This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Cullotta Bravo Law Group, an Aurora, IL personal injury firm, suffered a ransomware attack claimed by the group, raising concerns about exposed client and case data.
Foss Inc., a provider of installation and maintenance services to the energy industry, suffered a ransomware attack in which a threat actor group claims to have accessed sensitive company and personal data.
Foss Inc. Data Breach Exposes Sensitive Personal and Business Information Read More »
A ransomware group claimed responsibility for a data breach at watchops.com, a US-based technology company, raising concerns over exposed customer and business data.
Watchops.com Data Breach Exposes Sensitive Company and Customer Data Read More »
The Florida Department of Highway Safety and Motor Vehicles confirmed hackers accessed its DAVID driver database using a stolen police officer’s login credentials, exposing sensitive driver and vehicle records.
Ascent Global Logistics, Inc. notified regulators of a data breach that exposed Social Security numbers, government ID numbers, and health records belonging to affected individuals.
Eagle Construction, a Virginia homebuilder, suffered a ransomware attack by the group that exposed employee passports, driver’s licenses, Social Security numbers, and W-9 forms, along with confidential company and client files.
Eagle Construction Data Breach Exposes Social Security Numbers and Employee Records Read More »
Midkiff, Muncie & Ross, P.C. notified the Vermont Attorney General that a data breach exposed clients’ Social Security numbers and health records, raising risks of identity theft and medical fraud.
RB American Group LLC notified the Washington State Attorney General of a data breach that may have exposed sensitive personal information belonging to affected individuals.
RB American Group Data Breach Exposes Personal and Financial Information Read More »
A ransomware group has claimed responsibility for a cyberattack on Goldston Oil Corporation, a Houston-based oil and gas company, raising concerns about exposed personal and corporate data.
Bahrie Law, PLLC notified the Vermont Attorney General of a data breach exposing Social Security numbers, government ID numbers, financial account details, and health records.
Bahrie Law, PLLC Data Breach Exposes Social Security Numbers and Health Records Read More »