This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
A ransomware group claims it accessed a GoDaddy-linked AmplifAI workforce platform, reportedly exposing employee account and login data. GoDaddy has not confirmed the incident.
GoDaddy Data Breach Claim: Employee Records Reportedly Exposed Read More »
Baker & McKenzie LLP notified the California Attorney General of a data breach that may have exposed personal information belonging to affected individuals.
Baker & McKenzie LLP Data Breach Exposes Personal Information Read More »
Indico Data Solutions notified the California and Vermont Attorneys General of a data breach that may have exposed personal information belonging to affected individuals.
Indico Data Solutions Data Breach Exposes Personal Information Read More »
A ransomware group claims it accessed data belonging to Aliqout Association, a civil engineering firm in Walnut Creek, California. The company has not confirmed the incident.
Aliqout Association Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims responsibility for a data breach at Facts N Figures, a consumer insights research firm. The company has not confirmed the incident, and the exposed data types remain undisclosed.
Facts N Figures Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group has reportedly claimed responsibility for a data breach at Moritt Hock & Hamroff LLP, though the firm has not publicly confirmed the incident or the data involved.
Moritt Hock & Hamroff LLP Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group has reportedly listed Staver Accident Injury Lawyers as a victim, claiming it accessed files from the firm’s network. The law firm has not publicly confirmed the incident.
A ransomware group has claimed responsibility for a reported breach at law firm ArentFox Schiff LLP, alleging it may have exposed personal information. The firm has not publicly confirmed the incident.
ArentFox Schiff LLP Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group has claimed responsibility for an attack on Rood Trucking. The claim has not been confirmed by the company, and it may have exposed personal information.
Rood Trucking Data Breach Claim: Personal Information Reportedly Exposed Read More »
An extortion group claims it accessed files from law firm Susman Godfrey L.L.P., though the firm has not publicly confirmed any breach or data exposure.
Susman Godfrey L.L.P. Data Breach Claim: Personal Information Reportedly Exposed Read More »