This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
The LINE Los Angeles notified individuals that hackers accessed its network in late September 2025, potentially exposing personal information tied to names in its systems.
The LINE Los Angeles Data Breach Exposes Personal Information Read More »
A King County judge ruled that T-Mobile violated Washington’s data breach notification law after failing to properly alert customers whose sensitive personal information was stolen and sold on the dark web.
T-Mobile Data Breach Exposes Social Security Numbers and Personal Records Read More »
Virginia Transportation Corporation notified clients that hackers accessed its network and stole files containing Social Security numbers, financial records, and other sensitive personal data.
OnTrac, the parcel delivery company formerly known as LaserShip, notified customers that unauthorized access to its network may have exposed personal information. Here is what affected individuals need to know.
OnTrac Data Breach Exposes Names and Personal Identification Information Read More »
The Lawson Roofing Co., Inc. discovered unauthorized access to its network in April 2026, prompting an investigation that found personal information may have been accessed and copied without permission.
Lawson Roofing Data Breach Exposes Personal Information Read More »
A ransomware group claims to have stolen roughly 168 gigabytes of data from Pioneer Construction, including scanned passports, driver’s licenses, and financial records, though the company has not yet confirmed the incident.
Pioneer Construction Data Breach Exposes Passports and Financial Records Read More »
Conduent Business Services discovered a cyber incident that let an unauthorized third party access its network for nearly three months, exposing personal information tied to its clients’ customers.
Conduent Business Services Data Breach Exposes Client and Personal Information Read More »
JC Resorts LLC has notified individuals that an unauthorized actor accessed and copied files containing personal information from its network in January 2026.
JC Resorts LLC Data Breach Exposes Names and Personal Information Read More »
DocketWise, a case management platform used by immigration attorneys, confirmed that an unauthorized actor accessed a repository containing law firm client data, exposing personal information tied to immigration clients.
DocketWise Data Breach Exposes Names and Personal Information Read More »
Law firm GrayRobinson, P.A. has notified individuals that unauthorized network access in March 2025 may have exposed their personal information, prompting a free credit monitoring offer.
GrayRobinson Data Breach Exposes Personal Information Read More »