This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Two small, privately owned Colorado water utilities were breached by foreign hackers who altered equipment settings and disabled alarms and remote access, raising concerns about both operational safety and exposed customer information.
A ransomware group known as bravox claims to have breached geomatics firm TOWILL, potentially exposing employee data and sensitive records tied to federal contracts.
TOWILL Data Breach Exposes Federal Project and Employee Records Read More »
Inter-Con Security was hit by a ShinyHunters extortion campaign in June 2026, resulting in the publication of contact data belonging to roughly 276,000 individuals.
Inter-Con Security Data Breach Exposes Names, Emails and Phone Numbers Read More »
Opportune LLP notified regulators that unauthorized access to its systems exposed Social Security numbers, prompting warnings for affected individuals to watch for identity theft.
Opportune LLP Data Breach Exposes Social Security Numbers Read More »
The City of Marion, Iowa notified the state attorney general of a data breach involving unauthorized access to personal information. Here’s what residents and employees need to know.
City of Marion Iowa Data Breach Exposes Personal Information Read More »
Mogren, Glessner & Ahrens, P.S. notified the Washington State Attorney General of a data breach involving unauthorized access to sensitive client and personal information.
Mogren, Glessner & Ahrens, P.S. Data Breach Exposes Personal and Financial Information Read More »
A ransomware group calling itself EndZone claims to have stolen over 50 GB of data from Accela, a cloud software platform used by state and local governments, including PII on citizens and government workers.
Accela Data Breach Exposes Citizen Personal Information and Government Employee Records Read More »
Alliance Environmental Group, LLC has notified individuals that unauthorized actors accessed company files containing personal information, prompting a formal breach notification and offer of credit monitoring.
Alliance Environmental Group Data Breach Exposes Personal Information Read More »
AECOM, a major global infrastructure and engineering firm, was targeted by a ransomware group that claims to have stolen sensitive company data. Here is what is known so far.
AECOM Data Breach Exposes Confidential Corporate and Infrastructure Data Read More »
Tessco, LLC notified the Vermont Attorney General that a data breach compromised Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.