Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. Berkadia

    berkadia.com
    305.2Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Names
    • Phone numbers
    • Physical addresses
    In March 2026, the commercial real estate finance company Berkadia was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Berkadia's Salesforce instance, including over 300k unique email addresses as well as names, physical addresses and phone numbers, among other data.

  2. Infinite Campus

    infinitecampus.com
    137.1Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    • Support tickets
    • +1 more
    In March 2026, the student information system Infinite Campus was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from Infinite Campus, containing 137k unique email addresses along with names, phone numbers, physical addresses and support tickets. Infinite Campus subsequently sent notifications, advising that the exposed data largely consisted of "names and contact information for school staff" and that "the majority is directory information commonly found on school websites".

  3. Lumexa Imaging

    WA, US
    3.6Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information

  4. Columbia Pacific Advisors, LLC

    WA, US
    1.6Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Financial & Banking Information
    • Full Date of Birth
    • Passport Number
    • Health Insurance Policy or ID Number
    • +2 more

  5. Clinical Registry Solutions

    NY, US · Business Associate · Hacking/IT Incident
    8.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  6. Ohio Living

    OH, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  7. Open Arms Care Corporation

    TN, US · Healthcare Provider · Hacking/IT Incident
    893people
    Disclosed
    HHS OCR breach portal Official register
    • Email

  8. Chickasaw Nation Department of Health

    OK, US · Healthcare Provider · Unauthorized Access/Disclosure
    1.6Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record

  9. University of Nottingham

    nottingham.ac.uk
    454.6Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Academic records
    • Citizenship statuses
    • Dates of birth
    • Disabilities
    • Email addresses
    • Ethnicities
    • Genders
    • +8 more
    In June 2026, the University of Nottingham was the target of a cyber attack, later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including names, addresses, phone numbers, ethnicities, disabilities, passport numbers and information relating to academic enrolments and fee payments. In a post about the incident, the university advised that the breach affected both "current students, and alumni".

  10. Dr. Erick Perroud

    MI, US · Healthcare Provider · Hacking/IT Incident
    7.7Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  11. Michigan Surgical Center, LLC

    MI, US · Healthcare Provider · Hacking/IT Incident
    7.6Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  12. Monaco & Associates Incorporated

    KS, US · Healthcare Provider · Hacking/IT Incident
    534people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  13. Lutheran Home for the Aged

    MO, US · Healthcare Provider · Hacking/IT Incident
    2.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  14. Sierra Management Group

    CA, US · Business Associate · Hacking/IT Incident
    1.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  15. Baker Distributing

    bakerdist.com
    102.9Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    • Support tickets
    In May 2026, the HVAC/R wholesale distributor Baker Distributing Company was added to the ShinyHunters data extortion group's "pay or leak" site. In early June, the group publicly published data they claimed had been obtained from Baker's SharePoint and Salesforce infrastructure including 103k unique email addresses along with names, physical addresses, phone numbers and tickets relating to the company's HVAC contractor customer base. The exposed data was largely corporate contact and support information with limited sensitivity.

  16. Plaza Home Mortgage Inc.

    WA, US
    9.6Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Full Date of Birth
    • Username and Password/Security Question Answers

  20. Xsolis, Inc.

    TN, US · Business Associate · Hacking/IT Incident
    1.4Mpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  21. Minnesota Epilepsy Group, P.A.

    MN, US · Healthcare Provider · Hacking/IT Incident
    80.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  22. Signature Healthcare Corporation

    MA, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  24. Sturdy Health, Inc.

    MA, US · Healthcare Provider · Hacking/IT Incident
    1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 11 hours ago.