This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Sheppard, Mullin, Richter & Hampton LLP notified California regulators of a data breach that may have exposed personal and financial information belonging to clients or other individuals connected to the law firm.
Aldrich Services LLP notified the California Attorney General of a data breach that may have exposed personal and financial information belonging to clients or employees.
Aldrich Services LLP Data Breach Exposes Personal and Financial Information Read More »
The ransomware group claims to have stolen 13GB of corporate data from Pacific Tank Lines, including detailed personal records for 118 employees. The company has not publicly confirmed the incident.
Pacific Tank Lines, Inc. Data Breach Exposes Passports and Driver’s Licenses Read More »
A vendor credential theft let an unauthorized person view Accor ALL loyalty program customer data in July 2026, including at least one guest’s passport number, according to a state regulatory filing.
Accor Management US, Inc. Data Breach Exposes Passport Numbers and Loyalty Account Data Read More »
A ransomware extortion group claims to have stolen customer data and sensitive grid infrastructure information from Sangre de Cristo Electric Association, a Colorado utility cooperative.
ProCamps, a Cincinnati-based sports camp organizer, disclosed that an unauthorized actor accessed cloud-stored camp enrollment records before March 2026, prompting notification letters to affected individuals in September 2026.
ProCamps Data Breach Exposes Camp Enrollment Information Read More »
The City of McMinnville confirmed that sensitive municipal records, including tax returns, passwords, HR files, and confidential police records, were stolen and posted online after a ransomware attack claimed by RansomHouse.
City of McMinnville Data Breach Exposes Tax Returns, Passwords, and Police Records Read More »
An unsecured Elasticsearch server run by B2B marketing leads service LimeLeads exposed tens of millions of records, including email addresses, phone numbers, employers and job titles.
LimeLeads Data Breach Exposes Email Addresses and Phone Numbers Read More »
Security Industry Specialists, Inc. notified individuals that a data security incident may have exposed their personal information, according to a filing with the Massachusetts Attorney General’s Office.
Security Industry Specialists, Inc Data Breach Exposes Names and Personal Information Read More »
A ransomware group claims to have stolen 1.7 TB of data from Buford-Thompson Company, LTD, including employee Social Security numbers, bank account details, and donor records from affiliated nonprofits.