This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Berkeley Research Group, LLC notified regulators that unauthorized parties accessed sensitive personal data, including Social Security numbers, financial account details, and health records.
Berkeley Research Group Data Breach Exposes Social Security Numbers and Health Records Read More »
A ransomware group calling itself aurora claims to have stolen client files from law firm Ishbia & Gagleard, P.C., including Social Security numbers, tax returns, and hospital records.
Ishbia & Gagleard, P.C. Data Breach Exposes Social Security Numbers and Medical Records Read More »
McDermott Will & Schulte LLP notified regulators of a data breach that exposed Social Security numbers and health records, prompting concerns about identity theft and fraud among those affected.
Ocean Edge Resort and Golf Club notified Vermont regulators of a data breach that exposed guests’ or employees’ Social Security numbers, government ID numbers, and health records.
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a major security incident after the Qilin ransomware gang claimed to have breached one of its systems in August 2026.
The Washington Post notified state regulators of a data breach linked to an Oracle-related system, confirming that personal information was accessed without authorization.
The Washington Post Data Breach Exposes Personal Information via Oracle System Read More »
ERPIS LLC, the company behind ShipERP software, suffered a ransomware attack that exposed employee payroll data, bank account details, and proprietary source code used by major enterprise clients.
ERPIS LLC Data Breach Exposes Social Security Numbers and Financial Records Read More »
Castle Management, LLC notified regulators that a data breach exposed Social Security numbers, government ID numbers, financial account codes, and health records belonging to affected individuals.
Castle Management, LLC Data Breach Exposes Social Security Numbers and Health Records Read More »
Chelan County, Washington notified residents that unauthorized parties may have accessed personal information held on county systems. The government has begun notifying those affected and outlining protective steps.
Chelan County Data Breach Exposes Personal and Financial Information Read More »
A ransomware group called Global Secret Group claims it stole roughly 457 GB of files from Texas construction firm Tiseo Paving, raising concerns about employee and business data exposure.
Tiseo Paving Data Breach Exposes Company Files and Sensitive Business Records Read More »