Updated hourly
Major data breaches: what we know
Every breach of 100,000 people or more first reported in the last 90 days. Each page says what is established and by whom, what is not known yet, the company’s record, and what to do if your data was in it.
- Major breaches, 90 days
- 141
- Confirmed
- 99
- Largest
- 335,000,000
- Maileva 22,000,000
- Yamada Denki 3,500,000
- Monex Securities 1,130,000
- City of Osaka 1,000,000
- Realdania 195,000
- Caixa Econômica Federal 7,600,000
- Caixa Seguridade 7,600,000
- Japan Chamber of Commerce and Industry 980,000
- Access Dental Management 341,049
- YouHack 7,160,849
- Tisza Párt (Tisza Világ alkalmazás) 200,000
- Vrienden van Amstel LIVE 128,000
- Nitori Holdings 37,620,000
- PJ&A 13,300,000
- Shareful 7,500,000
- Wills 5,490,000
- Rohto Pharmaceutical 2,797,545
- Sega 2,200,000
- SAS AB 350,164
- Casinos Austria 150,000
- Norwegian 144,249
- Perry Johnson Companies 13,000,000
- Premise Health Holding 313,046
- Rassemblement national 121,000
- Iris Ohyama 7,700,000
- Amplifon (USA) 1,300,000
- Vanguard Group 14,000,000
- Istyle 3,000,000
- SMBC Consumer Finance 320,118
- NTT Docomo 300,000
- Paycloud Holdings 77,000,000
- Harvard 850,537
- Seven-Eleven Japan 160,000
- Iris Plaza 7,700,000
- Nojima 7,000,000
- Florida's education department 4,900,000
- Arcadia 3,000,000
- Columbia University 2,973,631
- Suntory Holdings 100,000
- Air India 4,500,000
- Club Tourism 4,320,000
- Ryohin Keikaku 27,260,000
- World 1,200,000
- Binance 335,000,000
- Educational Testing Service (ETS) 5,700,000
- Marathon Health 5,687,724
- Florida Department of Education 4,900,000
- Revolve Group 1,515,073
- General Administration of Public Finance 678,000
- compagnie des transports 230,000
- Hippo Analytics 176,128
- Smart EX 170,000
- Fore 5,700,000
- Sony 2,580,000
- Agencia de Gobernanza Electrónica 750,000
- Daekyo 650,000
- Sony Life Insurance 385,000
- Bandai Namco 300,000
- Yumilink 9,000,000
- Sony Network Communications 2,600,000
- Quantum Health 290,792
- Joshin 6,230,000
- Frontline Education 3,085,266
- Rakuten Travel 2,600,000
- UK Biobank 500,000
- Park24 6,628,007
- Hollys 2,760,000
- Loblaw 2,000,000
- Navigate 360 828,537
- 3 Danmark 400,000
- Motility Software Solutions 194,755
- Parti communiste français 190,000
- Sagawa Express 53,230,000
- Capcom 12,000,000
- University of Copenhagen 525,000
- Trustbank 4,454,097
- I-CAD (French pet register) 2,900,000
- Alternative für Deutschland 420,000
- Gîtes de France 117,574
- Burger King Japan 11,180,000
- Nikkei 1,830,000
- Central Ohio Primary Care Physicians, Inc. (COPC) 1,351,650
- Railway 4,800,000
- Crunchbase 559,908
- Daiichi Kosho 8,000,000
- Sharecare 318,185
- Ricardo 890,000
- Blueberry Pediatrics 401,496
- Neogen 435,963
- Winona County 123,476
- Angel One 6,765,054
- CyrusOne 373,460
- Double Counter 274,922
- Danish Central Person Register (CPR) 8,800,000
- iRhythm Technologies 8,179,772
- Sheppard, Mullin, Richter & Hampton 204,001
- Technical University of Denmark (DTU) 200,000
- Denver Health Medical Plan 238,083
- World Acceptance 232,401
- Atlantic Digestive Specialists 173,853
- DriveWealth 30,000,000
- Poppins Payroll Company 246,937
- Baltimore Medical System 197,201
- City of McMinnville 122,864
- Saber Healthcare 427,084
- MedImpact Healthcare Systems 335,281
- OneMain Financial Group 122,783
- Marana Health Center 191,295
- Fairwinds Credit Union 165,054
- LimeLeads 17,838,396
- Burger King Russia 3,155,792
- Ridgeway Pharmacy 258,920
- Stitch Connect 113,727
- IDScan.net 13,000,001
- Opportune 128,106
- Call-on-Doc 107,861
- AngMar Management Services 126,196
- CenterPoint Energy 1,062,060
- Paradigm Healthcare Services 970,403
- Clover Health 138,677
- Chess.com 4,653,212
- Cornerstone Staffing Solutions 366,122
- Catalyst Physician Group 242,121
- zHealth 128,422
- GI Medicine Associates 264,724
- Greenberg Traurig, LLP (“GT”) 150,000
- Hibbett Retail 109,732
- Catalyst Brands 187,341
- Manchester Airports Group 8,849,657
- Questel 1,226,209
- Healthfirst Bluegrass 139,834
- Bell American Group 115,346
- Carhartt 12,933,413
- Golf Canada 568,972
- Premier Medical Group of the Hudson Valley 282,075
- ASOS US Sales 138,828
- HUT American Group 135,007
- Oz Hair and Beauty 1,988,331
- Nebraska Orthopaedic Center (Aesto, LLC) 235,270
- Fanlore 144,520
- Apple American Group LLC and Apple American Group II 282,573
How this list is made
A breach is listed when an official notice, the company or a news report gives a count of 100,000 or more. Where only US states’ counts of their own residents are known, they are added up and shown as “at least”. Attackers’ claims are never listed: a claim is not proof that data was taken. Counts often grow after the first notice (count drift), so a breach can enter this list days after it was first reported.
Journalists and researchers: everything here is free to use with credit under CC BY 4.0; the data is in the open dataset, and how we check ourselves is in the accuracy audit.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.