Ernst & Young
Third-party vendor breach exposed tax client data after 81-day delay in notification
Law Firm Data Breaches (10306 indexed)
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
Thousands of NHS patient records stolen in ransomware attack affecting Essex NHS trust
Personal and medical records including SSNs
Personal and medical records including SSNs exposed
Law firm (unnamed)
Cyberattack exposed hospital patient records for 13K patients in New Jersey
Fortinet
Valid administrative and VPN credentials for 73,932 FortiGate firewalls exposed in FortiBleed campaign
Law Firm (New Jersey)
Cyberattack on law firm exposed hospital records of nearly 13,000 patients
FirstClass
Sydney-based travel agency customer records allegedly breached, details posted on underground forums
Coca-Cola (Dairy Operations)
Ransomware attack shut down dairy operations; data breach disclosed to SEC
Elasticsearch (public database)
24 billion stolen credentials leaked in publicly exposed database, largest infostealer log compilation
Ransomware attack
Ransomware attack exposed protected health data of 1.3 million people to dark web
Thousands of patient records stolen in ransomware attack, breach disclosed 6+ months
Thousands of patient records stolen in ransomware attack, breach disclosed 6+ months after notification
Ransomware attack stole thousands of NHS patient records held by Essex healthcare trust
Ransomware attack stole thousands of NHS patient records held by Essex healthcare trust
Thousands of NHS patient records stolen during major ransomware attack
Thousands of NHS patient records stolen during major ransomware attack
Publicly
Publicly exposed Elasticsearch database exposed 24 billion stolen credential records
Synnovis/Mid South Essex NHS
Thousands of NHS patient records confirmed stolen in ransomware cyberattack
Essex NHS Trust
Thousands of patient records stolen in cyber attack; disclosure more than six months after notification
AssuranceAmerica
Data breach exposed personal information and driver's license numbers of 6.9 million people
Canvas (Learning Management Platform)
Learning platform attacked by ShinyHunters hacker group, security breach disclosed
Oracle PeopleSoft (100+ organizations)
ShinyHunters exploited zero-day vulnerability (CVE-2026-35273) compromising 100+ orgs
Thousands of NHS patient records stolen in ransomware cyberattack on Essex healthcare
Thousands of NHS patient records stolen in ransomware cyberattack on Essex healthcare provider
Synnovis (NHS Essex)
Thousands of NHS patient records stolen in ransomware cyberattack
Thousands of NHS patient records confirmed stolen in ransomware attack
Thousands of NHS patient records confirmed stolen in ransomware attack
Thousands of NHS patient records confirmed stolen during ransomware attack disrupting
Thousands of NHS patient records confirmed stolen during ransomware attack disrupting healthcare services
T-Mobile
Data breach exposed customer information; company violated WA notification law with text message notices