This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Merkle disclosed that an unauthorized actor accessed its servers and stole files containing client names and Social Security numbers, prompting notifications to affected residents in multiple states.
Merkle Data Breach Exposes Names and Social Security Numbers Read More »
MasTec Inc. disclosed a data breach affecting over 25,000 people after the ransomware group claimed to steal sensitive files, including Social Security numbers and financial account details.
MasTec Data Breach Exposes Social Security Numbers and Financial Information Read More »
A ransomware attack by the group exposed sensitive personal and financial data belonging to 4,821 Tyree Oil customers, including Social Security numbers, payment card details, and health information.
Tyree Oil Data Breach Exposes Social Security Numbers and Financial Information Read More »
KCI Telecommunications confirmed that hackers accessed its network and stole names and Social Security numbers belonging to thousands of individuals across the United States.
KCI Telecommunications Data Breach Exposes Social Security Numbers and Personal Data Read More »
A ransomware attack on legal software provider Cerenade exposed Social Security numbers, passport numbers, and other personal data belonging to nearly 1,000 individuals across multiple states.
Cerenade Data Breach Exposes Social Security Numbers and Passport Numbers Read More »
A cyberattack on the CentreStack file-sharing platform led to unauthorized access to customer files, exposing names, Social Security numbers and driver’s license numbers of individuals connected to at least one customer organization.
CentreStack Data Breach Exposes Social Security Numbers and Driver’s License Numbers Read More »
Applied Natural Gas Fuels Inc. disclosed a data breach involving unauthorized access to names, Social Security numbers, passport numbers and driver’s license numbers after detecting suspicious network activity in late 2025.
Applied Natural Gas Fuels Data Breach Exposes Social Security and Passport Numbers Read More »
Madison Square Garden Sports was hit by an extortion attack that exposed nearly 10 million records of staff and customer contact and relationship data.
Madison Square Garden Sports Data Breach Exposes Names and Contact Information Read More »
Charter Communications, parent of Spectrum, confirmed a data breach after the extortion group published records containing names, emails, phone numbers, and addresses for nearly 5 million people.
Charter Communications Data Breach Exposes Names, Emails, and Phone Numbers Read More »
A March 2026 breach of the BreachForums Version 5 hacking forum exposed roughly 340,000 unique email addresses, usernames, and argon2 password hashes belonging to forum members.
BreachForums Version 5 Data Breach Exposes Emails and Passwords Read More »