-
-
-
-
-
Change Healthcare
January 1, 2024
hacked
-
Australian Clinical Labs (Medlab Pathology)
January 1, 2022
•
[ ransomware, healthcare ]
ransomware attack
-
-
Aura
January 1, 2026
hacked (phishing of employee)
-
-
-
Cox's BazarPolice and Khulna Metropolitan Police
January 1, 2023
hacked
-
Tasmanian Government (agencies including the Department for Education, Children and Young People and TasTAFE)
January 1, 2023
•
[ hack, government, education ]
hacked third party service
-
FBI
January 1, 2026
hacked
-
United States Immigration and Customs Enforcement, United States Border Patrol
January 1, 2026
•
[ leak, government ]
Whistleblowing
-
AfD
September 9, 2026
•
[ hack, leak, government ]
In September 2026, the German political party Alternative fr Deutschland (AfD) suffered a data breach which exposed 345k unique email addresses. The following month, hundreds of gigabytes of data containing hundreds of thousands of emails and attachments was published online, with searchable AI-generated summaries and downloadable original files. An analysis of the incident reported that the breach was detected as early as 9 September, with a subsequent intrusion occurring five days later. In its public statement, AfD attributed the breach to an attack on a hosting provider, identified in subsequent reporting as the party-owned Alternita Dienstleistungs GmbH.
-
Assurance Retraite
September 1, 2024
•
[ leak, government ]
In September 2024, the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries. The data included 70k unique email addresses along with names, dates of birth, physical addresses, phone numbers, income levels, marital statuses, French social security numbers (NIR) and contact details of relatives or other nominated contacts. In its disclosure notice, Assurance Retraite attributed the breach to a compromised partner account.
-
Gîtes de France
May 16, 2026
•
[ leak, retail ]
In May 2026, the French holiday rental network Gtes de France suffered a data breach affecting some of its departmental branches. The incident exposed hundreds of thousands of customer records, including 118k unique email addresses alongside names, phone numbers, postal addresses and booking details.
-
Crunchbase
January 22, 2026
•
[ hack, leak, technology ]
In January 2026, the private company intelligence platform Crunchbase was targeted in a ShinyHunters "pay or leak" extortion attempt. Data allegedly obtained from the company was subsequently published publicly and included 560k unique email addresses, largely belonging to leads and business contacts. Other data included names, physical addresses, phone numbers, job titles, employers and LinkedIn profiles. Crunchbase later confirmed that a threat actor had exfiltrated documents from its corporate network.
-
Sharecare
August 12, 2026
•
[ leak, healthcare, technology ]
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing records with names, physical addresses, phone numbers, job titles and employers. The data also included a small number of Brazilian health insurance plan members, including dates of birth, genders, marital statuses and CPF numbers (Brazilian taxpayer identification numbers).
-
Neogen
August 29, 2026
•
[ ransomware, technology, leak ]
In August 2026, the food and animal safety organisation Neogen was the target of a ShinyHunters "pay or leak" extortion attempt. The group later published data it claimed had been obtained from Neogen. The data consisted largely of corporate contact records and included 436k unique email addresses from mailing lists, employee records and other contacts.
