Recent data breaches

Nov 11, 2026
LiveRamp 2026 LiveRamp — n0n leak-site claim (unverified)
Unverified claim
Nov 11, 2026
Hurricanes Holdings 2026 Carolina Hurricanes — systems restored; personal files unpublished
Confirmed breach
Nov 11, 2026
Amicus Rex 2026 Amicus Rex — Lawform hack; 20,028 users
20.0K records
Nov 10, 2026
KB Capital 2026 KB Capital — lease system hack; 1,811 people
1.8K records
Nov 9, 2026
DK Techin (Kakao Work) 2026 Kakao Work — DK Techin hack; ~5,000 at 44 firms
5.0K records
Nov 9, 2026
Finnair 2026 Finnair — Amadeus vendor leak; ~116,000 reservations
116.0K records
Nov 9, 2026
Multicampus 2026 Multicampus — Learning Platform hack; ~70k trainees
70.0K records
Nov 9, 2026
Chow Sang Sang 2026 Chow Sang Sang — membership and shop access; staff too
Confirmed breach
Nov 9, 2026
Expedia 2026 Expedia Group — n0n leak-site claim (unverified)
Unverified claim
Nov 9, 2026
Apify 2026 Apify — stolen login; hashes, tokens, billing data
Confirmed breach
Nov 9, 2026
AllUnited 2026 AllUnited — software flaw; club member IBANs copied
Confirmed breach
Nov 9, 2026
Vertex Pharmaceuticals 2026 Vertex Pharmaceuticals: n0n prescriber-list leak claim (unverified)
Unverified claim
Nov 8, 2026
A.P. Moller-Maersk 2026 Maersk — legacy LF Logistics system; WhiteArmor $5M claim
Confirmed breach
Nov 7, 2026
Philippines BIR 2026 Philippines BIR — taxpayer-data leak claim (unverified)
Unverified claim
Nov 7, 2026
Ailys Frontier 2026 Ailys Frontier — source code leak claim (unverified)
Unverified claim
Nov 6, 2026
Equipple 2026 Equipple — school-app data leak; parent and pupil contacts
Confirmed breach
Nov 6, 2026
Nitori Holdings 2026 Nitori: unauthorized access; up to 37.62M customer records
37.6M records
Nov 6, 2026
Philippines SEC 2026 Philippines SEC — platform leak; names, TIN, contacts
Confirmed breach
Nov 6, 2026
WebMoney 2026 WebMoney — unauthorised access; possible leak of some payment information; census unpublished
Confirmed breach
Nov 6, 2026
Caixa Vida e Previdência 2026 Caixa Vida — cadastral copy; 7.6M names and CPFs
7.6M records

Latest breach analysis

What you can do

Breach intelligence guides

Data breach intelligence and company breach history

BreachHistory is a dedicated breach intelligence platform for anyone who needs a structured, searchable view of disclosed cybersecurity incidents. We document what organizations have publicly acknowledged: incident timing, scale, affected data types, root causes when reported, and references to primary sources. Whether you work in security, risk, procurement, journalism, or research, our goal is to make breach history easier to compare across vendors, industries, and regions.

Vendor risk and third-party oversight Procurement, renewals & questionnaires

Procurement, renewals, and security questionnaires

Enterprises rarely rely on a single system; they depend on long chains of SaaS vendors, cloud providers, payment processors, and contractors. When you evaluate a partner, security attestations and SIG questionnaires are useful, but they do not always reveal how often an organization has appeared in public breach disclosures or what kinds of failures recurred. Reviewing a company’s breach history alongside those artifacts gives you a fuller picture before you renew a contract, onboard a critical supplier, or shortlist vendors for an RFP.

Supply-chain and concentration risk

A compromise at one supplier can spread across customers that share integrations, credentials, or data flows. Teams use BreachHistory to spot patterns—such as repeated credential spills, misconfigured cloud storage, or ransomware affecting similar business units—and to prioritize monitoring where concentration risk is highest.

What we publish for each organization Timelines, records & writeups

Chronological timelines and disclosure context

Company pages list disclosed incidents in chronological order. Where available, entries include short technical summaries, links or citations to regulatory filings and company statements, and tags that help you scan for themes like ransomware, phishing, or insider error.

Records affected, risk signals, and writeups

We record estimated or reported records affected when those figures appear in trusted sources, and we surface AI Breach Risk scores as an additional signal based on structural factors—not a prediction of the future. Technical writeups summarize root causes and mitigations where analysts have published enough detail to be useful.

Dashboard, monitoring, and API access

The interactive breach dashboard aggregates statistics by year, country, and industry so you can study macro trends. BH Monitor lets you follow specific companies and receive alerts when new incidents are added. Developers can request access to our REST API to integrate breach metadata into GRC tools, spreadsheets, or internal research workflows, subject to our terms of use.

How we source and refresh data

We prioritize verified disclosures: regulatory dockets, breach notifications, company press releases, and reputable security reporting. Entries are updated as new facts emerge. If you represent an organization and see an inaccuracy, contact us with documentation through Contact or submit corrections via Report a breach.

Responsible use of breach intelligence

BreachHistory is a reference layer for education and due diligence, not legal, insurance, or investment advice. Always corroborate facts with primary sources and your counsel. We encourage ethical use: focus on verified disclosures, respect individuals’ privacy, and avoid sensationalizing incidents without context.

Newsletter, shortcuts & bookmarking

Subscribe to our weekly newsletter for digests of new incidents and analysis, explore popular company pages from the footer, and bookmark this site as your starting point when you need to answer: what happened, when, and at what scale?

General inquiries

For partnerships, media, or research collaboration:

hello@breachhistory.com

Report a data breach

To submit a breach for our database, use our dedicated form. We review every submission.

Report a breach