Data Breaches 2024-2025

Connecticut's largest healthcare provider suffered a network intrusion exposing patient names, SSNs, medical record numbers, and demographic information for over 5.5 million individuals.

Hertz customer data including driver's licenses and SSNs were stolen via Cleo file transfer vulnerabilities exploited by Cl0p ransomware gang between October-December 2024.

Grubhub data breach via compromised third-party vendor exposed customer, driver, and merchant contact information including hashed passwords and partial payment card data.

Connecticut healthcare provider breach exposed SSNs, COVID vaccination records, diagnoses, and treatment information for over 1 million patients.

Massive K-12 education breach exposed personal data of 62.4 million students and educators including names, SSNs, medical information, and grades after compromised credentials accessed PowerSource portal.

Chinese state-sponsored APT group Silk Typhoon exploited BeyondTrust API vulnerability to access Treasury workstations and unclassified documents in major federal breach.

Termite ransomware gang attacked supply chain management provider, disrupting operations at Starbucks, Sainsbury's, and Morrisons with 680GB of data exfiltrated.

Largest retail breach in history exposed 57 million customer records including partial credit card numbers and personal information via compromised Snowflake cloud account.

Underground ransomware gang attacked Casio via phishing, exposing personal data of 8,500 employees, business partners, and customers including payroll information.

Insurance giant Globe Life faced extortion attempts after hackers stole SSNs, health data, and policy information of 850,000 customers from subsidiary web portal.

Social engineering attack on MoneyGram's help desk exposed customer SSNs, government IDs, bank account numbers, and transaction data during three-day attack.

Background check company left 2.2TB database passwordless, exposing records of 106 million Americans including SSNs, employment history, and legal records.

One of largest breaches ever exposed 2.9 billion records including SSNs and personal data of up to 170 million people, leading company to file bankruptcy.

Rhysida ransomware gang stole 6.5TB of city data including SSNs and bank accounts of 500,000 residents after demanding $1.9 million ransom.

Third-party vendor breach exposed health savings account holder data including SSNs, diagnoses, prescriptions, and partial payment card information for 4.3 million people.

RansomHub ransomware attack via impersonated employee credentials exposed driver's license numbers and personal data of 2.2 million pharmacy customers.

Unsecured REST API allowed threat actor to scrape 15 million user email addresses and profile information by querying with known email addresses.

AT&T breach via compromised Snowflake account exposed call and text records of nearly all 110 million cellular customers dating back to mid-2022.

LockBit ransomware attack via malicious link click exposed SSNs and bank account numbers of 7.6 million people including fintech partner customers like Wise and Affirm.

Qilin ransomware attack on NHS pathology services caused blood shortage crisis in London hospitals, forcing cancellation of 800+ surgeries with £32.7M in damages.