This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
A New York law firm, Molod Spitz & DeSantis, P.C., has notified clients that unauthorized access to its network may have exposed their names and other personal details stored in firm files.
Molod Spitz & DeSantis Data Breach Exposes Client Names and Personal Information Read More »
Fox Rothschild LLP has notified individuals that their personal information was compromised after an employee fell victim to a vishing attack that resulted in the theft of files.
Fox Rothschild LLP Data Breach Exposes Client Personal Information Read More »
IMA Diligence Services, LLC notified individuals that an unauthorized actor accessed a legacy file server in December 2025 and acquired files containing personal information.
IMA Diligence Services Data Breach Exposes Personal Information Read More »
RCI Internet Services notified individuals that hackers accessed and stole files containing Social Security numbers, driver’s license numbers, and passport numbers earlier this year.
RCI Internet Services Data Breach Exposes Social Security Numbers and Passport Data Read More »
Questo, Inc., parent company of Morris Communications, has notified individuals that an unauthorized actor accessed files containing personal information during an October 2025 network intrusion.
Questo Data Breach Exposes Personal Information of Individuals Read More »
K-Apex (SFO), a Burlingame logistics and customs brokerage firm, has notified clients that a security incident may have exposed their personal information, and is offering two years of free credit monitoring.
K-Apex (SFO) Data Breach Exposes Client Personal Information Read More »
Beniach Construction Company, an Illinois contractor, notified over 1,500 individuals that their personal information may have been exposed in a data security incident logged in mid-2026.
Beniach Construction Company Data Breach Exposes Personal Information Read More »
Group Gordon, a New York public relations firm, has notified clients that a security event may have exposed their names and Social Security numbers, prompting an offer of free credit monitoring.
Group Gordon Data Breach Exposes Names and Social Security Numbers Read More »
Ransomware group claims to have stolen 190GB of Ironmark’s corporate data, including employee passports, driver’s licenses, financial records, and client contracts.
Ironmark Data Breach Exposes Employee Passports and Driver’s Licenses Read More »
Travala Pte Ltd notified regulators of a data breach that occurred in June 2026, affecting thousands of individuals including residents of Indiana. Here’s what we know about the exposure.
Travala Pte Ltd Data Breach Exposes Personal Customer Information Read More »