Major incidents
- Cyberattack on France’s Maileva exposes 22 million people’s data22M Personal information of 22 million people
- Burger King Japan app breach exposes about 11.18 million member records in October11.2M About 11.18 million official app member records exposed
- UCHealth employee cloud account breach may expose 129,000 people's data129K Possible exposure of approximately 129,000 people's personal information
Hacking, data breach and ransomware incidents, each tracked with the affected organization, scale and timeline.
New incidents by day
Incidents by type (30 days)
Latest incidents
Employer Solutions Staffing Group belatedly reports January data breach
19.7KImpact: 19,735 affected people across the three states specified in the article (19,551 in Texas, 141 in Rhode Island and 43 in Vermont); total scope unconfirmed
US-based Employer Solutions Staffing Group detected suspicious activity on its network on January 13, 2026, and confirmed that files had been accessed or acquired without authorization that same day. The exposed data included names, Social Security numbers, driver’s license and government-issued identification numbers, financial account and payment card information, and medical and health insurance information. The article identified 19,551 affected people in Texas, 141 in Rhode Island and 43 in Vermont, but did not specify the total number affected. The company began mailing notifications to affected individuals on November 12 and is offering 12 or 24 months of credit monitoring and identity protection services, depending on the recipient.
Read on Claim Depot ↗Sensitive information leaked at Ironbridge Wells Council
Sensitive information was leaked at Ironbridge Wells Council. An investigation is underway to assess potential legal action related to the breach.
Related reports: 2 →Potential lawsuit explored over Premier Business Solutions’ August data breach
An investigation assessing potential litigation over Premier Business Solutions’ August 2026 personal data breach was announced. According to the company’s notice, an unauthorized party accessed some systems from August 11 to 14, and personal information may have been affected. The company isolated the affected systems, reset passwords and reported the incident to federal law enforcement, among other measures, while the full scope of the impact remained unconfirmed.
Read on Claim Depot ↗Personal data stolen in University of Texas at Arlington cyberattack
Impact: Personal information stolen
The University of Texas at Arlington had personal information stolen in a cyberattack. The university confirmed the data theft during its investigation but did not disclose the specific types of information involved.
Read on The Record ↗EZaccessMD June–July data breach prompts law firm investigation into possible lawsuit
EZaccessMD said some files on its network were accessed without authorization between June 30 and July 30, 2026, and that it became aware of the incident around July 30. Personal and medical information, including names, Social Security numbers, contact details, diagnoses and test results, may have been exposed, and the company is reviewing the affected data. This article is a follow-up report on a law firm's investigation into a possible lawsuit related to the incident.
Read on Claim Depot ↗Dexcom notifies victims of personal and health data breach linked to October account compromise
Dexcom notified victims of a data breach related to the employee account compromise and file downloads resulting from a social engineering attack that it disclosed in October 2026. On November 2, it confirmed that personal information may have been included; depending on the individual, this included Social Security numbers, government ID information, or health information such as prescription numbers and diagnoses. The total number of people affected and the exact date of the compromise were not disclosed.
Read on cisonews.net ↗Game Changer Wealth hacking claims under investigation
Hackers claimed to have breached Game Changer Wealth's data. Lawyers are investigating the claims, and neither an actual breach nor the extent of any damage has been confirmed.
Read on ClassAction.org ↗Dorsata breach exploiting Metabase flaw affects 58,000 patients
58KImpact: 58,000 patients
A data breach at Dorsata resulted from the exploitation of a zero-day vulnerability in Metabase. The breach affected 58,000 patients.
Related reports: 2 →Barracuda cloud hack gives attacker access to credential storage system
Impact: Unauthorized access to a system storing customer integration credentials
Barracuda's internal cloud was hacked, allowing an attacker to access a system storing credentials that connect customer systems to security services. The company disclosed the incident on November 10 and individually notified potentially exposed customers. It found no direct evidence that customer integration credentials had actually been viewed or taken.
Read on 데일리시큐 ↗Nevada County issues data breach notice to ECM and HOME team users
Nevada County issued a data breach notice to users of its ECM and HOME teams. The specific data exposed, the scale of the impact, and when the incident occurred have not been confirmed.
Read on Nevada County (.gov) ↗Potential lawsuit over Publishers Clearing House’s February data breach
403Impact: 403 people in Rhode Island and 298 in Vermont confirmed affected. The total number of affected individuals has not been disclosed.
A third party gained unauthorized access to the legacy computer network of PCH Digital, which operates Publishers Clearing House, between February 4 and 18, 2026, exposing personal information. The exposed information included names, contact details, identification numbers such as Social Security numbers, financial account information, health information and login credentials. The company began notifying affected individuals on November 5, and a law firm is assessing the possibility of litigation.
Read on Claim Depot ↗BU alumni sue university over alleged personal data breach
Claims posted on X that personal data had been stolen from BU raised suspicions of a data breach. BU alumni filed a lawsuit against the university in connection with the allegations. Whether a breach actually occurred, the extent of any damage, and the university's response have not been confirmed.
Related reports: 3 →PCH Digital reports breach of personal data and health records
298Impact: 298 people according to the Vermont filing; Social Security numbers, financial account and card information, government-issued identification numbers, health records, and login credentials
A personal data breach at PCH Digital was reported to the state of Vermont on November 11, 2026. The filing lists 298 affected people and Social Security numbers, financial account and card information, government-issued identification numbers, health records, and login credentials. The actual dates of the breach and its discovery, the total number of people affected, and the response measures have not been confirmed.
Read on Claim Depot ↗Fireworks AI breach exposes license data of thousands of US Uber drivers
↳ Knock-on damage from the Fireworks AI incident · View original incident3.4KImpact: Personal information and driver's license data of thousands of US drivers, including 3,430 South Carolina residents
In October 2026, a breach at Uber vendor Fireworks AI resulted in the theft of personal information and driver's license data belonging to thousands of US drivers. The attacker stole the vendor's internal credentials and used them to access its associated Uber account. Uber is notifying those affected, including 3,430 South Carolina residents.
Related reports: 29 · last report →Southwire employees’ health, identity and financial data leaked
Impact: Employees’ health, identity and financial information
Southwire confirmed a data breach that exposed employees’ health and identity information. The leaked data also included employees’ financial information. A potential lawsuit over the breach was subsequently reviewed.
Related reports: 3 · last report →Lawyers investigate claims of Tanner Clinic data breach
Hackers claimed that Tanner Clinic had suffered a data breach. Lawyers are investigating the claims, and neither an actual breach nor the extent of any impact has been confirmed.
Read on ClassAction.org ↗UCHealth employee cloud account breach may expose 129,000 people's data
129KImpact: Possible exposure of approximately 129,000 people's personal information
Unauthorized access to two employee accounts in Microsoft's cloud at US healthcare provider UCHealth may have exposed the personal information of approximately 129,000 people. Files containing personal information may have been stolen, potentially including names, Social Security numbers, driver's license numbers, and health and billing information. UCHealth notified those affected and said its electronic medical records system was not impacted.
Related reports: 2 · last report →Curious Worm claims data leak at Benchmark Senior Living
A claim by Curious Worm that it had stolen and published data from U.S. senior housing and care services operator Benchmark Senior Living was identified on November 12, 2026. Whether a breach actually occurred, whether files were encrypted, the extent of the damage, and the company’s response have not been confirmed. That date marks when the claim was identified; the actual incident date is unclear.
Read on SOCRadar ↗Metrocare Services data breach affects 20,790 Texas residents
20.8KImpact: 20,790 Texas residents
A data breach at Metrocare Services affected 20,790 Texas residents. The number of people affected became known on November 14, while the timing of the incident and response measures remained unconfirmed.
Related reports: 2 · last report →Barracuda claims ransomware attack on Proliant
Impact: The attackers claim to have stolen 1.23 TB of data. The actual volume of leaked data and the number of people affected remain unconfirmed.
The ransomware group Barracuda added US-based Proliant to its victim list on November 12, 2026. The attackers claimed to have stolen 1.23 TB from the main file server, including contracts, financial records belonging to the company and its partners, and employee information. The timing of the actual breach, the extent of the damage, and the company's response have not been independently verified.
Read on SOCRadar ↗
Most affected organizations
- Meta 17
- OpenAI 16
- Microsoft 11
- Google 10
- Samsung Electronics 10
- T-Mobile 9
- Apple 9
- U.S. Department of Defense 8
- Anthropic 8
- McDonald's 8
- Binance 6
- Nissan 6
- Ministry of Foreign Affairs 6
- Ministry of the Interior and Safety 6
- X 6
- Volkswagen 6
- Trezor 5
- Nexon 5
- Hugging Face 5
- UK Government 5
- University of Pennsylvania 5
- U.S. Department of Homeland Security 5
- Federal Bureau of Investigation (FBI) 5
- AT&T 5
- Israel Defense Forces 5
- DeepSeek 5
- Comcast 5
- US government 5
- French government 5
- WhatsApp 5
- Dell 5
- Schneider Electric 5
- Western Sydney University 5
- Uber 4
- Texas Health and Human Services Commission 4
- KT 4
- T1 4
- Cloudflare 4
- Oracle 4
- Flock 4