Data Breaches

Check your email or password

Find out whether your email address or a password are leaked somewhere.

Check your email address or password…

  1. Apex Spine & Neurosurgery, LLC

    GA, US · Healthcare Provider · Hacking/IT Incident
    9.4Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  2. TriZetto Provider Solutions

    MO, US · Business Associate · Hacking/IT Incident
    3.4Mpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  3. WIRX Pharmacy

    PA, US · Healthcare Provider · Hacking/IT Incident
    20Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  4. Betterment

    betterment.com
    1.4Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Device information
    • Email addresses
    • Employers
    • Geographic locations
    • Job titles
    • Names
    • +2 more
    In January 2026, the automated investment platform Betterment confirmed it had suffered a data breach attributed to a social engineering attack. As part of the incident, Betterment customers received fraudulent crypto-related messages promising high returns if funds were sent to an attacker-controlled cryptocurrency wallet. The breach exposed 1.4M unique email addresses, along with names and geographic location data. A subset of records also included dates of birth, phone numbers, and physical addresses. In its disclosure notice, Betterment stated that the incident did not provide attackers with access to customer accounts and did not expose passwords or other login credentials.

  5. About Women Ob/Gyn, PC

    VA, US · Healthcare Provider · Hacking/IT Incident
    23Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  6. Issaqueena Pediatric Dentistry PA

    SC, US · Healthcare Provider · Hacking/IT Incident
    501people
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  7. Personalis, Inc.

    CA, US · Healthcare Provider · Hacking/IT Incident
    650people
    Disclosed
    HHS OCR breach portal Official register
    • Email

  8. MCS, P.C.

    MD, US · Business Associate · Hacking/IT Incident
    3.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  9. Fair Oaks Ortho P.C.

    VA, US · Healthcare Provider · Hacking/IT Incident
    1.5Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Email

  10. Panera Bread

    panerabread.com
    5.1Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Names
    • Phone numbers
    • Physical addresses
    In January 2026, Panera Bread suffered a data breach that exposed 14M records. After an attempted extortion failed, the attackers published the data publicly, which included 5.1M unique email addresses along with associated account information such as names, phone numbers and physical addresses. Panera Bread subsequently confirmed that "the data involved is contact information" and that authorities were notified.

  11. High Point Treatment Center, Inc.

    MA, US · Healthcare Provider · Hacking/IT Incident
    25.8Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Electronic Medical Record
    • Network Server

  12. Wound Technology Network, Inc.

    FL, US · Healthcare Provider · Hacking/IT Incident
    139.8Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  13. Clinic Service Corporation

    CO, US · Business Associate · Hacking/IT Incident
    82.3Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  14. WindRose Health Network

    IN, US · Healthcare Provider · Hacking/IT Incident
    9.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  15. SoundCloud

    soundcloud.com
    29.8Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Avatars
    • Email addresses
    • Geographic locations
    • Names
    • Profile statistics
    • Usernames
    In December 2025, SoundCloud announced it had discovered unauthorised activity on its platform. The incident allowed an attacker to map publicly available SoundCloud profile data to email addresses for approximately 20% of its users. The impacted data included 30M unique email addresses, names, usernames, avatars, follower and following counts and, in some cases, the user’s country. The attackers later attempted to extort SoundCloud before publicly releasing the data the following month.

  18. Precipio, Inc.

    CT, US · Healthcare Provider · Hacking/IT Incident
    22.7Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server
    • Other

  20. Under Armour

    underarmour.com
    72.7Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Dates of birth
    • Email addresses
    • Genders
    • Geographic locations
    • Names
    • Purchases
    In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom, alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly on a popular hacking forum, including 72M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.

  21. Middlesex Sheriff's Office

    MA, US · Healthcare Provider · Hacking/IT Incident
    19.1Kpeople
    Disclosed
    HHS OCR breach portal Official register
    • Network Server

  24. Pass'Sport

    pass.sports.gouv.fr
    6.4Maccounts
    Breached Disclosed
    Have I Been Pwned Verified
    • Email addresses
    • Genders
    • Names
    • Phone numbers
    • Physical addresses
    In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident.

Breach records: Have I Been Pwned (CC BY 4.0), the HHS OCR breach portal, the Washington State Attorney General and the California Attorney General breach registers (public records). Last synced 1 hour ago.