This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
A ransomware group has claimed responsibility for a cyberattack on law firm Willatt & Flickinger, allegedly accessing sensitive client and case files.
Willatt & Flickinger Data Breach Exposes Sensitive Client Files Read More »
A ransomware group has claimed responsibility for a data breach involving law firm Cozen O’Connor. The firm has not publicly confirmed the incident or the scope of any data exposure.
Cozen O’Connor Data Breach Exposes Client and Firm Records Read More »
A threat actor group claims to have stolen TapClicks source code and customer marketing data, including password hashes and ad-platform credentials. TapClicks has not publicly confirmed the incident.
TapClicks Data Breach Exposes Password Hashes and Customer Marketing Data Read More »
A ransomware group has claimed responsibility for a cyberattack on GE Vernova Inc., alleging theft of sensitive company data. GE Vernova has not publicly confirmed the incident.
GE Vernova Inc. Data Breach Exposes Sensitive Corporate and Personal Information Read More »
A breach at the Pentagon’s Defense Manpower Data Center exposed Social Security numbers and other personal information belonging to current and former military personnel, prompting national security concerns.
A ransomware group has claimed responsibility for a data breach at Crossett Home, a petroleum transportation company. The incident has not been publicly confirmed by the company itself.
Crossett Home Data Breach Exposes Company and Employee Data Claimed by Group Read More »
Gallagher Transport International Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers and government ID numbers belonging to affected individuals.
Waterford Hotel Group, LCC and LMD Holding Company, LLC notified the Vermont Attorney General of a data breach exposing Social Security numbers, government ID numbers, financial account details, and health records.
Waterford Hotel Group Data Breach Exposes Social Security Numbers and Health Records Read More »
Boyd Gaming Corporation notified the Vermont Attorney General of a data breach involving government ID numbers, prompting questions about who was affected and what steps to take next.
Boyd Gaming Corporation Data Breach Exposes Government ID Numbers Read More »
Peña and Bromberg has notified the California Attorney General of a data breach that may have exposed sensitive personal information belonging to clients or employees.
Peña and Bromberg Data Breach Exposes Personal Information of Clients Read More »