This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
A ransomware group claims responsibility for a Latham & Watkins data breach, alleging access to firm data. The law firm has not publicly confirmed the incident.
Latham & Watkins Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed network files from a US broadcast playout site tied to Amagi Media Labs. The company has not confirmed the incident, and what personal information may have been exposed remains unclear.
Amagi Media Labs Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed data from smart crib maker Cradlewise Inc. The company has not publicly confirmed the incident, and the exact data involved is unclear.
Cradlewise Inc. Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed data from polisee Inc, a technology company. polisee Inc has not publicly confirmed the incident, and specific data details remain undisclosed.
polisee Inc Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it accessed records from security company Bay Alarm, though the company has not publicly confirmed the incident.
Bay Alarm Data Breach Claim: Personal Information Reportedly Exposed Read More »
A ransomware group claims it stole production records, account credentials, and vendor data from ECO USA. The company has not publicly confirmed the incident.
ECO USA Data Breach Claim: Production Records and Account Passwords Reportedly Exposed Read More »
Holland & Knight, LLP notified the Vermont Attorney General that a data breach exposed Social Security numbers, raising identity theft risks for affected individuals.
Holland & Knight, LLP Data Breach Exposes Social Security Numbers Read More »
CDE notified the California Attorney General of a data breach in October 2026. The specific information involved has not been publicly disclosed yet.
John G. Yphantides, a Professional Law Corporation notified California regulators of a data breach. The specific types of information involved have not been publicly disclosed.
A ransomware group claims it stole payroll, tax, and client financial files from Xinos Construction Corp. The company has not confirmed the incident publicly.
Xinos Construction Corp Data Breach Claim: W-2s and Tax Records Reportedly Exposed Read More »