CGI Group
1.3M client records exposed via compromised project management platform
Technology & Software Data Breaches (1095 indexed)
Tile (Life360)
Location tracking device company breached — customer data and internal tools accessed
DocuSign
2.1M customer records exposed via API vulnerability
Snowflake (Multi-Victim Campaign)
500M+ records stolen across 160+ orgs — AT&T, Ticketmaster, Santander, Neiman Marcus
MOVEit Transfer (mass exploitation)
2,500+ organizations affected — 77M+ records exposed globally
Snowflake (customer data theft)
2.3M records across multiple clients exposed
Ticketmaster (data sale)
560M records put up for sale on dark web for $500K
pcTattletale
138,751 records exposed — Device information, Email addresses, IP addresses, Names and 5 more
Grab Holdings (Singapore)
2.1M ride-hailing and payment records exposed via third-party vendor compromise
Snowflake (multi-tenant)
165+ customer tenants breached via stolen credentials affecting 500M+ records
Quote Wizard / LendingTree (Snowflake)
190M customer records exposed
Neiman Marcus (Snowflake)
31M customer email addresses exposed
Snowflake (impact)
165+ tenants affected — Ticketmaster, AT&T, Santander, Advance Auto, etc.
Los Angeles County Health (Snowflake)
200K patient records exposed via Snowflake breach
Ticketmaster / Live Nation
560M customer records including payment data stolen by ShinyHunters via Snowflake
The Post Millennial
56,973,345 records exposed — Email addresses, Genders, IP addresses, Names and 4 more
TSMC (Taiwan)
670K manufacturing records exposed in vendor breach
MTN Group (South Africa)
2.3M subscriber records exposed in targeted attack
Christie's
RansomHub stole 500K client records from auction house
Ascension (tech)
Black Basta ransomware disrupted clinical operations at 140 hospitals
Frame.io / Adobe
46K creative professional records exposed
SaskTel
210K subscriber records compromised via phishing campaign
Rakuten (Japan)
1.3M customer records compromised in targeted attack
Snowflake (ShinyHunters Campaign)
165 organizations targeted via stolen credentials — no MFA requirement exploited at scale