Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. Bridle Trails Family Dentistry

    WA, US · Healthcare Provider · Hacking/IT Incident
    21Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  2. NJ Pain Care Specialists, LLC

    NJ, US · Healthcare Provider · Hacking/IT Incident
    501people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  3. Abrigo

    abrigo.com
    711.1Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    In April 2026, the fintech software company Abrigo was targeted in a "pay or leak" extortion attempt by the ShinyHunters group. Shortly after, data allegedly taken from the company's Salesforce instance was published publicly and contained over 700k unique email addresses belonging to both Abrigo staff and external contacts. Whilst separate from Abrigo's Salesforce compromise via the Drift application connector the previous year, the data fields described in that incident are consistent with the ShinyHunters data, namely that it was "business contact information" including "institution name, employee name, email addresses, and phone numbers".

  4. Nursa

    WA, US
    13.2Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Full Date of Birth

  6. American Lending Center

    WA, US
    6Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Full Date of Birth

  8. Pivot Health

    FL, US · Business Associate · Hacking/IT Incident
    5.9Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  9. Canada Life

    canadalife.com
    237.8Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    • Salutations
    • Support tickets
    In April 2026, Canada Life was the victim of a "pay or leak" extortion campaign by the ShinyHunters group. The group subsequently published the data which contained over 200k unique email addresses along with names, phone numbers, physical addresses and, in some cases, customer support tickets. In their disclosure notice, Canada Life advised that "it is a small proportion of our customers who may have been impacted". In the wake of the incident, Canada Life also published an alert cautioning customers to be wary of phishing attacks, a pattern often seen after the public release of breached data.

  10. Ocelot Ventures, LLC dba Excelas

    OH, US · Business Associate · Hacking/IT Incident
    2.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  11. Cushman & Wakefield

    cushmanwakefield.com
    310.4Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    • Salutations
    In May 2026, the real estate services firm Cushman & Wakefield was the target of a "pay or leak" extortion campaign by the ShinyHunters group. Following the threat, the group publicly published data they alleged had been obtained from the firm, consisting mostly of C&W email addresses along with tens of thousands of external email addresses and corporate contact records. The exposed data was primarily business information, including names, job titles, company addresses and phone numbers.

  13. Adams County Memorial Hospital

    IN, US · Healthcare Provider · Hacking/IT Incident
    5.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  14. Verber Dental Group PC

    NY, US · Healthcare Provider · Hacking/IT Incident
    8.6Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  15. Bronsky Orthodontics

    NY, US · Healthcare Provider · Hacking/IT Incident
    3.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  16. Palomar Health Medical Group

    CA, US · Healthcare Provider · Hacking/IT Incident
    501people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  18. Zara

    zara.com
    197.4Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Geographic locations
    • Purchases
    • Support tickets
    In April 2026, the fashion brand Zara was among a number of organisations targeted by the ShinyHunters extortion group as part of their "pay or leak" campaign. The group claimed the breach was related to a compromise of the Anodot analytics platform and subsequently published a terabyte of data allegedly including 95M support ticket records. The data contained 197k unique email addresses alongside product SKUs, order IDs and the market the support ticket originated in. Zara's parent company Inditex advised that the incident didn't affect passwords or payment information.

  20. Woflow

    woflow.com
    447.6Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    In March 2026, the AI-driven merchant data platform Woflow was named as a victim by the ShinyHunters data extortion group. The group subsequently published tens of thousands of files allegedly obtained from the company, comprising more than 2TB of data. The trove included hundreds of thousands of email addresses, names, phone numbers and physical addresses, with the data indicating it related to Woflow customers and, in turn, the customers of merchants using their platform.

  21. Midland Care Connection, Inc

    KS, US · Healthcare Provider · Hacking/IT Incident
    4.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  22. LegionProxy

    legionproxy.io
    10.1Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Passwords
    • Purchases
    In April 2026, the commercial residential and ISP proxy network LegionProxy suffered a data breach. The incident exposed 10k email addresses, bcrypt password hashes, names and purchases.

  23. Mitchell County Hospital District

    TX, US · Healthcare Provider · Hacking/IT Incident
    31.6Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  24. TransGlobal Insurance Agency

    WA, US
    1.9Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Full Date of Birth
    • Other

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 8 hours ago.