Recent Data Breaches — Page 135

The Akira ransomware group reportedly impacted multiple organizations, including Zoetis, in 2025. The full scope of these alleged breaches and details on affected individuals or data types remain publicly unconfirmed.

The "Operation Endgame" data breach in November 2025 involved various cybercrime enablers and resulted in the exposure of 2 million email addresses and 7.4 million passwords. However, this was a law enforcement operation, and no personal data exposure from affected individuals has been reported by the operation itself, only data provided to HIBP by authorities about affected credentials previously stolen by criminals.

OpenAI experienced a data breach in November 2025 through its analytics partner Mixpanel, affecting OpenAI API customers.

A Vultr data breach has been reported, with some sources indicating an incident in March 2023 involving a third-party vendor and a separate 2025 incident appears to be unconfirmed.

A 2025 "Synthient data breach" refers to a compilation of credential stuffing data by the cybersecurity firm Synthient, not a breach of Synthient's own systems. The data included email addresses and passwords aggregated from other malicious sources.

Advanced Family Surgery Center experienced a data breach in 2026, which may have exposed protected health information.

Reports suggest a data breach occurred at Integra Energía in 2025, but this information has not been confirmed by official sources.

Synergy Advanced Healthcare experienced a data breach in 2025 affecting 1,260 individuals.

Reports indicate no evidence of a data breach involving TPL Insurance in 2025.

A DoorDash data breach in 2025 exposed personal contact information of customers, delivery drivers, and merchants due to a social engineering attack.

Reports indicate a potential NeoClinical data breach in 2025, though no verified information regarding affected individuals, data types, or states impacted is available.

A data breach involving ProAgro Seguros was reported in November 2025, with a threat actor claiming to have accessed internal systems and exfiltrated insurance policy documents.

Reports indicate a threat actor is claiming to have breached RevolutionParts, an e-commerce platform, and is selling 5.1 million customer records in late 2025.

ADDA experienced a data breach in March 2025, with data appearing on a public hacking forum in November 2025.

Limited information indicates that Leakzone.net, a cybercrime forum, experienced a security lapse on July 24, 2025, that publicly exposed users' IP addresses.

No confirmed data breach specifically involving the Democratic Senatorial Campaign Committee (DSCC) in 2025 is documented in available sources.

Beckett Collectibles experienced a data breach in November 2025, which included website content defacement and the subsequent sale and public release of stolen data.

Reports indicate a potential data breach involving Tetrad, but no verified details are currently available for 2025. This summary is based on reports only.

Gainsight experienced a data breach in late 2025 where unauthorized access to Salesforce customer data occurred through misused OAuth tokens.

A data breach related to Operation Endgame cybercrime infrastructure occurred in November 2025 where 2 million email addresses and 7.4 million passwords were provided to HIBP by authorities following the takedown of cybercrime enablers.

Reports indicate a data breach at Haravan in November 2025, potentially exposing records for 5.3 million Vietnamese e-commerce customers.