This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
A dark web service is selling scans of more than 153 million drivers licenses, apparently sourced from a breach at identity verification company IDScan.net. The FBI has opened an investigation into the incident.
IDScan.net Data Breach Exposes Drivers Licenses and ID Scans Read More »
Wend America Group LLC notified the Vermont Attorney General of a data breach exposing Social Security numbers, government ID numbers, financial account details, credit and debit card data, health records, and biometric information.
Wend America Group LLC Data Breach Exposes Social Security Numbers and Health Records Read More »
Market research firm Sago suffered a ransomware attack attributed to the group, raising concerns that participant and employee personal information may have been accessed or stolen.
Sago Data Breach Exposes Personal and Research Participant Information Read More »
Berkeley Research Group, LLC notified regulators that unauthorized parties accessed sensitive personal data, including Social Security numbers, financial account details, and health records.
Berkeley Research Group Data Breach Exposes Social Security Numbers and Health Records Read More »
A ransomware group claims to have stolen client files from law firm Ishbia & Gagleard, P.C., including Social Security numbers, tax returns, and hospital records.
Ishbia & Gagleard, P.C. Data Breach Exposes Social Security Numbers and Medical Records Read More »
McDermott Will & Schulte LLP notified regulators of a data breach that exposed Social Security numbers and health records, prompting concerns about identity theft and fraud among those affected.
Ocean Edge Resort and Golf Club notified Vermont regulators of a data breach that exposed guests’ or employees’ Social Security numbers, government ID numbers, and health records.
The Washington Post notified state regulators of a data breach linked to an Oracle-related system, confirming that personal information was accessed without authorization.
The Washington Post Data Breach Exposes Personal Information via Oracle System Read More »
ERPIS LLC, the company behind ShipERP software, suffered a ransomware attack that exposed employee payroll data, bank account details, and proprietary source code used by major enterprise clients.
ERPIS LLC Data Breach Exposes Social Security Numbers and Financial Records Read More »
Castle Management, LLC notified regulators that a data breach exposed Social Security numbers, government ID numbers, financial account codes, and health records belonging to affected individuals.
Castle Management, LLC Data Breach Exposes Social Security Numbers and Health Records Read More »