Full List

Search

Recent Breaches

• Federal Board of Revenue January 1, 2025 • [ hack, finance ] hacked
• Habib Bank Limited January 1, 2025 • [ hack, finance ] hacked
• Cox's BazarPolice and Khulna Metropolitan Police January 1, 2023 • [ hack, government ] hacked
• MyFitnessPal[622][623] January 1, 2018 • [ hack ] hacked
• Gamigo[94][364] January 1, 2012 • [ hack, technology ] hacked
• Financial Business and Consumer Solutions (FBCS) January 1, 2024 • [ ransomware, malware, finance ] ransomware attack
• MyFitnessPal[619][620] January 1, 2018 • [ hack ] hacked
• Rosen Hotels[94][95] January 1, 2016 • [ hack ] hacked
• NEC Networks, LLC[94][95] January 1, 2021 • [ hack, healthcare ] hacked
• LifeLabs[94][95] January 1, 2019 • [ hack, healthcare ] hacked
• Gamigo[94][361] January 1, 2012 • [ hack, technology ] hacked
• DonorView[94][95] January 1, 2023 poor security
• Dedalus Biologie (a division of Dedalus Global[95]) January 1, 2021 • [ leak, misconfiguration, healthcare ] poor security
• AOL January 1, 2006 • [ leak, misconfiguration, technology ] accidentally published, (sometimes referred to as a "Data Valdez",[182][183][184] due to its size)
• RENAPER (Argentina)[94][95] January 1, 2018 • [ hack, misconfiguration, government ] poor security
• Pentagon January 1, 2025 • [ insider, malware, government ] internal compromise
• ColoCrossing May 24, 2025 • [ leak, misconfiguration, technology ] In May 2025, hosting provider ColoCrossing identified a data breach that impacted customers of their ColoCloud virtual server product. ColoCrossing advised the incident was isolated to their cloud/VPS platform and stemmed from a single sign-on vulnerability. 7k email addresses were exposed in the incident along with names and MD5-Crypt password hashes.
• Operation Endgame 2.0 May 23, 2025 • [ ransomware, malware, government ] In May 2025, a coalition of law enforcement agencies took down the criminal infrastructure behind the malware used to launch ransomware attacks in a new phase of "Operation Endgame". This followed the first Operation Endgame exercise a year earlier, with the latest action resulting in 15.3M victim email addresses being provided to HIBP by law enforcement. A further 43.8M victim passwords were also provided for HIBP's Pwned Passwords service.
• Free October 17, 2024 • [ leak, technology ] In October 2024, French ISP "Free" suffered a data breach which was subsequently posted for sale and later, leaked publicly. The data included 14M unique email addresses along with names, physical addresses, phone numbers, genders, dates of birth and for many records, IBAN bank account numbers. Free advised that the numbers were "not enough to make a direct debit from a bank".
• Operation Endgame 2.0 June 23, 2025 • [ ransomware, malware, government ] In May 2025, a coalition of law enforcement agencies took down the criminal infrastructure behind the malware used to launch ransomware attacks in a new phase of "Operation Endgame". This followed the first Operation Endgame exercise a year earlier, with the latest action resulting in 15.3M victim email addresses being provided to HIBP by law enforcement. A further 43.8M victim passwords were also provided for HIBP's Pwned Passwords service.