberattack stole data tied to approximately 3,300 user accounts at Colombian state energy company
Estée Lauder
Data breach tied to Oracle EBS vulnerability; exposed HR and operational data from company systems
McLaren Health Care
Two ransomware attacks in 2023 and 2024 affecting 3.2 million patients, settled class-action for $14M
Accenture
Threat actor stole vast trove of sensitive data from consulting giant in cyberattack
Ernst & Young
Names, addresses, SSNs, and financial information stolen from third-party platform
Snowflake
Exposed credentials from info-stealing malware and previous attacks led to series of attacks against Snowflake database customers
Framework
Data breach exposed all customers' names, email addresses, phone numbers, and physical addresses
Abbott Laboratories
Cyber incident affecting medical device company; investigating data breach affecting patient information
Trizetto Provider Solutions
Unauthorized access to IT environment exposed PHI of 3.4 million individuals
River Financial Corporation
Ransomware attack; hackers stole data and later confirmed deletion
PowerSchool
Dec 2024 cyberattack exposed student and staff data from thousands of schools
South Florida Injury Centers
Data breach exposed 1,525 records including SSNs and medical records (PHI/PII)
Tribeca Film Festival
Unprotected database exposed 666,000 records including celebrity contact data without password or encryption
UnitedHealthcare
2024 cyberattack exposing sensitive health and insurance data from millions of patients
Gaming Accounts (Multiple)
Over 11 million gaming account credentials exposed in 2024 data leaks
Metabase
ShinyHunters claimed hacking Metabase, exploiting zero-day to access connected databases
LiteLLM
Supply chain attack: LiteLLM compromised through Trivy hack, distributed information-stealing malware to 2,500+ organizations
PowerSchool
Cyberattack in Dec 2024 exposed student and staff data from thousands of schools
Mizuno
2024 ransomware attack and data breach affecting customers
Meta
2018 data breach; EU privacy regulator fined Meta 251 million euros for violations
Qantas
5.67 million customer records exposed via vishing attack including personal and travel information
FirstClass (Australian travel agency)
Customer records allegedly breached; threat actor claims on underground forums
Suno
Customer records and AI model training data exposed; notification delays reported