Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

  1. Elara Caring

    TX, US · Healthcare Provider · Hacking/IT Incident
    22.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email
  2. Cure Dental

    TX, US · Healthcare Provider · Hacking/IT Incident
    878people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  3. Chicago Family Health Center

    IL, US · Healthcare Provider · Hacking/IT Incident
    90Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  4. Northeast Professional Caregivers

    OH, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Email
  5. NAS Recovery Solutions

    CO, US · Healthcare Provider · Unauthorized Access/Disclosure
    7Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record
    • Network Server
  6. JCPenney

    jcpenny.com
    368.4Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Government issued IDs
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    • +1 more
    In June 2026, retailer JCPenney and associated brands were targeted in a ShinyHunters "pay or leak" extortion campaign. Data allegedly obtained from JCPenney through the exploitation of a critical zero-day vulnerability in Oracle PeopleSoft was later published publicly. The exposed records indicated they primarily related to internal HR systems and impacted current and former employees. The data included 368k corporate and personal email addresses, names, dates of birth, Social Security numbers, phone numbers and home addresses.
  7. Kentucky Mountain Health Alliance

    KY, US · Healthcare Provider · Hacking/IT Incident
    30.8Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  8. Colorado Health Network Inc.

    CO, US · Healthcare Provider · Hacking/IT Incident
    68.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  9. Ralph Lauren

    ralphlauren.com
    139.9Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Age groups
    • Email addresses
    • Genders
    • Names
    • Phone numbers
    In June 2026, fashion retailer Ralph Lauren was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published hundreds of gigabytes of data they claimed was obtained from the organisation's Salesforce instance, including 140k unique email addresses along with names, phone numbers, genders and age groups.
  10. Suntree Internal Medicine

    FL, US · Healthcare Provider · Hacking/IT Incident
    9.8Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  11. Centers Lab NJ LLC

    NJ, US · Healthcare Provider · Hacking/IT Incident
    542.4Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  12. Columbia Orthopaedic Group

    MO, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  13. Cherry Street Services, Inc.

    MI, US · Healthcare Provider · Hacking/IT Incident
    501people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  14. CFGI

    cfgi.com
    248.2Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    In March 2026, the financial consulting and advisory firm CFGI was the target of a ShinyHunters "pay-or-leak" extortion campaign. The group subsequently publicised data allegedly obtained from CFGI comprising corporate contact information, including 243k unique email addresses, names, phone numbers and physical addresses.
  15. Blue Fish Pediatrics

    TX, US · Healthcare Provider · Hacking/IT Incident
    62.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  16. Decatur Diagnostic Laboratory Inc.

    AL, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
  17. 508people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Full Date of Birth
    • Student ID Number
    • Health Insurance Policy or ID Number
    • Medical Information
    • +1 more
  18. 9.4Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Financial & Banking Information
    • Full Date of Birth
    • Passport Number
    • Medical Information
    • +1 more

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 12 hours ago.