Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. Aroostook Mental Health Center

    ME, US · Healthcare Provider · Hacking/IT Incident
    501people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  2. Passaic County, New Jersey

    NJ, US · Business Associate · Hacking/IT Incident
    1.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  3. Vimeo

    vimeo.com
    119.2Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    In April 2026, the ShinyHunters extortion group listed Vimeo on their extortion portal as part of their "pay or leak" campaign. They subsequently published hundreds of gigabytes of data, predominantly consisting of video titles, technical data and metadata. The data also included 119k unique email addresses, sometimes accompanied by names. Vimeo attributed the exposure to a breach of Anodot, a third-party analytics vendor, and advised the incident does not include "Vimeo video content, valid user login credentials, or payment card information".

  4. BAYADA Home Health Care, Inc.

    NJ, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  5. IKRON Corporation

    OH, US · Healthcare Provider · Hacking/IT Incident
    11.8Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record
    • Network Server

  7. Marcus & Millichap

    marcusmillichap.com
    1.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Employers
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    In April 2026, the commercial real estate brokerage firm Marcus & Millichap was named as one of multiple alleged victims of the ShinyHunters hacking and extortion group. Data alleged to have been obtained from the company was subsequently released publicly and included 1.8M unique email addresses, along with names, phone numbers and employment-related information including employer, job title and physical company address. In their disclosure notice, Marcus & Millichap advised that data which may have been accessed appeared limited to "company forms, templates, marketing materials, and general contact information".

  8. ZenBusiness

    zenbusiness.com
    5.1Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    In March 2026, the hacker and extortion group "ShinyHunters" claimed to have obtained a substantial corpus of data from ZenBusiness, a business formation and compliance platform. The group claimed the data had been exfiltrated from platforms including Snowflake, Mixpanel and Salesforce, and threatened to publish it if a ransom was not paid. The following month, after claiming payment had not been made, ShinyHunters publicly released the data. The collection amounted to many terabytes across thousands of files that appeared to originate from multiple systems and business functions, including leads, support records and other CRM-related data. The data contained approximately 5M unique email addresses, often accompanied by name and phone number depending on the source file.

  10. Capitol Pain Institute

    CO, US · Healthcare Provider · Hacking/IT Incident
    695people
    Disclosed
    HHS OCR breach portal Official register
    • Email

  11. University of Michigan/Michigan Medicine

    MI, US · Healthcare Provider · Unauthorized Access/Disclosure
    551people
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record

  13. CUNNINGHAM PROSTHETIC CARE LLC

    ME, US · Healthcare Provider · Hacking/IT Incident
    2.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  14. Integrated Pain Associates

    TX, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  15. Western Orthopaedics, P.C.

    CO, US · Healthcare Provider · Hacking/IT Incident
    113.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  16. Aman

    aman.com
    215.6Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Genders
    • Language preferences
    • Names
    • Nationalities
    • Phone numbers
    • +3 more
    In April 2026, the ultra-luxury hotel brand Aman was named by ShinyHunters as the target of a "pay or leak" extortion campaign, with the data allegedly obtained from their Salesforce CRM. The data was subsequently leaked publicly and contained over 200k unique email addresses. Whilst not present on all records, the data also included genders, physical addresses, phone numbers, nationalities, dates of birth, spouse names and VIP status codes.

  17. Mt. Spokane Pediatrics

    WA, US
    29.4Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Health Insurance Policy or ID Number
    • Medical Information

  18. Totem Lake Family Dentistry

    WA, US · Healthcare Provider · Hacking/IT Incident
    3.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  19. Mt. Spokane Pediatrics

    WA, US · Healthcare Provider · Hacking/IT Incident
    32Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  20. Tri-Cities Gastroenterology

    TN, US · Healthcare Provider · Hacking/IT Incident
    67.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  21. Northwoods Surgery Center

    MN, US · Healthcare Provider · Hacking/IT Incident
    5.4Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  22. FMRS Health Systems, Inc.

    WV, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  23. Pitney Bowes

    pitneybowes.com
    8.2Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Job titles
    • Names
    • Phone numbers
    • Physical addresses
    In April 2026, the hacking collective ShinyHunters claimed to have obtained data from Pitney Bowes as part of a broader extortion campaign that also named several other organisations. After negotiations allegedly failed, the group publicly released the data which included 8.2M unique email addresses, along with names, phone numbers and physical addresses. A subset of the data also included Pitney Bowes employee records with job titles.

  24. C2N Diagnostics, LLC

    MO, US · Healthcare Provider · Hacking/IT Incident
    2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 8 hours ago.