Threat Intelligence Database
Global Breach Index
An interactive registry of the most catastrophic corporate data leaks and state-sponsored surveillance programs (incl. PRISM and XKEYSCORE).
2007 (Exposed 2013)
CRITICAL
PRISM (US-984XN)
Global Intelligence / Telecommunications
Compromised Asset
Unquantifiable Global Communications
2008 (Exposed 2013)
CRITICAL
XKEYSCORE (DNI Weaponized Search)
Global Intelligence / Telephony
Compromised Asset
Near-Total Global Internet Traffic
August 2013
CRITICAL
Yahoo Inc.
Technology / Search Engine
Compromised Asset
3 Billion Accounts
September 2017
CRITICAL
Equifax
Financial Services
Compromised Asset
147 Million Identities
November 2018
HIGH
Marriott International (Starwood)
Hospitality
Compromised Asset
500 Million Guests
July 2019
CRITICAL
Capital One
Financial Services (Cloud)
Compromised Asset
106 Million Customers
December 2013
HIGH
Target Corporation
Retail
Compromised Asset
41 Million Payment Cards / 70M Customer Files
May 2019
HIGH
First American Financial
Real Estate / Title Insurance
Compromised Asset
885 Million Records
December 2020
CRITICAL
SolarWinds (Sunburst)
IT Management / Government
Compromised Asset
18,000 Enterprise and Gov Networks
April 2021
MEDIUM
Professional Social Network
Compromised Asset
700 Million Profiles
March 2018
HIGH
Facebook (Cambridge Analytica)
Social Media
Compromised Asset
87 Million Profiles
May 2023
CRITICAL
MOVEit Transfer
File Transfer / Logistics
Compromised Asset
2,600+ Organizations (60M+ Individuals)
January 2009
CRITICAL
Heartland Payment Systems
Payment Processing
Compromised Asset
130 Million Credit Cards
November 2014
CRITICAL
Sony Pictures Entertainment
Entertainment
Compromised Asset
100 Terabytes of Corporate Data
July 2015
HIGH
Ashley Madison
Online Dating
Compromised Asset
32 Million Members
August 2021
HIGH
T-Mobile
Telecommunications
Compromised Asset
54 Million Customers
September 2023
CRITICAL
MGM Resorts International
Hospitality & Casino
Compromised Asset
Unquantified / Systems Halted
May 2021
CRITICAL
Colonial Pipeline
Critical Infrastructure / Energy
Compromised Asset
100GB Exfiltrated / Pipeline Disabled
October 2016
HIGH
Uber Technologies
Ride Sharing
Compromised Asset
57 Million Users & Drivers
October 2021
HIGH
Twitch (Amazon)
Live Streaming
Compromised Asset
125GB (Source Code + Payouts)
January 2022
CRITICAL
Okta
Identity & Access Management (IAM)
Compromised Asset
2.5% of Customer Base Impacted
July 2021
CRITICAL
Kaseya VSA
Managed Service Providers (MSPs)
Compromised Asset
1,500+ Businesses Compromised
February 2017
HIGH
Cloudflare (Cloudbleed)
CDN & Web Security
Compromised Asset
Undetermined Memory Leak
2016 - Present
CRITICAL
Pegasus (NSO Group)
Cyber Weapons / Nation State
Compromised Asset
Targeted Global Surveillance
September 2014
HIGH
Home Depot
Retail
Compromised Asset
56 Million Credit Cards
January 2015
CRITICAL
Anthem Insurance
Healthcare
Compromised Asset
78.8 Million Records
August 2022
CRITICAL
LastPass
Password Management
Compromised Asset
Unknown Number of Encrypted Vaults
February 2024
CRITICAL
AnyDesk
Remote Access Software
Compromised Asset
Production Systems Compromised
June 2015
CRITICAL
U.S. Office of Personnel Management (OPM)
Federal Government
Compromised Asset
21.5 Million SF-86 Forms
February 2018
MEDIUM
MyFitnessPal (Under Armour)
Health & Fitness
Compromised Asset
150 Million User Accounts
May 2019
MEDIUM
Canva
Graphic Design Software
Compromised Asset
137 Million Users
October 2013
HIGH
Adobe Systems
Software
Compromised Asset
153 Million Accounts / Proprietary Source Code
July 2020
HIGH
Twitter (X)
Social Media
Compromised Asset
130 High-Profile VIP Accounts
2010
CRITICAL
Stuxnet (Natanz Enrichment Facility)
Nuclear Energy / Nation State
Compromised Asset
Physical Destruction of 1,000+ Centrifuges
June 2017
CRITICAL
NotPetya (A.P. Møller-Maersk)
Global Logistics
Compromised Asset
Global Supply Chain Frozen
March 2011
CRITICAL
RSA Security
Cybersecurity / Defense
Compromised Asset
SecurID MFA Seed Values
September 2015
HIGH
Experian
Credit Bureau
Compromised Asset
15 Million T-Mobile Applicants
March 2020
HIGH
Sina Weibo
Social Media (China)
Compromised Asset
538 Million Users
February 2020
HIGH
Clearview AI
Artificial Intelligence / Facial Recognition
Compromised Asset
Entire Client List (Law Enforcement)
May 2017
CRITICAL
WannaCry
Healthcare / Global IT
Compromised Asset
300,000 Computers Worldwide
February 2014
CRITICAL
Mt. Gox
Cryptocurrency Exchange
Compromised Asset
850,000 Bitcoin Stolen ($450M at the time)
2018
MEDIUM
Ticketmaster
Entertainment Ticketing
Compromised Asset
40,000 UK Customers
January 2017
HIGH
Open MongoDB Ransoms
Cloud Infrastructure
Compromised Asset
28,000+ Databases Wiped
November 2015
HIGH
VTech
Consumer Electronics / Toys
Compromised Asset
4.8 Million Parents / 6.3 Million Children
May 2019
HIGH
Binance
Cryptocurrency Exchange
Compromised Asset
7,000 Bitcoin ($40M)
May 2020
HIGH
EasyJet
Aviation
Compromised Asset
9 Million Passengers
April 2020
MEDIUM
Zoom
Video Conferencing
Compromised Asset
500,000 Accounts Sold
January 2021
CRITICAL
Ubiquiti Networks
Networking Hardware
Compromised Asset
AWS Infrastructure Roots
Ongoing
MEDIUM
Bordertown Casino
Gaming
Compromised Asset
Patron Financial Datasets
2020 - Present
HIGH
Discord CDN Abuse
Communications
Compromised Asset
Unquantifiable Endpoint Infections