Full List

Search

Recent Breaches

• MyFitnessPal[623][624] January 1, 2018 hacked
• Gamigo[91][366] January 1, 2012 hacked
• AOL January 1, 2006 accidentally published, (sometimes referred to as a "Data Valdez",[184][185][186] due to its size)
• Creams Cafe May 1, 2025 In May 2025, 160k records of customer data was allegedly obtained from Creams Cafe, "the UK's favourite dessert parlour". The data included email and physical addresses, names and phone numbers. Creams Cafe did not respond to repeated attempts to disclose the incident, however multiple impacted HIBP subscribers confirmed the legitimacy and accuracy of the data.
• MaReads June 22, 2025 In June 2025, MaReads, the website for readers and writers of Thai-language fiction and comics suffered a data breach that exposed 74k records. The breach included usernames, email addresses, phone numbers and dates of birth. MaReads is aware of the breach.
• Omnicuris June 8, 2025 • [ leak, healthcare ] In June 2025, the Indian CME platform Omnicuris suffered a data breach that exposed approximately 200k records of healthcare professionals. The data included names, email addresses, phone numbers, geographic locations and other data attributes relating to professional expertise and training progress. Omnicuris is aware of the incident.
• Catwatchful June 9, 2025 • [ espionage, sqlinjection, technology ] In June 2025, spyware maker Catwatchful suffered a data breach that exposed over 60k customer records. The breach was due to a SQL injection vulnerability that enabled email addresses and plain text passwords to be extracted from the system.
• Delta County Memorial Hospital January 31, 2025 • [ hack, healthcare ] Non-profit hospital district Delta County Memorial Hospital informs that threat actors had compromised the personal information of 148,363 people in a May 2024 cyberattack.
• Asheville Eye Associates January 31, 2025 • [ hack, healthcare ] Asheville Eye Associates says the personal and medical information of a subset of its patients was compromised as a result of a cybersecurity incident. The DragonForce claims responsibility for the attack, claiming to have stolen hundreds of gigabytes of data.
• Yazoo Valley Electric Power Association January 30, 2025 • [ ransomware, malware, energy ] Yazoo Valley Electric Power Association, an electric utility serving multiple counties in Mississippi discloses to suffer an attack by cybercriminals last summer in an incident that exposed the information of more than 20,000 residents. The Akira ransomware gang claims responsibility for the attack.
• Berman & Rabin July 1, 2024 • [ ransomware, malware ] Law firm Berman & Rabin notifies roughly 152,000 individuals that their personal information was compromised in a July 2024 ransomware attack.
• Let's Secure Insurance Brokers January 27, 2025 • [ ransomware, finance ] Let's Secure Insurance Brokers is hit with a ransomware attack.
• Maagar-Tec January 26, 2025 • [ hack, technology ] The pro-Palestinian group called Handala reportedly breaches emergency systems used in Israeli schools, after compromising Maagar-Tec, and broadcasts rocket sirens and Arabic songs that Israels cyber agency called supportive of terrorism.
• ipany (VPN software developed by a South Korean company) January 22, 2025 • [ espionage, technology ] Researchers from ESET link a previously undocumented China-aligned advanced persistent threat (APT) group named PlushDaemon to a supply chain attack targeting ipany a South Korean virtual private network (VPN) provider.
• Tata Technologies January 31, 2025 • [ ransomware, malware, technology ] Tata Technologies Ltd. suspends some of its IT services following a ransomware attack that impacted the company network.
• Oil and gas facility control panels in the U.S. January 31, 2025 • [ hack, energy ] Researchers at Cyble identify Sector 16, a new pro-Russian hacktivist group targeting into oil and gas facility control panels in the U.S.
• Community Health Center (CHC) January 2, 2025 • [ leak, healthcare ] Community Health Center (CHC), a leading Connecticut healthcare provider, notifies over 1 million patients of a data breach that impacted their personal and health data.
• Conad January 27, 2025 • [ ransomware, malware, retail ] Conad, an important wholesale chain in Italy, is hit with a Lynx ransomware attack.
• South African Weather Service (SAWS) January 27, 2025 • [ hack, government ] A cyberattack forces the government-run South African Weather Service (SAWS) offline, limiting access to a critical service used by the countrys airlines, farmers and allies.
• Frederick Health Medical Group January 27, 2025 • [ ransomware, malware, healthcare ] Frederick Health Medical Group warns that there will be delays in service as it is hit by a ransomware attack.