This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Pocket FM notified a group of contributing writers that an unauthorized third party accessed and downloaded sensitive personal and financial documents from a company storage location in mid-2026.
Pocket FM Data Breach Exposes Social Security Numbers and Financial Records Read More »
RingCentral confirmed a data breach affecting a portion of its customers, claimed by the ShinyHunters threat actor, with exposed customer information later linked to a wave of Microsoft 365 phishing attacks.
RingCentral Data Breach Exposes Customer Account and Contact Information Read More »
Sullivan Environmental Services, Inc. told Texas regulators that a security incident exposed the names, Social Security numbers, driver’s license numbers, financial data, and health insurance details of 399 Texas residents.
CTS Journey Holdings, LLC, doing business as Corporate Travel Service, has notified individuals that an unauthorized actor accessed its network and exposed personal information.
CTS Journey Holdings Data Breach Exposes Customer Personal Information Read More »
Maine Course Hospitality Group, a Northeast hotel management company, disclosed a data breach affecting 553 Vermont residents, exposing Social Security numbers, government ID numbers, and health records.
Miles Partnership, LLLP, a travel and tourism marketing firm, disclosed a data breach involving Social Security numbers and financial account information in a filing with the Vermont Attorney General.
Miles Partnership Data Breach Exposes Social Security Numbers and Financial Data Read More »
Goodwin Procter LLP, one of the nation’s largest law firms, has notified clients that an unauthorized party accessed files containing names, Social Security numbers, and financial account details.
SM Energy Company has notified Vermont regulators that a data breach exposed Social Security numbers belonging to individuals connected to the oil and gas producer, with more states likely to follow.
SM Energy Data Breach Exposes Social Security Numbers Read More »
The City of New Britain, Connecticut, disclosed to Vermont regulators that a security incident compromised Social Security numbers and health records tied to individuals connected to the municipality.
The City of New Britain Data Breach Exposes Social Security Numbers and Health Records Read More »
Berg Demo Group notified clients that an unauthorized party accessed its network in June 2026, potentially exposing personal information tied to individual records.
Berg Demo Group Data Breach Exposes Client Personal Information Read More »