<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Data breaches in government · Privacy Unpacked</title>
  <link href="https://privacyunpacked.com/breaches/sector/government/feed.xml" rel="self"/>
  <link href="https://privacyunpacked.com/breaches/sector/government/"/>
  <id>https://privacyunpacked.com/breaches/sector/government/feed.xml</id>
  <updated>2026-11-13T00:00:00Z</updated>
  <author><name>Privacy Unpacked</name></author>
  <entry>
    <title>City of Osaka data breach (Japan): 1,000,000 email addresses</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-osaka/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-osaka/#cityofosaka-2026-11-13</id>
    <updated>2026-11-13T00:00:00Z</updated>
    <summary>The Record reported a data breach at City of Osaka (Japan) on 13 November 2026. It affected 1,000,000 email addresses. Exposed: Email addresses.</summary>
  </entry>
  <entry>
    <title>Colorado County, Texas data breach (United States): 5,503 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/colorado-county-texas/"/>
    <id>https://privacyunpacked.com/breaches/company/colorado-county-texas/#coloradocountytexas-2026-11-13</id>
    <updated>2026-11-13T00:00:00Z</updated>
    <summary>Colorado County, Texas (TX, United States) notified the Texas Attorney General of a data breach on 13 November 2026. It told that state about 5,503 Texas residents; the total can be higher. Exposed: Social Security numbers, Health and medical information, Names and Addresses. The breach began on 18 September 2026, 56 days before it was reported.</summary>
  </entry>
  <entry>
    <title>VT Department of Labor data breach (United States): 1 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/vt-department-of-labor/"/>
    <id>https://privacyunpacked.com/breaches/company/vt-department-of-labor/#vtdepartmentoflabor-2026-10-30</id>
    <updated>2026-10-30T00:00:00Z</updated>
    <summary>VT Department of Labor (United States) notified the Vermont Attorney General of a data breach on 30 October 2026. It told that state about 1 Vermont residents; the total can be higher. Exposed: Social Security numbers.</summary>
  </entry>
  <entry>
    <title>Ministry of Foreign Affairs data breach (Japan): 3,600 records</title>
    <link href="https://privacyunpacked.com/breaches/company/ministry-of-foreign-affairs/"/>
    <id>https://privacyunpacked.com/breaches/company/ministry-of-foreign-affairs/#ministryofforeignaffairs-2026-10-30</id>
    <updated>2026-10-30T00:00:00Z</updated>
    <summary>FNN Prime Online, Yahoo! News and Sankei News reported a data breach at Ministry of Foreign Affairs (Japan) on 30 October 2026. It affected 3,600 records. Exposed: Email addresses and Names.</summary>
  </entry>
  <entry>
    <title>Staffordshire Police data breach (United Kingdom)</title>
    <link href="https://privacyunpacked.com/breaches/company/staffordshire-police/"/>
    <id>https://privacyunpacked.com/breaches/company/staffordshire-police/#staffordshirepolice-2026-10-29</id>
    <updated>2026-10-29T00:00:00Z</updated>
    <summary>Infosecurity Magazine reported a data breach at Staffordshire Police (United Kingdom) on 29 October 2026. Exposed: Personal information.</summary>
  </entry>
  <entry>
    <title>U.S. Department of Homeland Security data breach (United States): 41,000 employees</title>
    <link href="https://privacyunpacked.com/breaches/company/us-department-of-homeland-security/"/>
    <id>https://privacyunpacked.com/breaches/company/us-department-of-homeland-security/#usdepartmentofhomelandsecurity-2026-10-28</id>
    <updated>2026-10-28T00:00:00Z</updated>
    <summary>Erem News, TechCrunch and Wired reported a data breach at U.S. Department of Homeland Security (DC, United States) on 28 October 2026. It affected 41,000 employees. Exposed: Government ID numbers, Email addresses, Phone numbers, Names, Addresses and Job titles and more.</summary>
  </entry>
  <entry>
    <title>Alliance Police Nationale data breach (France)</title>
    <link href="https://privacyunpacked.com/breaches/company/alliance-police-nationale/"/>
    <id>https://privacyunpacked.com/breaches/company/alliance-police-nationale/#alliancepolicenationale-2026-10-24</id>
    <updated>2026-10-24T00:00:00Z</updated>
    <summary>cyberattaque.org reported a data breach at Alliance Police Nationale (France) on 24 October 2026. Exposed: Data.</summary>
  </entry>
  <entry>
    <title>Federal Court of Australia data breach (Australia)</title>
    <link href="https://privacyunpacked.com/breaches/company/federal-court-of-australia/"/>
    <id>https://privacyunpacked.com/breaches/company/federal-court-of-australia/#federalcourtofaustralia-2026-10-22</id>
    <updated>2026-10-22T00:00:00Z</updated>
    <summary>ABC (Australian Broadcasting Corporation) reported a data breach at Federal Court of Australia (Australia) on 22 October 2026. Exposed: Court files, Court transcripts and Sensitive family court data.</summary>
  </entry>
  <entry>
    <title>Department of Defense data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/department-of-defense/"/>
    <id>https://privacyunpacked.com/breaches/company/department-of-defense/#departmentofdefense-2026-10-22</id>
    <updated>2026-10-22T00:00:00Z</updated>
    <summary>ICLG reported a data breach at Department of Defense (VA, United States) on 22 October 2026. Exposed: Social Security numbers.</summary>
  </entry>
  <entry>
    <title>Isle of Wight Council data breach (United Kingdom)</title>
    <link href="https://privacyunpacked.com/breaches/company/isle-of-wight-council/"/>
    <id>https://privacyunpacked.com/breaches/company/isle-of-wight-council/#isleofwightcouncil-2026-10-15</id>
    <updated>2026-10-15T00:00:00Z</updated>
    <summary>Isle of Wight County Press reported a data breach at Isle of Wight Council (United Kingdom) on 15 October 2026. Exposed: Children&#39;s details.</summary>
  </entry>
  <entry>
    <title>City of Foster City data breach (United States): 5,135 people</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-foster-city/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-foster-city/#cityoffostercity-2026-10-15</id>
    <updated>2026-10-15T00:00:00Z</updated>
    <summary>City of Foster City (United States) notified the California Attorney General and the Indiana Attorney General of a data breach on 15 October 2026. It affected 5,135 people. The breach began on 28 February 2026, 229 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The City of Mt. Angel data breach (United States): 471 Oregon residents</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-mt-angel/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-mt-angel/#cityofmtangel-2026-10-13</id>
    <updated>2026-10-13T00:00:00Z</updated>
    <summary>The City of Mt. Angel (United States) notified the Oregon Department of Justice of a data breach on 13 October 2026. It told that state about 471 Oregon residents; the total can be higher. The breach began on 25 August 2026, 49 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Murray County data breach (United States): 6,608 people</title>
    <link href="https://privacyunpacked.com/breaches/company/murray-county/"/>
    <id>https://privacyunpacked.com/breaches/company/murray-county/#murraycounty-2026-10-13</id>
    <updated>2026-10-13T00:00:00Z</updated>
    <summary>Murray County (MN, United States) notified the Vermont Attorney General, the Indiana Attorney General and the US Department of Health and Human Services of a data breach on 13 October 2026. It affected 6,608 people. Exposed: Government ID numbers and Health and medical information.</summary>
  </entry>
  <entry>
    <title>Winona County data breach (United States): 123,476 people</title>
    <link href="https://privacyunpacked.com/breaches/company/winona-county/"/>
    <id>https://privacyunpacked.com/breaches/company/winona-county/#winonacounty-2026-10-08</id>
    <updated>2026-10-08T00:00:00Z</updated>
    <summary>Winona County (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 8 October 2026. It affected 123,476 people. Exposed: Social Security numbers.</summary>
  </entry>
  <entry>
    <title>City of Leavenworth, KS data breach (United States): 8,472 people</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-leavenworth-ks/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-leavenworth-ks/#cityofleavenworthks-2026-10-02</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>City of Leavenworth, KS (United States) notified the Indiana Attorney General of a data breach on 2 October 2026. It affected 8,472 people. The breach began on 18 November 2025, 318 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The Woodlands Arts Council data breach (United States): 2,923 people</title>
    <link href="https://privacyunpacked.com/breaches/company/woodlands-arts-council/"/>
    <id>https://privacyunpacked.com/breaches/company/woodlands-arts-council/#woodlandsartscouncil-2026-10-02</id>
    <updated>2026-09-30T00:00:00Z</updated>
    <summary>The Woodlands Arts Council (United States) notified the Texas Attorney General and the Indiana Attorney General of a data breach on 30 September 2026. It affected 2,923 people. Exposed: Financial account and card details and Names. The breach began on 9 December 2025, 295 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The Woodlands Art Council data breach (United States): 1 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/woodlands-art-council/"/>
    <id>https://privacyunpacked.com/breaches/company/woodlands-art-council/#woodlandsartcouncil-2026-09-30</id>
    <updated>2026-09-30T00:00:00Z</updated>
    <summary>The Woodlands Art Council (United States) notified the Vermont Attorney General of a data breach on 30 September 2026. It told that state about 1 Vermont residents; the total can be higher. Exposed: Financial account and card details.</summary>
  </entry>
  <entry>
    <title>Association of the Bar of the City of New York data breach (United States): 3,847 people</title>
    <link href="https://privacyunpacked.com/breaches/company/association-of-the-bar-of-the-city-of-new-york/"/>
    <id>https://privacyunpacked.com/breaches/company/association-of-the-bar-of-the-city-of-new-york/#associationofbarofcityofnewyork-2026-09-29</id>
    <updated>2026-09-29T00:00:00Z</updated>
    <summary>Association of the Bar of the City of New York (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 29 September 2026. It affected 3,847 people. Exposed: Financial account and card details.</summary>
  </entry>
  <entry>
    <title>City of McMinnville data breach (United States): 122,864 people</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-mcminnville/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-mcminnville/#cityofmcminnville-2026-09-29</id>
    <updated>2026-09-29T00:00:00Z</updated>
    <summary>City of McMinnville (United States) notified the California Attorney General, the Oregon Department of Justice, the Vermont Attorney General, the Texas Attorney General and the Indiana Attorney General of a data breach on 29 September 2026. It affected 122,864 people. Exposed: Social Security numbers, Driver’s license numbers, Government ID numbers and Names. The breach began on 1 June 2026, 120 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The City of Jacksonville, TX data breach (United States): 250 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-jacksonville-tx/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-jacksonville-tx/#cityofjacksonvilletx-2026-09-21</id>
    <updated>2026-09-21T00:00:00Z</updated>
    <summary>The City of Jacksonville, TX (TX, United States) notified the Texas Attorney General of a data breach on 21 September 2026. It told that state about 250 Texas residents; the total can be higher. Exposed: Social Security numbers, Government ID numbers, Health and medical information, Dates of birth and Names. The breach began on 3 July 2026, 80 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The Housing &amp; Redevelopment Authority of Clay County data breach (United States): 8,703 people</title>
    <link href="https://privacyunpacked.com/breaches/company/housing-and-redevelopment-authority-of-clay-county/"/>
    <id>https://privacyunpacked.com/breaches/company/housing-and-redevelopment-authority-of-clay-county/#housingredevelopmentauthorityofclaycounty-2026-09-17</id>
    <updated>2026-09-17T00:00:00Z</updated>
    <summary>The Housing &amp; Redevelopment Authority of Clay County (United States) notified the Indiana Attorney General of a data breach on 17 September 2026. It affected 8,703 people. The breach began on 19 June 2026, 90 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Catawba County data breach (United States): 55 Indiana residents</title>
    <link href="https://privacyunpacked.com/breaches/company/catawba-county/"/>
    <id>https://privacyunpacked.com/breaches/company/catawba-county/#catawbacounty-2026-10-17</id>
    <updated>2026-09-15T00:00:00Z</updated>
    <summary>Catawba County (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 15 September 2026. It told the states about 55 Indiana residents; the total can be higher. Exposed: Social Security numbers and Health and medical information.</summary>
  </entry>
  <entry>
    <title>City of North Adams data breach (United States): 17 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-north-adams/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-north-adams/#cityofnorthadams-2026-09-09</id>
    <updated>2026-09-09T00:00:00Z</updated>
    <summary>City of North Adams (United States) notified the Vermont Attorney General of a data breach on 9 September 2026. It told that state about 17 Vermont residents; the total can be higher. Exposed: Social Security numbers.</summary>
  </entry>
  <entry>
    <title>St. Joseph County, Indiana data breach (United States): 380 people</title>
    <link href="https://privacyunpacked.com/breaches/company/st-joseph-county-indiana/"/>
    <id>https://privacyunpacked.com/breaches/company/st-joseph-county-indiana/#stjosephcountyindiana-2026-09-03</id>
    <updated>2026-09-03T00:00:00Z</updated>
    <summary>St. Joseph County, Indiana (United States) notified the Indiana Attorney General of a data breach on 3 September 2026. It affected 380 people. The breach began on 24 March 2026, 163 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Coryell County, Texas data breach (United States): 542 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/coryell-county-texas/"/>
    <id>https://privacyunpacked.com/breaches/company/coryell-county-texas/#coryellcountytexas-2026-09-03</id>
    <updated>2026-09-03T00:00:00Z</updated>
    <summary>Coryell County, Texas (TX, United States) notified the Texas Attorney General of a data breach on 3 September 2026. It told that state about 542 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Health and medical information, Dates of birth, Names and Addresses.</summary>
  </entry>
  <entry>
    <title>Duval County, Texas data breach (United States): 474 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/duval-county-texas/"/>
    <id>https://privacyunpacked.com/breaches/company/duval-county-texas/#duvalcountytexas-2026-09-01</id>
    <updated>2026-09-01T00:00:00Z</updated>
    <summary>Duval County, Texas (TX, United States) notified the Texas Attorney General of a data breach on 1 September 2026. It told that state about 474 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Health and medical information, Names and Addresses. The breach began on 13 April 2026, 141 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Indiana Professional Licensing Agency data breach (United States): 1 people</title>
    <link href="https://privacyunpacked.com/breaches/company/indiana-professional-licensing-agency/"/>
    <id>https://privacyunpacked.com/breaches/company/indiana-professional-licensing-agency/#indianaprofessionallicensingagency-2026-08-28</id>
    <updated>2026-08-28T00:00:00Z</updated>
    <summary>Indiana Professional Licensing Agency (United States) notified the Indiana Attorney General of a data breach on 28 August 2026. It affected 1 people. The breach began on 10 August 2026, 18 days before it was reported.</summary>
  </entry>
  <entry>
    <title>City of Marion Iowa data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-marion-iowa/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-marion-iowa/#cityofmarioniowa-2026-08-21</id>
    <updated>2026-08-21T00:00:00Z</updated>
    <summary>City of Marion Iowa (United States) notified the Iowa Attorney General of a data breach on 21 August 2026.</summary>
  </entry>
  <entry>
    <title>City of Brandenburg data breach (United States): 499 people</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-brandenburg/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-brandenburg/#cityofbrandenburg-2026-08-21</id>
    <updated>2026-08-21T00:00:00Z</updated>
    <summary>City of Brandenburg (United States) notified the Indiana Attorney General of a data breach on 21 August 2026. It affected 499 people. The breach began on 22 April 2026, 121 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Southwestern Vermont Council on Aging data breach (United States): 14 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/southwestern-vermont-council-on-aging/"/>
    <id>https://privacyunpacked.com/breaches/company/southwestern-vermont-council-on-aging/#southwesternvermontcouncilonaging-2026-08-18</id>
    <updated>2026-08-18T00:00:00Z</updated>
    <summary>Southwestern Vermont Council on Aging (United States) notified the Vermont Attorney General of a data breach on 18 August 2026. It told that state about 14 Vermont residents; the total can be higher. Exposed: Health and medical information.</summary>
  </entry>
  <entry>
    <title>Texas Department of Criminal Justice data breach (United States): 1,494 Texas residents</title>
    <link href="https://privacyunpacked.com/breaches/company/texas-department-of-criminal-justice/"/>
    <id>https://privacyunpacked.com/breaches/company/texas-department-of-criminal-justice/#texasdepartmentofcriminaljustice-2026-08-18</id>
    <updated>2026-08-18T00:00:00Z</updated>
    <summary>Texas Department of Criminal Justice (TX, United States) notified the Texas Attorney General of a data breach on 18 August 2026. It told that state about 1,494 Texas residents; the total can be higher. Exposed: Social Security numbers and Names. The breach began on 23 June 2026, 56 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Chelan County, WA data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/chelan-county-wa/"/>
    <id>https://privacyunpacked.com/breaches/company/chelan-county-wa/#chelancountywa-2026-08-11</id>
    <updated>2026-08-11T00:00:00Z</updated>
    <summary>Chelan County, WA (United States) notified the Washington Attorney General of a data breach on 11 August 2026. Exposed: Social Security numbers, Passport numbers, Driver’s license numbers, Government ID numbers, Health insurance details and Health and medical information and more. The breach began on 20 May 2026, 83 days before it was reported.</summary>
  </entry>
  <entry>
    <title>The City of New Britain data breach (United States): 5 Vermont residents</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-new-britain/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-new-britain/#cityofnewbritain-2026-07-30</id>
    <updated>2026-07-30T00:00:00Z</updated>
    <summary>The City of New Britain (United States) notified the Vermont Attorney General of a data breach on 30 July 2026. It told that state about 5 Vermont residents; the total can be higher. Exposed: Social Security numbers and Health and medical information.</summary>
  </entry>
  <entry>
    <title>Fresno County Department of Social Services data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/fresno-county-department-of-social-services/"/>
    <id>https://privacyunpacked.com/breaches/company/fresno-county-department-of-social-services/#fresnocountydepartmentofsocialservices-2026-07-28</id>
    <updated>2026-07-28T00:00:00Z</updated>
    <summary>Fresno County Department of Social Services (United States) notified the California Attorney General of a data breach on 28 July 2026. The breach began on 26 August 2025, 336 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Regional Center of Orange County data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/regional-center-of-orange-county/"/>
    <id>https://privacyunpacked.com/breaches/company/regional-center-of-orange-county/#regionalcenteroforangecounty-2026-07-27</id>
    <updated>2026-07-27T00:00:00Z</updated>
    <summary>Regional Center of Orange County (United States) notified the California Attorney General of a data breach on 27 July 2026. The breach began on 27 May 2026, 61 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Department of Child Services - Child Support Bureau data breach (United States): 289 people</title>
    <link href="https://privacyunpacked.com/breaches/company/department-of-child-services-child-support-bureau/"/>
    <id>https://privacyunpacked.com/breaches/company/department-of-child-services-child-support-bureau/#departmentofchildserviceschildsupportbureau-2026-07-22</id>
    <updated>2026-07-22T00:00:00Z</updated>
    <summary>Department of Child Services - Child Support Bureau (United States) notified the Indiana Attorney General of a data breach on 22 July 2026. It affected 289 people.</summary>
  </entry>
  <entry>
    <title>Kootenai County, ID data breach (United States): 20,760 people</title>
    <link href="https://privacyunpacked.com/breaches/company/kootenai-county-id/"/>
    <id>https://privacyunpacked.com/breaches/company/kootenai-county-id/#kootenaicountyid-2026-07-22</id>
    <updated>2026-07-22T00:00:00Z</updated>
    <summary>Kootenai County, ID (United States) notified the Vermont Attorney General, the Indiana Attorney General and the Washington Attorney General of a data breach on 22 July 2026. It affected 20,760 people. Exposed: Social Security numbers.</summary>
  </entry>
  <entry>
    <title>City of Foster City data breach (United States)</title>
    <link href="https://privacyunpacked.com/breaches/company/city-of-foster-city/"/>
    <id>https://privacyunpacked.com/breaches/company/city-of-foster-city/#cityoffostercity-2026-07-13</id>
    <updated>2026-07-13T00:00:00Z</updated>
    <summary>City of Foster City (United States) notified the California Attorney General of a data breach on 13 July 2026. The breach began on 28 February 2026, 135 days before it was reported.</summary>
  </entry>
  <entry>
    <title>Jennings County Government data breach (United States): 1,400 people</title>
    <link href="https://privacyunpacked.com/breaches/company/jennings-county-government/"/>
    <id>https://privacyunpacked.com/breaches/company/jennings-county-government/#jenningscountygovernment-2026-07-09</id>
    <updated>2026-07-09T00:00:00Z</updated>
    <summary>Jennings County Government (United States) notified the Indiana Attorney General of a data breach on 9 July 2026. It affected 1,400 people.</summary>
  </entry>
  <entry>
    <title>Town of West Point, Virginia data breach (United States): 3,078 people</title>
    <link href="https://privacyunpacked.com/breaches/company/town-of-west-point-virginia/"/>
    <id>https://privacyunpacked.com/breaches/company/town-of-west-point-virginia/#townofwestpointvirginia-2026-07-07</id>
    <updated>2026-07-07T00:00:00Z</updated>
    <summary>Town of West Point, Virginia (United States) notified the Indiana Attorney General of a data breach on 7 July 2026. It affected 3,078 people. The breach began on 30 March 2026, 99 days before it was reported.</summary>
  </entry>
</feed>
