This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Ford Audio-Video Systems, LLC notified regulators that a data breach exposed Social Security numbers, government ID numbers, and health records of affected individuals.
A ransomware group claims it stole corporate data from Bankruptcy Software Specialists, LLC, a Tennessee-based debt management software provider. The company has not publicly confirmed the incident.
TeamUpdraft confirmed a breach of its website that exposed customer names, emails, hashed passwords, and UpdraftCentral connection keys, which attackers used to backdoor WordPress sites.
TeamUpdraft Data Breach Exposes Customer Account and Login Information Read More »
Dill Dill Carr Stonbraker & Hutchings, P.C. notified Vermont regulators that a data breach exposed Social Security numbers and government ID numbers belonging to affected individuals.
A ransomware group has reportedly claimed responsibility for a data breach at Kirkland & Ellis LLP, though the firm has not publicly confirmed the incident.
Kirkland & Ellis LLP Data Breach Claim: Personal Information Reportedly Exposed Read More »
Lexitas, a legal support services provider, has disclosed a data breach exposing Social Security numbers, financial account data, biometric information, and health records of affected individuals.
Lexitas Data Breach Exposes Social Security Numbers and Health Records Read More »
A ransomware group has claimed responsibility for an attack on law firm Barrow & Grimm, reportedly involving access to firm data. The firm has not publicly confirmed the incident.
Barrow & Grimm Data Breach Claim: Personal Information Reportedly Exposed Read More »
PingCAP has confirmed that attackers used stolen credentials to access internal systems, stealing source code and TiDB Cloud customer records between September and October 2026.
PingCAP Data Breach Exposes Source Code and Customer Account Information Read More »
An extortion group has claimed responsibility for a reported attack on law firm Linebarger Goggan Blair & Sampson LLP, though the firm has not confirmed the incident publicly.
CSX notified the Vermont Attorney General that a data breach exposed Social Security numbers, government ID numbers, and financial and card account information belonging to affected individuals.
CSX Data Breach Exposes Social Security Numbers and Financial Account Information Read More »