This category tracks confirmed data breaches at commercial businesses that do not fall under a more specific industry category tracked elsewhere on this site, spanning a wide range of company types and sizes. Exposed data commonly includes customer personal information, payment card details, loyalty program data, and employee records, which can lead to identity theft and financial fraud regardless of the specific industry involved. Because this category covers such a broad range of businesses, the nature and scope of each breach can vary significantly, from a small local business affecting a few hundred customers to a larger regional or national company affecting hundreds of thousands of people. Affected individuals typically include current and former customers, employees, and sometimes business partners or vendors connected to the breached company. This page tracks confirmed data breaches at these organizations, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect themselves and understand their legal options.
Law firm Davis & Ferber LLP suffered a ransomware attack by the Akira group, which claims to have stolen detailed personal and legal records for nearly a thousand clients.
Davis & Ferber LLP Data Breach Exposes Social Security Numbers and Passport Information Read More »
Pan American Group LLC has notified current and former employees that an unknown actor accessed company servers in April 2026 and obtained files containing personal information.
Pan American Group LLC Data Breach Exposes Employee Personal Information Read More »
A ransomware group calling itself Deadlock claims to have stolen tens of thousands of files from Shaheen Law Group PLC, including Social Security numbers, banking records, and medical documents tied to real estate closings.
Shaheen Law Group PLC Data Breach Exposes Social Security Numbers and Banking Details Read More »
Attackers exploited a critical Zimbra Collaboration Suite vulnerability to compromise more than 270 mail servers, raising concerns that stored emails and sensitive communications were accessed.
Zimbra Data Breach Exposes Emails and Sensitive Communications Read More »
Furnished Quarters, a New York-based corporate housing provider, confirmed that hackers stole 155 GB of data, including customer banking and financial records, in a cyberattack claimed by the Dark Project ransomware group.
Furnished Quarters Data Breach Exposes Customer Banking and Financial Information Read More »
Klasko Immigration Law Partners, a Philadelphia-based business immigration law firm, suffered a ransomware attack claimed by the threat group coinbasecartel, raising concerns about exposed client and employee data.
Klasko Immigration Law Partners Data Breach Exposes Client Immigration Records Read More »
A ransomware group known as INC Ransom has claimed responsibility for a cyberattack on Christopher D. Garvin, Esq. Counsel at Law, a New Jersey-based law practice, raising concerns about exposed client data.
Coltrane Systems, a technology sector company, suffered a ransomware attack linked to the Play threat actor group, raising concerns about the exposure of sensitive personal and corporate data.
Coltrane Systems Data Breach Exposes Sensitive Corporate and Personal Data Read More »
The Akira ransomware group claims to have stolen client passports, driver’s licenses, Social Security numbers, financial records and confidential legal files from Queens law firm Borchert & LaSpina, P.C.
Buist Byars & Taylor LLC notified regulators of a data breach exposing Social Security numbers, government ID numbers, financial account codes, and health records. Here is what affected individuals need to know.
Buist Byars & Taylor Data Breach Exposes Social Security Numbers and Health Records Read More »