This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
RoadEx America, a US transportation company, was targeted by the Qilin ransomware group in an attack that may have exposed sensitive personal and business data. The full scope of affected individuals has not been publicly disclosed.
RoadEx America Data Breach Exposes Sensitive Company and Personal Records Read More »
A ransomware group known as insomnia claims to have targeted Birmingham law firm Massey, Stotser & Nichols, raising concerns about the exposure of sensitive client and case information.
Massey, Stotser & Nichols Data Breach Exposes Client and Case Files Read More »
Mestechkin Law Group P.C. suffered a ransomware attack claimed by the Booba Project group, which reportedly stole 37 GB of data including client legal files and personal records.
Mestechkin Law Group P.C. Data Breach Exposes Client Legal Files and Personal Records Read More »
Atlas Ocean Voyages suffered a ransomware attack in which a group called Booba Project claims to have stolen 37 GB of data tied to customer travel arrangements.
Atlas Ocean Voyages Data Breach Exposes Customer and Travel Booking Information Read More »
A former AT&T retail employee in Portland, Oregon used his system access to perform unauthorized SIM swaps, letting cybercriminals intercept authentication codes and steal money from customer bank accounts.
AT&T Data Breach Exposes Phone Numbers and Financial Account Access Read More »
The Conti ransomware gang stole data and encrypted networks at hundreds of US organizations between 2020 and 2022, and a recent prison sentence for one member has renewed attention on victims still dealing with the fallout.
Cullotta Bravo Law Group, an Aurora, IL personal injury firm, suffered a ransomware attack claimed by the INC Ransom group, raising concerns about exposed client and case data.
Foss Inc., a provider of installation and maintenance services to the energy industry, suffered a ransomware attack in which a threat actor group claims to have accessed sensitive company and personal data.
Foss Inc. Data Breach Exposes Sensitive Personal and Business Information Read More »
A ransomware group known as unsafe claimed responsibility for a data breach at watchops.com, a US-based technology company, raising concerns over exposed customer and business data.
Watchops.com Data Breach Exposes Sensitive Company and Customer Data Read More »
The Florida Department of Highway Safety and Motor Vehicles confirmed hackers accessed its DAVID driver database using a stolen police officer’s login credentials, exposing sensitive driver and vehicle records.