This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
BBC International LLC notified Vermont regulators of a data breach that exposed Social Security numbers, financial account codes, and credit and debit account information.
A ransomware group claims it stole files from law firm Hill & Beyer, allegedly including medical histories and investigative records. Hill & Beyer has not publicly confirmed the incident.
A ransomware group claims it stole data from law firm Buchanan Ingersoll & Rooney PC, though the firm has not confirmed the incident. Here is what is known so far.
A ransomware group has claimed responsibility for a reported breach at Butler Legal, alleging access to client and case data. The firm has not confirmed the incident.
Butler Legal Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it stole client and case files from the Law Offices of Goldsmith & Hull A.P.C. The firm has not publicly confirmed the incident.
Apex Clean Energy Holdings, LLC notified Vermont regulators of a data breach that compromised Social Security numbers, financial account codes, and health records belonging to affected individuals.
Law firm Ritz-Clark & Ben-Asher LLP notified Vermont regulators that a data breach exposed clients’ Social Security numbers, raising identity theft risks for those affected.
Ritz-Clark & Ben-Asher LLP Data Breach Exposes Social Security Numbers Read More »
DreamHost, LLC notified the California Attorney General of a data breach that may have exposed personal information belonging to customers or users. Full details on the exposed data have not been publicly disclosed.
DreamHost, LLC Data Breach Exposes Personal Information Read More »
A ransomware group claims it accessed corporate systems at Howells Motor Freight and threatens to post data online, though the trucking company has not confirmed the incident.
A ransomware group claims it accessed a GoDaddy-linked AmplifAI workforce platform, reportedly exposing employee account and login data. GoDaddy has not confirmed the incident.
GoDaddy Data Breach Claim: Employee Records Reportedly Exposed Read More »