This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Q2 Artificial Lift Services told Texas regulators that unauthorized access exposed the personal and financial data of roughly 630 people, including Social Security and driver’s license numbers.
Bonanza Casino, a longtime Reno gaming venue, notified customers that a cyberattack led to unauthorized access of their personal information after a ransomware group claimed to have stolen data from its systems.
Bonanza Casino Data Breach Exposes Customer Personal Information Read More »
Conquest Adventures, LLC confirmed a ransomware attack exposed the names, addresses, driver’s license numbers, and passport numbers of 868 people, including Idaho residents.
Conquest Adventures Data Breach Exposes Driver’s License and Passport Numbers Read More »
AI music platform Suno reportedly suffered a data breach in November 2025 that exposed personal details for more than 55 million users, but the company has yet to notify affected customers.
Suno Data Breach Exposes Contact Information and Payment Card Details Read More »
Malicious code planted on the Stack Sports Sports Affinity checkout platform may have captured customers’ payment card and bank account information over roughly a month before it was discovered.
Stack Sports Data Breach Exposes Payment Card and Bank Account Numbers Read More »
Foster & Eldridge, LLP, a Massachusetts law firm, has notified clients that a security incident may have exposed personal information tied to its legal services work.
Foster & Eldridge, LLP Data Breach Exposes Client Personal Information Read More »
A stolen 11GB database tied to gig-work platform Paidwork exposed the personal and financial information of more than 23 million users after being sold and leaked online.
Paidwork Data Breach Exposes Bank Account Numbers and Personal Data Read More »
Caesars Entertainment, Inc. notified the Washington State Attorney General of a data breach involving unauthorized access to customer personal information.
Caesars Entertainment Data Breach Exposes Customer Personal Information Read More »
The LINE Los Angeles notified individuals that hackers accessed its network in late September 2025, potentially exposing personal information tied to names in its systems.
The LINE Los Angeles Data Breach Exposes Personal Information Read More »
A King County judge ruled that T-Mobile violated Washington’s data breach notification law after failing to properly alert customers whose sensitive personal information was stolen and sold on the dark web.
T-Mobile Data Breach Exposes Social Security Numbers and Personal Records Read More »