This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Home security company ADT confirmed that hackers linked to ShinyHunters stole personal data on 5.5 million customers, including names, addresses, and in some cases dates of birth and partial Social Security numbers.
ADT Data Breach Exposes Names, Addresses and Social Security Numbers Read More »
T.A. Solberg Co. Inc. confirmed a data breach after an unauthorized individual accessed and stole files containing Social Security numbers, health information, and financial account details.
T.A. Solberg Data Breach Exposes Social Security Numbers and Health Information Read More »
EMA Engineering & Consulting confirmed a data breach after the Play ransomware group claimed to have stolen sensitive files, exposing names and Social Security numbers of hundreds of individuals.
EMA Engineering & Consulting Data Breach Exposes Social Security Numbers Read More »
Yellow Corporation confirmed a data breach affecting roughly 13,000 individuals, exposing personal and health information that could put victims at risk of identity theft.
Yellow Corporation Data Breach Exposes Personal and Health Information Read More »
A U.S. government entity paid roughly $1 million to the extortion group Kairos after stolen files were taken from its network, despite no evidence any systems were encrypted.
Kairos Group Data Breach Exposes Government Files in Extortion Case Read More »
CMD Outsourcing Solutions suffered a ransomware attack by the Akira group, discovered April 7, 2026, exposing Social Security numbers along with employee documents and financial records. The breach affects customers and individuals tied to the company's outsourcing operations, potentially including clients in healthcare, education, and government sectors. Affected individuals should immediately place a fraud alert
CMD Outsourcing Solutions Data Breach Exposes SSNs Read More »
Barnhart Crane & Rigging disclosed a data breach affecting approximately 22,822 people nationwide, including at least eight Maine residents, with notifications beginning May 21, 2026. Exposed information may include names, Social Security numbers, dates of birth, driver's license or passport numbers, financial account details, and medical and health insurance information. Affected individuals should first place
In April 2026, Eversource Energy suffered a phishing attack in which cybercriminals used stolen employee credentials to access company files. Roughly 3,049 people nationwide are affected, with exposed data potentially including names, addresses, phone numbers, Social Security numbers, driver's license numbers, and financial account information. Affected individuals should first place a fraud alert or credit
Between March 30 and April 1, 2026, hackers infiltrated FRCC's network and copied files containing sensitive data before the intrusion was detected and stopped. Names and Social Security numbers belonging to affected individuals may have been exposed, raising serious identity theft and fraud risks. Anyone notified should immediately enroll in the offered credit monitoring and
FRCC Data Breach Investigation: Social Security Numbers Potentially Exposed Read More »
New Congoleum, a New Jersey flooring manufacturer, confirmed hackers accessed its systems in a March 2026 cyberattack, exposing the full names and Social Security numbers of approximately 4,831 individuals nationwide. Because Social Security numbers were compromised, affected people face heightened risk of identity theft, fraudulent credit accounts, and fake tax filings. Anyone notified should immediately
New Congoleum Data Breach 2026 Exposes Personal Information of 4,831 Individuals Read More »