This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
A ransomware group claims to have stolen over 50 GB of data from Accela, a cloud software platform used by state and local governments, including PII on citizens and government workers.
Accela Data Breach Exposes Citizen Personal Information and Government Employee Records Read More »
Alliance Environmental Group, LLC has notified individuals that unauthorized actors accessed company files containing personal information, prompting a formal breach notification and offer of credit monitoring.
Alliance Environmental Group Data Breach Exposes Personal Information Read More »
AECOM, a major global infrastructure and engineering firm, was targeted by a ransomware group that claims to have stolen sensitive company data. Here is what is known so far.
AECOM Data Breach Exposes Confidential Corporate and Infrastructure Data Read More »
Tessco, LLC notified the Vermont Attorney General that a data breach compromised Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.
In August 2026, a dataset of 7.3 million rows tied to Chess.com surfaced online, containing email addresses, usernames, names, and country data for millions of users.
Chess.com Data Breach Exposes Email Addresses, Usernames, and Personal Data Read More »
MIV Buyer, LLC notified the Vermont Attorney General that a data breach compromised Social Security numbers, raising identity theft risks for affected individuals.
MIV Buyer, LLC Data Breach Exposes Social Security Numbers Read More »
Nevada Estate Planning and Probate, LLC notified regulators that a data breach exposed clients’ Social Security numbers and government ID numbers, prompting warnings about identity theft risk.
C2M LLC, doing business as Click2Mail, notified Vermont officials of a data breach involving financial account codes and credit and debit account information.
Click2Mail Data Breach Exposes Financial Account Codes and Payment Card Information Read More »
A ransomware group claims to have breached Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC, a prominent U.S. plaintiffs law firm, potentially exposing sensitive client and employee data.
The Southern California Telephone Company data breach involved the ransomware group, which claims to have stolen 34GB of corporate data including employee passports, W-9 forms, and customer phone numbers.
Southern California Telephone Company Data Breach Exposes Passports and W-9 Tax Forms Read More »