Topic: personal information
-
Eurail and Interrail Traveler Data Breached
Eurail B.V. experienced a data breach exposing personal details, including passport/ID numbers, of customers who purchased train passes or reservations. The breach also compromised sensitive financial and health data for participants in the EU's DiscoverEU program, heightening risks of identity t...
Read More » -
French Agency Pajemploi Data Breach Exposes 1.2 Million Users
A data breach at France's Pajemploi platform has compromised the personal information of 1.2 million users, primarily affecting professional caregivers and their employers using the URSSAF-managed service. Exposed data includes names, social security numbers, and banking institution details, but ...
Read More » -
Western Sydney University hit by cyber attack
Western Sydney University experienced a cybersecurity breach compromising extensive personal data of students, staff, and alumni, including contact details, financial information, and sensitive records. The university is collaborating with NSW Police, leading to an arrest, but attacks persist, an...
Read More » -
Prosper Data Breach Exposes 17.6 Million Accounts
Prosper, a peer-to-peer lending platform, experienced a data breach compromising the personal details of approximately 17.6 million individuals, including current customers and loan applicants. Sensitive information such as Social Security numbers, names, addresses, and financial data was exfiltr...
Read More » -
Data Breach Exposes 700K Illinois Human Services Clients
A data breach at the Illinois Department of Human Services exposed sensitive information of nearly 700,000 residents due to publicly accessible maps with incorrect privacy settings. The exposed data included addresses and case numbers for Medicaid recipients, while a smaller group also had full n...
Read More » -
Baker University Data Breach Exposes 53,000 People in 2024
A data breach at Baker University compromised the sensitive personal information of over 53,000 individuals, including Social Security numbers, financial details, and medical records. The university discovered unauthorized network access in December 2024 and is offering credit monitoring, but has...
Read More » -
University of Sydney Data Breach Exposes Student, Staff Info
Hackers breached a University of Sydney code repository, compromising the personal data of over 27,000 current and former students and staff. The stolen information includes sensitive details like names, addresses, and employment records, but there is no evidence of its publication or misuse yet....
Read More » -
Credit700 Data Breach Impacts Millions of Car Owners
A major data breach at automotive finance company 700Credit compromised sensitive personal information, including Social Security numbers, for approximately 5.8 million U.S. car buyers. The breach, discovered in October, resulted from a misconfigured API that allowed unauthorized data access and ...
Read More » -
5.8M Customers Hit in 700Credit Dealership Data Breach
A data breach at 700Credit exposed sensitive personal information of approximately 5.8 million individuals, stemming from a security failure at an integration partner that was not promptly reported. The vulnerability was a poorly designed API that allowed unauthorized access and exfiltration of d...
Read More » -
Leroy Merlin Data Breach Exposes Customer Information
Leroy Merlin, a major international retailer, has confirmed a cyberattack that compromised the personal data of its customers in France. The exposed data includes sensitive information like names, contact details, dates of birth, and loyalty program data, but not financial details or passwords. W...
Read More » -
Princeton University Data Breach Exposes Donor, Alumni Info
A sophisticated phishing attack on a Princeton University employee on November 10th led to a data breach, exposing personal information of alumni, donors, students, faculty, and related individuals. The compromised database did not contain highly sensitive data like Social Security numbers, finan...
Read More » -
Pennsylvania AG Confirms Data Breach in INC Ransom Attack
The Pennsylvania Attorney General's office experienced a ransomware attack in August 2025, leading to a data breach where cybercriminals stole sensitive personal and medical information, but officials refused to pay the ransom. The attack exploited vulnerabilities in public-facing Citrix NetScale...
Read More » -
Hyundai Data Breach Exposes SSNs and Driver's Licenses
A data breach at Hyundai AutoEver America exposed sensitive personal information including Social Security numbers and driver's licenses, with unauthorized system access occurring from February 22 to March 2, 2025. The breach impacts Hyundai's primary IT provider that supports critical automotive...
Read More » -
Conduent Data Breach Exposes 10.5 Million People's Information
Conduent experienced a major data breach affecting over 10.5 million people, with potential numbers much higher due to unreported figures from other states. The breach exposed highly sensitive personal information, including Social Security numbers and medical records, though no misuse has been d...
Read More » -
Toys "R" Us Canada Data Breach Exposes Customer Information
Toys "R" Us Canada experienced a data breach where unauthorized individuals accessed and distributed customer information, discovered on July 30, 2025, via a dark web posting. The compromised data includes personal details like names, addresses, emails, and phone numbers, but sensitive financial ...
Read More » -
WestJet Data Breach Impacts 1.2 Million Travelers
WestJet experienced a data breach affecting approximately 1.2 million travelers, exposing personal details like names, addresses, and sensitive travel documents such as passports, but no payment card information was stolen. The breach resulted from hackers using social engineering to access an em...
Read More » -
Massive Data Breach Exposes 31,000 in South Carolina Schools
A South Carolina school district experienced a cybersecurity breach potentially affecting over 31,000 individuals, compromising sensitive data including Social Security numbers and financial information. The district responded by engaging cybersecurity experts, offering affected individuals free ...
Read More » -
University of Hawaii Cancer Center Struck by Ransomware
A ransomware attack on the University of Hawaii Cancer Center in August 2025 compromised decades-old research files, including historical Social Security numbers of study participants, though clinical operations were unaffected. The university paid a ransom to obtain a decryption tool and secure ...
Read More » -
Harvard Data Breach Exposes Alumni and Donor Information
A sophisticated voice phishing attack compromised Harvard University's Alumni Affairs and Development systems, potentially exposing personal data of students, alumni, donors, faculty, and staff. The compromised data includes contact details, event attendance, donation histories, and biographical ...
Read More » -
DoorDash Data Breach Exposes User Info in October
DoorDash experienced a data breach in October 2025 due to a social engineering attack on an employee, compromising user contact details like names, addresses, and emails. This is the third major security incident for DoorDash in recent years, affecting consumers, delivery drivers, and merchants, ...
Read More » -
Allianz Life Data Breach Exposes 1.5 Million Customers
Allianz Life experienced a cybersecurity breach compromising personal data of nearly 1.5 million individuals, including names, addresses, birth dates, and Social Security numbers, through a third-party cloud system. The breach has been linked to the ShinyHunters group targeting Salesforce systems...
Read More » -
MATLAB Developer Hit by Ransomware, 10,000 Users' Data Stolen
MathWorks experienced a ransomware attack in April that compromised the personal data of over 10,000 individuals, including sensitive information like names, addresses, and Social Security Numbers. The breach caused significant service disruptions, affecting multi-factor authentication, the onlin...
Read More » -
Healthcare Services Group Data Breach Exposes 624,000 Patients
A data breach at Healthcare Services Group exposed the personal information of over 624,000 patients, highlighting vulnerabilities in the healthcare support sector. The breach occurred from September 27 to October 7, 2024, with stolen data including sensitive details like Social Security numbers ...
Read More » -
Whistleblower: DOGE Leaked Social Security Data on Unsecured Server
A whistleblower alleges that the Social Security Administration's DOGE department uploaded hundreds of millions of sensitive records to an unsecured cloud server, risking exposure of personal data for nearly all Americans. The complaint claims senior officials approved the transfer despite warnin...
Read More » -
5.6 Million Exposed in 700Credit Data Breach
A major data breach at 700Credit, a credit verification service for auto dealerships, exposed sensitive personal data including Social Security numbers for at least 5.6 million individuals. The breach occurred over a five-month period in 2025, and the company is notifying affected people by mail ...
Read More » -
Privacy Commissioner Issues New Social Media Rules
Australia's privacy watchdog has introduced new regulations requiring social media platforms to implement age verification measures that protect user privacy, with enforcement starting December 10 under the Social Media Minimum Age (SMMA) scheme. The guidance mandates that platforms and verificat...
Read More » -
DOGE May Have Exposed Millions of SSNs on Insecure Server
A Senate report reveals that personnel from Elon Musk's DOGE team are operating a cloud server containing millions of Americans' sensitive personal data, including Social Security numbers, without adequate protective measures. The exposed database includes actual production data such as birth det...
Read More » -
Insight Partners Warns Thousands Following Ransomware Attack
Insight Partners suffered a cybersecurity breach due to a sophisticated social engineering attack, exposing sensitive personal and financial data of thousands. The breach occurred from October 2024 to January 2025, compromising banking details, employee records, and information on partners and po...
Read More » -
Under Armour Confirms Data Breach Investigation
Under Armour is investigating a major alleged data breach, with a cybercriminal group claiming to have leaked 72 million customer records containing personal and purchase information. The company, working with cybersecurity experts, disputes the scale and nature of the leak, stating there is no e...
Read More » -
Ingram Micro Ransomware Attack Impacts 42,000 People
A ransomware attack on Ingram Micro in July 2025 compromised the personal data of over 42,000 people, including sensitive identification and employment records. The breach, claimed by the SafePay ransomware gang, caused major operational disruption and involved the theft of approximately 3.5 tera...
Read More » -
CIRO Data Breach Exposes 750,000 Canadian Investors
A cybersecurity breach at the Canadian Investment Regulatory Organization (CIRO) has compromised the personal data of approximately 750,000 Canadian investors, with the full scope only recently determined after an investigation launched in August. The exposed data is highly sensitive, potentially...
Read More » -
Clop Ransomware Claims Massive 3.5M University of Phoenix Breach
A data breach at the University of Phoenix compromised approximately 3.5 million people, with attackers stealing highly sensitive personal and financial information, including Social Security and bank account numbers. The breach was part of a widespread campaign by the Clop ransomware gang, which...
Read More » -
Coupang Data Breach: 33.7 Million Users at Risk
A massive data breach at a major South Korean e-commerce firm compromised 33.7 million customer accounts, exposing personal details and potentially triggering fines nearing $900 million. The breach went undetected for nearly five months, with a former employee suspected of using retained access k...
Read More » -
Marquis Data Breach Exposes 74+ US Banks and Credit Unions
A ransomware attack on Marquis Software Solutions in August 2025 compromised sensitive personal data, including Social Security and financial account information, for over 400,000 individuals across more than 74 U.S. banks and credit unions. The breach occurred via a compromised SonicWall firewal...
Read More » -
University of Pennsylvania Discloses New Data Breach Following Oracle Hack
The University of Pennsylvania suffered a data breach after attackers exploited a zero-day flaw in Oracle's financial software, compromising personal information and linking the incident to the Clop ransomware gang's extortion campaign. While the university officially notified 1,488 affected indi...
Read More » -
French Football Federation Hit by Cyberattack, Data Breached
The French Football Federation experienced a cybersecurity breach where attackers accessed its administrative software by compromising a user account, leading to a system-wide password reset. Personal data including names, addresses, and contact details of club members was stolen, but no financia...
Read More » -
Dartmouth College Hit by Clop Ransomware Data Breach
Dartmouth College experienced a data breach by the Clop ransomware group, which exploited a zero-day vulnerability in Oracle E-Business Suite to steal personal data, including names and Social Security numbers. The breach affected at least 1,494 individuals, with financial account details also co...
Read More » -
Nikkei Data Breach Exposes 17,000 People's Information
A data breach at Nikkei compromised personal details of over 17,000 individuals via unauthorized access to its Slack platform, using stolen credentials from a malware-infected employee computer. Exposed information includes names, email addresses, and chat histories, but the company confirmed no ...
Read More » -
U Penn Hacker Says Motive Was Money, Not Anti-DEI Stance
The University of Pennsylvania data breach was financially motivated, with the hacker aiming to access and potentially sell the wealthy donor database, not driven by ideological opposition to diversity initiatives. Compromised data includes sensitive personal information from donors, internal uni...
Read More » -
Hundreds With Top Secret Clearance Exposed in House Democrats' Data Breach
A data breach exposed personal information of over 450 individuals with top secret US government security clearances, part of a larger database of 7,000 job applicants for House Democrats, discovered by a security researcher in an unsecured online database. The unprotected data, found on the Dome...
Read More » -
17 Million Hit by Prosper Data Breach Exposing Personal Info
A data breach at Prosper exposed the personal information of about 17.6 million customers, including sensitive details like names, Social Security numbers, and government IDs. The breach was caused by unauthorized database queries, but the company quickly revoked access and reported no disruption...
Read More » -
Insight Partners Hit by Ransomware Attack, Exposing Staff and Investor Data
Insight Partners suffered a significant data breach due to a sophisticated cyberattack, compromising personal information of over 12,600 individuals. The stolen data included banking details, tax information, and personal records of employees and limited partners, highlighting vulnerabilities in ...
Read More » -
FinWise Bank Reports Insider Data Breach
FinWise Bank experienced a data breach by a former employee, which occurred on May 31, 2024, and went undetected for over a year until June 18, 2025, affecting around 689,000 customers. The breach exposed sensitive data, including full names, from both FinWise and its partner American First Finan...
Read More » -
Cyber-Attacks Hit Three French Regional Healthcare Agencies
A coordinated cybersecurity breach compromised personal data of patients in multiple French regions, though medical records remained secure. Attackers used stolen credentials to impersonate healthcare professionals and access systems via regional e-health platforms. Authorities are taking action ...
Read More » -
Insight Partners Notifies Staff, LPs of Data Breach
Insight Partners has completed notifying individuals affected by a January data breach that compromised sensitive personal and financial information of limited partners, employees, and details about investment funds and portfolio companies. The breach was identified as a social engineering attack...
Read More » -
TransUnion Data Breach Exposes 4.5 Million US Customers
A data breach at TransUnion compromised the personal information of 4.5 million U.S. individuals, though credit reports and core credit data were not affected. The breach occurred through a third-party application on July 28, 2024, and impacted customers are being offered free credit monitoring a...
Read More » -
DOGE Exposes Social Security Data in Major Cloud Security Breach
An unauthorized live copy of the Social Security database was created in a cloud environment, bypassing standard oversight and putting the personal data of over 300 million Americans at risk. The breach, allegedly directed by SSA officials, exposed sensitive information including names, birth det...
Read More » -
Monroe University Data Breach Impacts 320,000 People
A December 2024 cyberattack at Monroe University compromised sensitive personal data, including Social Security numbers and medical records, of over 320,000 individuals. The university is notifying affected parties and offering a year of free credit monitoring, following a review that concluded i...
Read More » -
Texas Sues Major TV Makers Over Viewing Data Spying
Texas has sued Sony, Samsung, LG, Hisense, and TCL, alleging their TVs use Automatic Content Recognition (ACR) technology to secretly record viewing habits and sensitive personal data without proper consent for targeted advertising. The lawsuits claim the companies use deceptive practices to acti...
Read More » -
Barts Health Takes Legal Action After Oracle Data Breach
Barts Health NHS Trust is seeking a High Court injunction to prevent the use of data stolen by the Cl0p ransomware gang, which includes names and addresses from billing records. The breach exploited unpatched vulnerabilities in Oracle E-Business Suite software, part of a wider global campaign aff...
Read More »