Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  2. Bayside Dental

    WA, US · Healthcare Provider · Hacking/IT Incident
    10.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  4. Amtrak

    amtrak.com
    2.1Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Physical addresses
    • Support tickets
    In April 2026, the hacking group ShinyHunters claimed they had breached Amtrak. The group typically compromises organisations' Salesforce instances before demanding a ransom and later, if not paid, dumping the data publicly. They subsequently published the alleged data which contained over 2M unique email addresses along with names, physical addresses and customer support records.

  5. Panera, LLC

    WA, US
    1.6Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Full Date of Birth

  6. Providence (Health Gorilla)

    WA, US
    838people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information

  8. McGraw Hill

    mheducation.com
    13.5Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    In April 2026, education company McGraw Hill confirmed a data breach following an extortion attempt. Attributed to a Salesforce misconfiguration, the company stated the incident exposed "a limited set of data from a webpage hosted by Salesforce on its platform". More than 100GB of data was later publicly distributed, containing 13.5M unique email addresses across multiple files, with additional fields such as name, physical address and phone number appearing inconsistently across some records.

  10. Mazzola Mardon, P.C.

    NY, US · Business Associate · Hacking/IT Incident
    2.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  11. Pediatric Products, LLC

    WA, US
    4.3Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information

  12. Defense Health Agency

    VA, US · Health Plan · Unauthorized Access/Disclosure
    1.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  13. Hallmark

    hallmark.com
    1.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    • Support tickets
    In March 2026, Hallmark suffered an alleged breach and subsequent extortion after attackers gained access to data stored within Salesforce. The data was later published after the extortion deadline passed, exposing 1.7M unique email addresses across both Hallmark and the Hallmark+ streaming service, along with names, phone numbers, physical addresses and support tickets.

  14. David Evans Enterprises, Inc.

    WA, US
    2.3Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Financial & Banking Information
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information

  16. CARE Clinic

    MN, US · Healthcare Provider · Hacking/IT Incident
    500people
    Disclosed
    HHS OCR breach portal Official register
    • Email

  17. Springfield Hospital

    VT, US · Healthcare Provider · Hacking/IT Incident
    5.9Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  18. Texas Tech University Health Sciences Center

    WA, US
    511people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Financial & Banking Information
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information

  19. CardioFit Medical Group, Inc.

    CA, US · Healthcare Provider · Unauthorized Access/Disclosure
    7.2Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  20. DermCare Management

    WA, US
    522people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Driver's License or Washington ID Card Number
    • Full Date of Birth
    • Health Insurance Policy or ID Number
    • Medical Information

  21. Wonderland Child and Family Services

    WA, US
    1.3Kpeople
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Full Date of Birth
    • Medical Information

  22. OneDigital Investment Advisors LLC

    WA, US
    565people
    Breached Disclosed
    Washington State AG Official register
    • Name
    • Social Security Number
    • Financial & Banking Information
    • Full Date of Birth
    • Username and Password/Security Question Answers

  23. My Lovely AI

    mylovely.ai
    106.3Kaccounts
    Breached Disclosed
    Have I Been Pwned Verified Sensitive
    • Email addresses
    • Social media profiles
    In April 2026, the NSFW AI girlfriend platform My Lovely AI suffered a data breach that exposed over 100k users. The data included user-created prompts and links to the resulting AI-generated images, along with a small number of Discord and X usernames.

  24. Grandview Family Medicine

    UT, US · Healthcare Provider · Hacking/IT Incident
    13.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 7 hours ago.