This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
The Southern California Telephone Company data breach involved the ransomware group, which claims to have stolen 34GB of corporate data including employee passports, W-9 forms, and customer phone numbers.
Southern California Telephone Company Data Breach Exposes Passports and W-9 Tax Forms Read More »
Resolve Law Group was targeted by the ransomware group, raising concerns that sensitive client and case-related information may have been accessed or stolen.
Resolve Law Group Data Breach Exposes Sensitive Client and Legal Records Read More »
CenterPoint Energy confirmed that an unauthorized party stole customer personal information after a hacker claimed to have taken millions of records from the utility’s public API.
CenterPoint Energy Data Breach Exposes Social Security Numbers and Account Information Read More »
geekybunch.com, a US-based technology company, suffered a data breach linked to a threat actor group, potentially exposing customer and business information.
geekybunch.com Data Breach Exposes Customer and Business Data Read More »
A ransomware group$ claims to have stolen sensitive employee, financial, and security data from HandyTrac, a key control and access management provider tied to Greystar properties.
HandyTrac Data Breach Exposes Employee Credential Data and Financial Records Read More »
RoadEx America, a US transportation company, was targeted by the ransomware group in an attack that may have exposed sensitive personal and business data. The full scope of affected individuals has not been publicly disclosed.
RoadEx America Data Breach Exposes Sensitive Company and Personal Records Read More »
A ransomware group claims to have targeted Birmingham law firm Massey, Stotser & Nichols, raising concerns about the exposure of sensitive client and case information.
Massey, Stotser & Nichols Data Breach Exposes Client and Case Files Read More »
Mestechkin Law Group P.C. suffered a ransomware attack claimed by the group, which reportedly stole 37 GB of data including client legal files and personal records.
Mestechkin Law Group P.C. Data Breach Exposes Client Legal Files and Personal Records Read More »
Atlas Ocean Voyages suffered a ransomware attack in which a group claims to have stolen 37 GB of data tied to customer travel arrangements.
Atlas Ocean Voyages Data Breach Exposes Customer and Travel Booking Information Read More »
A former AT&T retail employee in Portland, Oregon used his system access to perform unauthorized SIM swaps, letting cybercriminals intercept authentication codes and steal money from customer bank accounts.
AT&T Data Breach Exposes Phone Numbers and Financial Account Access Read More »