Data breaches

Data breach tracker

Recent data breaches and exposures, what each one reportedly involved, and the steps that limit the damage afterwards.

113 entries

October 3, 2026

Revolut fake government-request disclosure (2026): what to check

Revolut says an impostor obtained some customer data through fake government requests. Use your individual notice and official in-app support to check exposure.

October 3, 2026

Vista Del Mar data incident (2026): what is known while the review continues

Vista Del Mar reports a network incident discovered June 30, 2026. Its public notice does not yet specify individual fields or a total affected count.

October 3, 2026

Millstone Medical Outsourcing breach notice (2026): what the public record confirms

Vermont lists a Millstone breach report dated September 21, 2026. Its two-resident count is not a national total. Use your own notice for data and assistance details.

October 3, 2026

Japan Digital Agency GSS VPN breach (2026): what was exposed and what to do

Japan’s Digital Agency says GSS files with about 246,000 personal-information records may have leaked. The notice concerns staff and work-related contacts.

October 3, 2026

OneMain Financial Group data breach (2026): what was exposed and what to do

OneMain’s Texas breach filing lists names, addresses and SSNs for 15,472 Texas residents. Learn what the filing confirms and what your mailed notice can establish.

October 3, 2026

Waterford Hotel Group / LMD Holding data breach (2026): what was exposed and what to do

Waterford Hotel Group and LMD Holding disclosed a network incident discovered May 5, 2026. Check which data applied to you and use verified notice channels.

October 3, 2026

PDCM Insurance data breach (2025): what was exposed and what to do

PDCM reports unauthorized file access on April 27–28, 2025. Review your notice for affected identifiers or health data, monitoring eligibility and recovery steps.

October 3, 2026

Centennial Bank / Happy State Bank data incident (2026): what was reported and what to do

The Texas register lists 2,050 affected residents in the Centennial/Happy State Bank incident. Check your notice for involved data and appropriate next steps.

September 28, 2026

TransUnion data breach (2025): what was exposed and what to do

TransUnion’s Jul 28–29, 2025 support-app incident (Maine AG 4,461,511; Iowa AG PDF) exposed SSN/DOB/contact—not the core credit DB. Soft open-web CTA.

September 28, 2026

Conduent data breach (2025): what was exposed and what to do

Conduent BA intrusion Oct 2024–Jan 2025; HHS OCR update (Jun 2026) cites 62,224,658 with SSN/address/PHI. Company notice + coverage soft CTA.

September 28, 2026

CarGurus data breach (2026): what was exposed and what to do

HIBP/press (Feb 2026) list ~12.4–12.5M CarGurus records with contact data plus finance pre-qual and dealer fields; company dealer investigation update May 2026.

September 28, 2026

Farmers Insurance data breach (2025): what was exposed and what to do

Farmers’ May 29, 2025 vendor-database incident (Maine AG ~1.11M) exposed names, DOB, addresses, driver’s license numbers, and/or last-4 SSN. Iowa/Mass AG notices + what to do.

Related

Everything else in data breaches

101

Find out what data brokers know about you

A free scan shows which sites are exposing your name, phone, address and email, and Delist files the removals for you.

Start your free scan No card required