Full List

Search

Search Results (data leak)

• Undisclosed US debt settlement firm February 15, 2025 • [ data leak ] A US debt settlement firm disclosed a breach affecting 160,000 individuals; limited details on intrusion vector provided.
• Compumedics Limited June 18, 2025 • [ ransomware, data leak ] Australian med-tech firm Compumedics reported a ransomware attack that resulted in exfiltration of data affecting approximately 318,000 individuals.
• Louis Vuitton Korea July 4, 2025 • [ data leak ] Bloomberg-reported cyberattack resulted in customer data leak affecting Louis Vuitton Korea customers; details limited at disclosure.
• Accu Reference Medical Laboratory July 1, 2025 • [ ransomware, data leak ] Qilin listed Accu Reference on July 10 claiming they acquired data on July 1; screenshots display unredacted PHI; encryption not indicated.
• McKenzie Health System (McKenzie Memorial Hospital) April 15, 2025 • [ data leak, healthcare data breach, repeat incident ] Notification to Maine AG reported an incident discovered on or about April 15 affecting 54,016 people; prior 2022 incident had 51,040 impacted, indicating recurring exposure issues.
• Everglades Correctional Institution (Florida Department of Corrections) July 26, 2025 • [ data leak, exposed PII ] Personal contact information from visitor applications at Everglades Correctional Institution was exposed to all inmates at the facility after a breach reported the prior weekend.
• Naval Group July 23, 2025 • [ data leak, extortion ] Threat actor leaked 1TB of alleged Naval Group data after an extortion attempt. Naval Group says no intrusion confirmed and operations unaffected.
• IdeaLab October 4, 2024 • [ ransomware, data leak ] IdeaLab confirmed data theft from an Oct 2024 ransomware breach claimed by Hunters International. 137,000 files (~262.8 GB) stolen and leaked impacting employees/contractors and dependents.
• Elmcrest Children’s Center, Inc. August 12, 2025 • [ data leak ] Elmcrest Childrens Center, Inc. detected unauthorized access to its computer network on August 12, 2025. The investigation determined that files containing information for approximately 23,500 individuals were accessed, including names, addresses, dates of birth, treatment details, and insurance information.
• Svenska Kraftnät October 25, 2025 • [ ransomware, data leak ] Swedens national power grid operator Svenska Kraftnt experienced a data breach on October 25, 2025, when ransomware group Everest accessed an external file-transfer system and claimed to have stolen roughly 280 GB of data. Electricity transmission operations were not affected.
• Ribbon Communications Inc. January 1, 2025 • [ data leak, unauthorized access ] U.S. telecom backbone provider Ribbon Communications reported that a nation-state actor infiltrated its environment around Jan 2025, maintaining persistence until discovery in Sept 2025; investigation confirmed unauthorized access to two employee laptops containing limited customer files; no material network breach or data destruction confirmed.
• National Credit Information Center (CIC) September 11, 2025 • [ data leak ] Personal/credit records for citizens and companies held by the State Banks CIC; Vietnams CERT confirmed data theft with scope still being assessed; operations continued without disruption.
• Undisclosed European drone manufacturer March 25, 2025 • [ phishing, social engineering, malware ] North Korean operators approached European defense engineers with fake job offers, delivering loaders that sideloaded ScoringMathTea and BinMergeLoader/MISTPEN to exfiltrate proprietary UAV designs and manufacturing know-how. Intelligence-collection focus; campaign targets several firms rather than one discrete victim record.
• DSV October 20, 2025 • [ data leak ] Reports indicate DSV confirmed a breach impacting a smaller group of customers; details on scope and timing remain limited.
• Dodd Group October 19, 2025 • [ data leak, third-party breach ] Report claims Russian group accessed contractor and leaked MoD base documents
• Pulse Urgent Care Center July 1, 2025 • [ data leak, unauthorized access, healthcare ] Unauthorized access to Pulse Urgent Care Centers network exposed patient PHI; no encryption or quantitative scope reported and threat actor unconfirmed.
• Unity Technologies (SpeedTree website) August 26, 2025 • [ payment skimmer, data leak ] A malicious payment skimmer was injected into the checkout page of Unity Technologies SpeedTree website, harvesting customer payment and personal data. The compromise, discovered on August 26 2025, affected 428 individuals according to regulatory filings. Impacted users were offered identity protection and credit monitoring.
• Canadian Tire Corporation October 2, 2025 • [ data leak ] Retailer reported Oct 2 breach of e-commerce database impacting customer information across multiple banners.
• Valparaiso University August 7, 2025 • [ data leak ] Class-action followed disclosure that files were copied/downloaded Aug 78; notice cites PII potentially impacted
• Banco Hipotecario del Uruguay October 13, 2025 • [ ransomware, data leak ] Uruguayan bank BHU said attackers leaked user data and demanded payments; reports attribute incident to Crypto24 group.