Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. ZenPatient, Inc.

    WA, US
    651people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Full Date of Birth
    • Passport Number
    • Medical Information

  2. The Estée Lauder Companies (Oracle)

    WA, US
    2.1Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Financial & Banking Information
    • Full Date of Birth
    • Passport Number
    • Medical Information
    • Other

  4. One Medical Group, Inc.

    CA, US · Healthcare Provider · Hacking/IT Incident
    153.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  5. James C. Standring, DDS

    CA, US · Healthcare Provider · Hacking/IT Incident
    6.7Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  6. ZenPatient, Inc.

    CA, US · Healthcare Provider · Hacking/IT Incident
    15.7Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  8. DentaQuest, LLC

    WA, US
    148.3Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information
    • Protected Health Information owned or licensed by a HIPAA covered entity

  9. Fox Rothschild LLP

    WA, US
    1.9Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Full Date of Birth

  10. DentaQuest, LLC

    MA, US · Health Plan · Hacking/IT Incident
    15Mpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  12. Wilmer Cutler Pickering Hale and Dorr LLP

    WA, US
    17.3Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Full Date of Birth
    • Student ID Number

  13. Resource Center of Dallas, Inc.

    TX, US · Healthcare Provider · Hacking/IT Incident
    12.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  14. Fluke

    fluke.com
    821.1Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Job titles
    • Names
    • Physical addresses
    • Support tickets
    In July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published more than 100GB of data allegedly taken from the company. The corpus contained largely corporate contact information, including over 800k unique email addresses, names, phone numbers and physical addresses. A large collection of support cases was also present.

  15. Goose Creek

    goosecreek.com
    6.6Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    • Purchases
    In June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers, claiming the company had a security vulnerability and suffered a data breach. The data was subsequently sent to Have I Been Pwned and contained 6.6M unique email addresses along with names, phone numbers, physical addresses, order IDs and total spent. The data appears to have been obtained from the company's Shopify instance. Goose Creek is aware of the reports but was unable to provide Have I Been Pwned with any further information at the time of publication.

  16. Parkhurst Chiropractic Life Center PLC

    MI, US · Healthcare Provider · Unauthorized Access/Disclosure
    728people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  17. TELUS Health (US) LTD.

    MA, US · Healthcare Provider · Unauthorized Access/Disclosure
    2.6Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  18. The Washington Post (Oracle)

    WA, US
    514people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Financial & Banking Information
    • Passport Number
    • Health Insurance Policy or ID Number

  19. Youth Home, Inc.

    AR, US · Healthcare Provider · Hacking/IT Incident
    689people
    Disclosed
    HHS OCR breach portal Official register
    • Email

  21. Madera Community Hospital

    CA, US · Healthcare Provider · Hacking/IT Incident
    150.8Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  22. Knospe-Lerncenter GmbH

    AZ, US · Healthcare Provider · Unauthorized Access/Disclosure
    800people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  23. Glendale Community College

    glendale.edu
    793.9Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Academic records
    • Dates of birth
    • Email addresses
    • Genders
    • Government issued IDs
    • Names
    • Phone numbers
    • +1 more
    In June 2026, Glendale Community College was the target of a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from Glendale was later published online and included almost 800k unique email addresses along with various other data fields, including names, addresses, phone numbers, Social Security numbers and other information relating to student enrolments. In its disclosure notice, the college advised that "the potentially impacted information may vary for each individual and may include all or just one of the above-listed types of information".

  24. Entyre Care Massachusetts Inc.

    MA, US · Healthcare Provider · Unauthorized Access/Disclosure
    1.7Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record
    • Network Server

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 13 hours ago.