This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
In August 2026, a dataset of 7.3 million rows tied to Chess.com surfaced online, containing email addresses, usernames, names, and country data for millions of users.
Chess.com Data Breach Exposes Email Addresses, Usernames, and Personal Data Read More »
MIV Buyer, LLC notified the Vermont Attorney General that a data breach compromised Social Security numbers, raising identity theft risks for affected individuals.
MIV Buyer, LLC Data Breach Exposes Social Security Numbers Read More »
Nevada Estate Planning and Probate, LLC notified regulators that a data breach exposed clients’ Social Security numbers and government ID numbers, prompting warnings about identity theft risk.
C2M LLC, doing business as Click2Mail, notified Vermont officials of a data breach involving financial account codes and credit and debit account information.
A ransomware group known as insomnia claims to have breached Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC, a prominent U.S. plaintiffs law firm, potentially exposing sensitive client and employee data.
The Southern California Telephone Company data breach involved the Akira ransomware group, which claims to have stolen 34GB of corporate data including employee passports, W-9 forms, and customer phone numbers.
Southern California Telephone Company Data Breach Exposes Passports and W-9 Tax Forms Read More »
Resolve Law Group was targeted by the Qilin ransomware group, raising concerns that sensitive client and case-related information may have been accessed or stolen.
Resolve Law Group Data Breach Exposes Sensitive Client and Legal Records Read More »
CenterPoint Energy confirmed that an unauthorized party stole customer personal information after a hacker claimed to have taken millions of records from the utility’s public API.
CenterPoint Energy Data Breach Exposes Social Security Numbers and Account Information Read More »
geekybunch.com, a US-based technology company, suffered a data breach linked to a threat actor group known as unsafe, potentially exposing customer and business information.
geekybunch.com Data Breach Exposes Customer and Business Data Read More »
A ransomware group calling itself ShadowByt3$ claims to have stolen sensitive employee, financial, and security data from HandyTrac, a key control and access management provider tied to Greystar properties.
HandyTrac Data Breach Exposes Employee Credential Data and Financial Records Read More »