Weekly briefing › No. 5
Weekly briefing · No. 5 · 19 Mar 2026
Major incidents continue across North America with six significant breaches affecting millions of individuals across financial services, healthcare, and third-party vendors.
Organizations face escalating risks from contractor access, vendor vulnerabilities, and credential theft.
This issue’s disclosures
CriticalJul 2025
Allianz Life Insurance Company of North America
Financial · 1.4M records
Attackers gained access through a third-party cloud-based customer relationship management platform using social engineering tactics against the vendor.
What it means: Customers face exposure of sensitive financial and identity data including Social Security numbers, making them vulnerable to identity theft and fraud.
Jul 2025
CriticalDec 2025
PayPal
Financial · Undisclosed records
Threat actor accessed PayPal systems starting July 1, 2025 and maintained access through December 12, 2025 via the PayPal Working Capital loan application.
What it means: Customers who applied for working capital loans face potential account takeover and financial fraud due to prolonged system compromise.
Dec 2025
CriticalOct 2025
700Credit
Credential Theft · 5.8M records
Hackers accessed customer information via a compromised third-party API, affecting the largest automotive credit check and identity verification provider in North America.
What it means: Automotive industry vendors and their customers face identity theft and fraud risks as payment and verification credentials were exposed.
Oct 2025
CriticalAug 2025
University of Hawaii Cancer Center
Healthcare · 1.2M records
A criminal organization breached the Cancer Center's Epidemiology Division network, stealing sensitive patient records from the healthcare provider.
What it means: Cancer patients face exposure of medical history, diagnoses, and personal information that could be used for targeted fraud or blackmail.
Aug 2025
HighFeb 2026
Coinbase
Credential Theft · 30 records
A contractor improperly accessed and leaked screenshots of an internal support tool revealing customer identity verification details, wallet balances, and transaction history.
What it means: Customers face account takeover risk and targeted attacks as criminals can now profile valuable accounts and validate credentials.
Feb 2026
Feb 2026
Volvo Group North America
Credential Theft · 17K records
Customer and staff data was exposed through Conduent, a third-party business services provider used for operations and administration.
What it means: Employees and customers face identity theft risk from exposure of personal and contact information through cascading vendor vulnerabilities.
Feb 2026
This issue by category
Where this issue’s disclosures sit.
The 6 disclosures in issue No. 5, by the category we filed each one under.