List of data breaches

Main article: Data breach

This is a list of data breaches, using data compiled from various sources, including press reports, government news releases and mainstream news articles. The list includes those involving the theft or compromise of 30,000 or more records, although many more smaller breaches occur continually. Breaches of large organizations where the number of records is still unknown are also listed. The various methods used in the breaches are also listed, with hacking being the most common.

Most breaches occur in North America. It is estimated that the average cost of a data breach will be over $150 million by 2020, with the global annual cost forecast to be $2.1 trillion.[1][2] It is estimated that in 2015 alone, 707 million records were exposed as a result of data breaches.[3] Vigilante.pw lists over 2,100 websites which have had their databases breached, containing over 2 billion user entries in total.

Entity Year Records Organization type Method Sources
Accendo Insurance Co. 2011 175,350 healthcare poor security [4][5]
Tumblr 2013 65,469,298 tech hacked [6]
Adobe Systems 2013 152,000,000 tech hacked [7][8]
Advocate Medical Group 2013 4,000,000 healthcare lost / stolen media [9][10]
Affinity Health Plan, Inc. 2009 344,579 healthcare lost / stolen media [11]
Ameritrade 2005 200,000 financial lost / stolen media [12]
Ankle & Foot Center of Tampa Bay, Inc. 2010 156,000 healthcare hacked [13]
Anthem Inc. 2015 80,000,000 healthcare hacked [14]
AOL 2004 92,000,000 web inside job, hacked [15][16]
AOL 2006 20,000,000 web accidentally published [17]
AOL 2014 2,400,000 web hacked [18]
Apple, Inc./BlueToad 2012 12,367,232 tech, retail accidentally published [19]
Apple 2013 275,000 tech hacked [20]
Apple Health Medicaid 2016 91,000 healthcare poor security [21]
Ashley Madison 2015 32,000,000 web hacked [22]
AT&T 2008 113,000 telecoms lost / stolen computer [23]
AT&T 2010 114,000 telecoms hacked [24]
Auction.co.kr 2008 18,000,000 web hacked [25]
Australian Immigration Department 2015 G20 world leaders government accidentally published [26]
Automatic Data Processing 2005 125,000 financial poor security [27]
AvMed, Inc. 2009 1,220,000 healthcare lost / stolen computer [28]
Bailey's Inc. 2015 250,000 retail hacked [29]
Barnes & Noble 2012 63 stores retail hacked [30][31]
Betfair 2010 2,300,000 web hacked [23]
Bethesda Game Studios 2011 200,000 gaming hacked [32]
Blizzard Entertainment 2012 14,000,000 gaming hacked [33][34]
BlueCross BlueShield of Tennessee 2009 1,023,209 healthcare lost / stolen media [35]
The Bank of New York Mellon 2008 12,500,000 financial lost / stolen media [36]
British Airways 2015 tens of thousands retail hacked [37]
California Department of Child Support Services 2012 800,000 government lost / stolen media [23][38]
CardSystems Solutions Inc.

(MasterCard, Visa, Discover Financial Services and American Express)

2005 40,000,000 financial hacked [39][40]
CareFirst BlueCross Blue Shield - Maryland 2015 1,100,000 healthcare hacked [41]
Central Coast Credit Union 2016 60,000 financial hacked [42]
Central Hudson Gas & Electric 2013 110,000 energy hacked [43]
CheckFree Corporation 2009 5,000,000 financial hacked [44]
China Software Developer Network 2011 6,000,000 web hacked [45]
Chinese gaming websites (three: Duowan, 7K7K, 178.com) 2011 10,000,000 web hacked [46]
Citigroup 2005 3,900,000 financial lost / stolen media [47]
Citigroup 2011 360,083 financial hacked [48]
Citigroup 2013 150,000 financial poor security [49]
City and Hackney Teaching Primary Care Trust 2007 160,000 government lost / stolen media [50]
Colorado government 2010 105,470 healthcare lost / stolen computer [51]
Community Health Systems 2014 4,500,000 healthcare hacked [52]
Commission on Elections 2016 55,000,000 government hacked
Compass Bank 2007 1,000,000 financial inside job [23][53]
Countrywide Financial Corp 2006 2,600,000 financial inside job [23]
Countrywide Financial Corp 2011 2,500,000 financial inside job [54]
Cox Communications 2016 40,000 telecoms hacked [55]
Crescent Health Inc., Walgreens 2013 100,000 healthcare lost / stolen computer [43][56]
CVS 2015 millions retail hacked [57]
Dai Nippon Printing 2007 8,637,405 retail inside job [58]
Data Processors International
(MasterCard, Visa, Discover Financial Services and American Express)
2008 8,000,000 financial hacked [59]
Democratic National Committee 2016 19,252 political [60]
Department of Homeland Security 2016 30,000 government poor security [61][62]
Domino's Pizza (France) 2014 600,000 web hacked [63]
Driving Standards Agency 2007 3,000,000 government lost / stolen media [64]
Dropbox 2012 unknown web hacked [65]
Drupal 2013 1,000,000 web hacked [66]
Dun & Bradstreet 2013 1,000,000 tech hacked [67][68]
eBay 2014 145,000,000 web hacked [69]
Educational Credit Management Corporation 2010 3,300,000 financial lost / stolen media [70]
Eisenhower Medical Center 2011 514,330 healthcare lost / stolen computer [71]
Embassy Cables 2010 251,000 government inside job [72]
Emergency Healthcare Physicians, Ltd. 2010 180,111 healthcare lost / stolen media [71][73]
Emory Healthcare 2012 315,000 healthcare poor security [71]
European Central Bank 2014 unknown financial hacked [74][75]
Evernote 2013 50,000,000 web hacked [76][77]
Excellus BlueCross BlueShield 2015 10,000,000 healthcare hacked [78]
Experian - T-Mobile US 2015 15,000,000 telecoms hacked [79][80]
EyeWire 2016 unknown tech lost / stolen computer [81]
Facebook 2013 6,000,000 web accidentally published [82]
Federal Reserve Bank of Cleveland 2010 400,000 financial hacked [23]
Fidelity National Information Services 2007 8,500,000 financial inside job [83]
Florida Department of Juvenile Justice 2013 100,000 government lost / stolen computer [43]
Friend Finder Networks 2016 412,214,295 web poor security / hacked [84][85]
Formspring 2012 420,000 web accidentally published [86]
Gamigo 2012 8,000,000 web hacked [87]
Gap Inc. 2007 800,000 retail lost / stolen computer [88]
Gawker 2010 1,500,000 web hacked [89][90]
Global Payments 2012 7,000,000 financial hacked [91]
Gmail 2014 5,000,000 web hacked [92]
Greek government 2012 9,000,000 government hacked [93]
GS Caltex 2008 11,100,000 energy inside job [94][95]
Gyft 2016 unknown web hacked [96][97]
Hannaford Brothers Supermarket Chain 2007 4,200,000 retail hacked [98]
Harbortouch 2015 4,200 stores restaurant, retail hacked [99]
Health Net 2009 500,000 healthcare lost / stolen media [100]
Health Net — IBM 2011 1,900,000 healthcare lost / stolen media [101]
Heartland 2009 130,000,000 financial hacked [102][103]
Hewlett Packard 2006 200,000 tech, retail lost / stolen media [104]
Hilton Hotels 2015 unknown hotel hacked [105]
Home Depot 2014 56,000,000 retail hacked [106]
Honda Canada 2011 283,000 retail poor security [107]
Hyatt Hotels 2015 250 locations hotel hacked [108][109]
Internal Revenue Service 2015 720,000 financial hacked [110][111]
Inuvik hospital 2016 6,700 healthcare inside job [112]
Iranian banks (three: Saderat, Eghtesad Novin, and Saman) 2012 3,000,000 financial hacked [113]
Jefferson County, West Virginia 2008 1,600,000 government accidentally published [23][114]
JP Morgan Chase 2010 2,600,000 financial lost / stolen media [115]
JP Morgan Chase 2014 76,000,000 financial hacked [116]
KDDI 2006 4,000,000 telecoms hacked [117]
Kirkwood Community College 2013 125,000 academic hacked [43][118]
KM.RU 2016 1,500,000 web hacked [119]
Korea Credit Bureau 2014 20,000,000 financial inside job [120]
Kroll Background America 2013 1,000,000 tech hacked [67][68]
KT Corporation 2012 8,700,000 telecoms hacked [121][122]
LexisNexis 2014 1,000,000 tech hacked [67][68]
Landry's, Inc. 2015 500 locations restaurant hacked [123][124]
Lincoln Medical & Mental Health Center 2010 130,495 healthcare lost / stolen media [71][125]
LinkedIn, eHarmony, Last.fm 2012 8,000,000 web accidentally published [126][127]
Living Social 2013 50,000,000 web hacked [128][129]
MacRumours.com 2014 860,000 web hacked [130]
Mandarin Oriental Hotels 2014 10 locations hotel hacked [131][132]
Massachusetts Government 2011 210,000 government poor security [23]
Massive American business hack
including 7-Eleven and Nasdaq
2012 160,000,000 financial hacked [133]
Medicaid 2012 780,000 government, healthcare hacked [23]
Medical Informatics Engineering 2015 3,900,000 healthcare hacked [134]
Memorial Healthcare System 2011 102,153 healthcare lost / stolen media [71]
Michaels 2014 3,000,000 retail hacked [135]
Militarysingles.com 2012 163,792 web, military accidentally published [136]
Ministry of Education (Chile) 2008 6,000,000 government accidentally published [137][138]
Monster.com 2007 1,600,000 web hacked [139]
Morgan Stanley Smith Barney 2011 34,000 financial lost / stolen media [23]
Mozilla 2014 76,000 web poor security [140]
NASDAQ 2014 unknown financial hacked [141]
Natural Grocers 2015 93 stores retail hacked [142]
Neiman Marcus 2014 1,100,000 retail hacked [143][144]
Nemours Foundation 2011 1,055,489 healthcare lost / stolen media [71][145]
Network Solutions 2009 573,000 tech hacked [146][147]
New York City Health & Hospitals Corp. 2010 1,700,000 healthcare lost / stolen media [71]
New York State Electric & Gas 2012 1,800,000 energy inside job [23]
New York Taxis 2014 52,000 transport poor security [148]
Nexon Korea Corp 2011 13,200,000 web hacked [149]
NHS 2011 8,300,000 healthcare lost / stolen media [150]
Nintendo 2013 240,000 gaming hacked [151]
Nival Networks 2016 1,500,000 gaming hacked [119]
Norwegian Tax Administration 2008 3,950,000 government accidentally published [152]
Ofcom 2016 unknown telecom inside job [153]
Office of Personnel Management 2015 21,500,000 government hacked [154][155]
Office of the Texas Attorney General 2012 6,500,000 government accidentally published [156]
Ohio State University 2010 760,000 academic hacked [23]
Oregon Department of Transportation 2011 unknown government poor security [23]
OVH 2013 undisclosed web hacked [157]
Premera 2015 11,000,000 healthcare hacked [158]
Puerto Rico Department of Health 2010 515,000 healthcare hacked [71]
Rambler.ru 2012 98,167,935 web hacked [159][160]
RBS Worldpay 2008 1,500,000 financial hacked [161]
Restaurant Depot 2011 200,000 retail hacked [23]
RockYou! 2009 32,000,000 web, gaming hacked [162]
Rosen Hotels 2016 unknown hotel hacked [163]
San Francisco Public Utilities Commission 2011 180,000 government hacked [164]
Scottrade 2015 4,600,000 financial hacked [165]
Scribd 2013 500,000 web hacked [166][167]
Seacoast Radiology, PA 2010 231,400 healthcare hacked [71][168]
Sega 2011 1,290,755 gaming hacked [169]
Service Personnel and Veterans Agency (UK) 2008 50,500 government lost / stolen media [170]
Slack 2015 500,000 tech poor security [171]
SnapChat 2013 4,700,000 web, tech hacked [172]
Sony Online Entertainment 2011 24,600,000 gaming hacked [173][174]
Sony Pictures 2011 1,000,000 web hacked [175]
Sony Pictures 2014 100 terabytes media hacked [176]
Sony PlayStation Network 2011 77,000,000 gaming hacked [177]
South Africa police 2013 16,000 government hacked [178]
South Carolina Government 2012 6,400,000 healthcare inside job [71][179]
South Shore Hospital, Massachusetts 2010 800,000 healthcare lost / stolen media [23]
Southern California Medical-Legal Consultants 2011 300,000 healthcare hacked [23]
Spartanburg Regional Healthcare System 2011 400,000 healthcare lost / stolen computer [71][180]
Stanford University 2008 72,000 academic lost / stolen computer [23][181]
Starbucks 2008 97,000 retail lost / stolen computer [23]
Starwood Hotels
including Westin Hotels and Sheraton Hotels
2015 54 locations hotel hacked [182][183]
State of Texas 2011 3,500,000 government accidentally published [184]
Steam 2011 35,000,000 web hacked [185]
Stratfor 2011 935,000 military accidentally published [186]
Supervalu 2014 200 stores retail hacked [187]
Sutter Medical Center 2011 4,243,434 healthcare lost / stolen computer [71][188]
Syrian government (Syria Files) 2012 2,434,899 government hacked [189][190]
Taobao 2016 20,000,000 retail hacked [191]
Target Corporation 2014 70,000,000 retail hacked [192][193]
TaxSlayer.com 2016 unknown web hacked [194]
TD Ameritrade 2007 6,300,000 financial hacked [195]
TD Bank 2012 260,000 financial hacked [196][197]
TerraCom & YourTel 2013 170,000 telecoms accidentally published [198][199]
Texas Lottery 2007 89,000 government inside job [23]
Tianya Club 2011 28,000,000 web hacked [200]
TK / TJ Maxx 2007 94,000,000 retail hacked [201][202]
T-Mobile, Deutsche Telecom 2006 17,000,000 telecoms lost / stolen media [203]
Tricare 2011 4,901,432 military, healthcare lost / stolen computer [23]
Triple-S Salud, Inc. 2010 398,000 healthcare lost / stolen media [71]
Trump Hotels 2014 8 locations hotel hacked [204][205]
21st Century Oncology 2016 2,200,000 healthcare hacked [206][207]
Twitch.tv 2015 unknown tech hacked [208]
Twitter 2013 250,000 web hacked [209]
Uber 2014 50,000 tech poor security [210]
Ubisoft 2013 unknown gaming hacked [211]
Ubuntu 2013 2,000,000 tech hacked [212]
UK Home Office 2008 84,000 government lost / stolen media [213]
UK Ministry of Defence 2008 1,700,000 government lost / stolen media [214]
UK Revenue & Customs 2007 25,000,000 government lost / stolen media [215]
University of California, Berkeley 2009 160,000 academic hacked [216]
University of California, Berkeley 2016 80,000 academic hacked [217]
UCLA Medical Center, Santa Monica 2015 4,500,000 healthcare hacked [218]
University of Central Florida 2016 63,000 academic hacked [219]
University of Miami 2008 2,100,000 academic lost / stolen computer [23]
University of Utah Hospital & Clinics 2008 2,200,000 academic lost / stolen media [23]
University of Wisconsin–Milwaukee 2011 73,000 academic hacked [23]
UPS 2014 51 locations retail hacked [220]
U.S. Army 2011 50,000 military accidentally published [23]
U.S. Army
(classified Iraq War documents)
2010 392,000 government inside job [221]
U.S. Department of Defense 2009 72,000 military lost / stolen media [23]
U.S. Department of Veteran Affairs 2006 26,500,000 government, military lost / stolen computer [222]
U.S. law enforcement (70 different agencies) 2011 123,461 government accidentally published [223]
National Archives and Records Administration (U.S. military veterans' records) 2009 76,000,000 military lost / stolen media [224]
U.S. government (United States diplomatic cables leak) 2010 260,000 military inside job [225]
National Guard of the United States 2009 131,000 military lost / stolen computer [23]
Verizon Communications 2016 1,500,000 telecoms hacked [226]
Virginia Department of Health 2009 8,257,378 government, healthcare hacked [23]
Virginia Prescription Monitoring Program 2009 531,400 healthcare hacked [23]
Vodafone 2013 2,000,000 telecoms inside job [227]
VTech 2015 5,000,000 retail hacked [228]
Walmart 2015 millions retail hacked [57]
Washington Post 2011 1,270,000 media hacked [229]
Washington State court system 2013 160,000 government hacked [230][231]
Weebly 2016 43,430,316 web hacked [232][233][234]
Wendy's 2015 unknown restaurant hacked [235][236]
Writerspace.com 2011 62,000 web hacked [237]
Yahoo 2013 1,000,000,000 web hacked [238]
Yahoo 2014 500,000,000 web hacked [239][240][241][242][243]
Yahoo Japan 2013 22,000,000 tech, web hacked [244]
Yahoo! Voices 2012 450,000 web hacked [245][246]
Yale University 2010 43,000 academic accidentally published [23]
Zappos 2012 24,000,000 web hacked [247]
Bank of America 2005 1,200,000 financial lost / stolen media [248]
DSW Inc. 2005 1,400,000 retail hacked [249]

NotesEdit

  1. ^ "Data breach costs will soar to $2T: Juniper", CUNA, May 15, 2015
  2. ^ "Data Breach Industry Forecast", Experian (2015)
  3. ^ "Data Breaches Exposed 707 Million Records During 2015", Softpedia, Feb. 29, 2016
  4. ^ RxAmerica (24 June 2011). "Accendo Insurance Company Addresses Patient Information Issue". PR Newswire. 
  5. ^ "» RxAmerica and Accendo Insurance notify 175,000 Medicare beneficiaries that mailing error exposed their medication name, date of birth, and member ID". DataBreaches.net. 
  6. ^ Franceschi-Bicchierai, Lorenzo (30 May 2016). "Hackers Stole 65 Million Passwords From Tumblr, New Analysis Reveals". Motherboard. Vice Media. 
  7. ^ Welch, Chris (7 November 2013). "Over 150 million breached records from Adobe hack have surfaced online". The Verge. Vox Media. 
  8. ^ King, Rachel. "Adobe admits 2.9M customer accounts have been compromised". ZDNet. 
  9. ^ HealthITSecurity. "Advocate Medical Group endures massive data breach". HealthITSecurity. 
  10. ^ HealthITSecurity. "Advocate Medical Group endures massive data breach". HealthITSecurity. 
  11. ^ "HHS settles with health plan in photocopier breach case". HHS.gov. 
  12. ^ "Ameritrade warns 200,000 of lost data". NBC News. 
  13. ^ "» Ankle + Foot Center of Tampa Bay security breach affects 156,000 patients? (updated)". phiprivacy.net. 
  14. ^ http://www.anthemfacts.com/faq
  15. ^ "AOL employee arrested and charged with stealing list - Jun. 23, 2004". cnn.com. 
  16. ^ "Ex-AOL worker who stole e-mail list sentenced". msnbc.com. 
  17. ^ "AOL Proudly Releases Massive Amounts of Private Data". TechCrunch. AOL. 6 August 2006. 
  18. ^ "AOL Security Update". AOL Blog. 
  19. ^ "UDID leak source ID'd: BlueToad mobile firm says it was hacked". CNET. Retrieved 1 February 2016. 
  20. ^ Arthur, Charles. "Apple Developer site hack: Turkish security researcher claims responsibility". The Guardian. 
  21. ^ "91,000 state Medicaid clients warned of data breach", The Seattle Times, Feb. 9, 2016
  22. ^ "Hackers Finally Post Stolen Ashley Madison Data". WIRED. 18 August 2015. 
  23. ^ a b c d e f g h i j k l m n o p q r s t u v w x y z aa ab ac ID Theft Resource Center. "2008 Data Breaches - ITRC Surveys & Studies - ID Theft Blog". idtheftcenter.org. 
  24. ^ Arthur, Charles. "Security leak leaves US Apple iPad owners at risk". the Guardian. 
  25. ^ "Auction Slammed Over Data Theft". 26 March 2010. 
  26. ^ Farrell, Paul. "Personal details of world leaders accidentally revealed by G20 organisers". the Guardian. 
  27. ^ "Payroll Giant Gives Scammer Personal Data of Hundreds of Thousands of Investors". ABC News. 
  28. ^ "$3M Data Breach Settlement Approved for AvMed Customers Unaffected by Identity Theft". Winston & Strawn. 
  29. ^ "Attacker compromises information of 250K in Bailey's data breach", SC Magazine, March 16, 2016
  30. ^ "Credit Card Data Breach at Barnes & Noble Stores". The New York Times. 24 October 2012. 
  31. ^ Riley, Charles (24 October 2012). "Barnes & Noble customer data stolen". CNNMoney. 
  32. ^ "Lulzsec: A Short History of Hacking". PCWorld. 27 June 2011. 
  33. ^ "Important Security Update". blizzard.com. 
  34. ^ "Blizzard Battle.net Security Breached, Passwords Accessed". Dark Reading. 
  35. ^ "Thief steals 57 hard drives from BlueCross BlueShield of Tennessee". SC Magazine. 
  36. ^ Bennett, Lanetra. "Attorney General McCollum Urges Consumers to Monitor Credit and Debit Activity". wctv.tv. 
  37. ^ "British Airways frequent-flyer accounts hacked". the Guardian. 
  38. ^ http://articles.businessinsider.com/2012-04-03/news/31279254_1_major-data-breach-identity-theft-office-of-privacy-protection
  39. ^ "40 million credit cards exposed". msnbc.com. 
  40. ^ "Credit card breach exposes 40 million accounts". CNET. Retrieved 2017-01-09. 
  41. ^ "Cyberattack affects 1.1 million CareFirst customers". Baltimore Sun. 20 May 2015. 
  42. ^ "Breached Credit Union Comes Out of its Shell", Krebs on Security, Feb. 25, 2016
  43. ^ a b c d "Privacy Rights Clearinghouse". privacyrights.org. 
  44. ^ McMillan, Robert (6 January 2009). "CheckFree warns 5 million customers after hack". Computerworld. 
  45. ^ Protalinski, Emil. "Chinese hacker arrested for leaking 6 million logins". ZDNet. 
  46. ^ "Hackers compromised 38 million Chinese users data by hacking Game sites". Retrieved 1 February 2016. 
  47. ^ "U.P.S. Loses A Shipment Of Citigroup Client Data". The New York Times. 7 June 2005. 
  48. ^ "Citigroup Hack Nabs Data from 210k Customers". PCWorld. 9 June 2011. 
  49. ^ Kovacs, Eduard (22 July 2013). "Citi Exposes Details of 150,000 Individuals Who Went into Bankruptcy". softpedia. 
  50. ^ "Hackney NHS trust encrypts IT equipment following loss of child data". ComputerWeekly. 
  51. ^ "RxAmerica and Accendo Insurance notify 175,000 Medicare beneficiaries that mailing error exposed their medication name, date of birth, and member ID". Retrieved 1 February 2016. 
  52. ^ Pagliery, Jose (18 August 2014). "Hospital network hacked, 4.5 million records stolen". CNNMoney. 
  53. ^ Vijayan, Jaikumar (26 March 2008). "Programmer who stole drive containing 1 million bank records gets 42 months". Computerworld. 
  54. ^ "Money & Company". latimes.com. 
  55. ^ "Cox Communications Investigates Data Breach Affecting 40K Employees", Info Security Magazine, March 7, 2016
  56. ^ "Walgreens company announces data breach". Healthcare IT News. 
  57. ^ a b "CVS and Walmart Canada Are Investigating a Data Breach". The New York Times. 18 July 2015. 
  58. ^ "Reports of data breaches reached new heights in 2007 - USATODAY.com". usatoday.com. 
  59. ^ "Hacker may have stolen information on up to 8M credit cards - Feb. 27, 2003". cnn.com. 
  60. ^ Tumulty, Karen & Tom Hamburger (July 22, 2016). "WikiLeaks releases thousands of documents about Clinton and internal deliberations". Washington Post. 
  61. ^ "Breach Exposes Data From Thousands of DHS Employees", PC Magazine, Feb. 8, 2016
  62. ^ "Hackers Get Employee Records at Justice and Homeland Security Depts.", New York Times, Feb. 8, 2016
  63. ^ Gibbs, Samuel. "The €30k data takeaway: Domino's Pizza faces ransom demand after hack". the Guardian. 
  64. ^ "BBC NEWS - UK - UK Politics - Millions of L-driver details lost". bbc.co.uk. 
  65. ^ "Dropbox Admits Hack, Adds More Security Features". Dark Reading. 
  66. ^ "Drupal.org resets login credentials after hack exposes password data". Ars Technica. 
  67. ^ a b c Byron Acohido, USA TODAY (26 September 2013). "LexisNexis, Dunn (sic) & Bradstreet, Altegrity hacked". USA TODAY. 
  68. ^ a b c Finkle, Jim (26 September 2013). "Data brokers D&B, LexisNexis, Altegrity report cyber attacks". Reuters. 
  69. ^ Peterson, Andrea (21 May 2014). "eBay asks 145 million users to change passwords after data breach". Washington Post. 
  70. ^ "Student Loan Company: Data on 3.3M People Stolen". Fox News. 
  71. ^ a b c d e f g h i j k l m http://www.mhs.net/pdf/release071112.pdf%7C%7Chttp://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/breachtool.html
  72. ^ "Full-text search". wikileaks.org. 
  73. ^ "Chicago Breach Affects 180,000". healthcareinfosecurity.com. 
  74. ^ Clinch, Matt (24 July 2014). "ECB hacked: Data stolen from central bank". 
  75. ^ Ehrenberg, Billy (24 July 2014). "Update: Blackmailer hacks European Central Bank website, steals email addresses and contact details". City A.M. 
  76. ^ "Evernote hacked, forces millions of users to reset their passwords". Wired UK. 
  77. ^ Mogg, Trevor (4 March 2013). "Evernote hack: 50 million users forced to reset passwords". Digital Trends. 
  78. ^ "Cyber breach hits 10 million Excellus customers". USA TODAY. 10 September 2015. 
  79. ^ "Massive Data Breach At Experian Exposes Personal Data For 15 Million T-Mobile Customers", Huffington Post, Oct. 2, 2015
  80. ^ "Experian data breach affects 15 million people including T-Mobile customers", Fortune, Oct. 1, 2015
  81. ^ "Security: Data Breach & Old Password Expiration", Eyewire, Feb. 23, 2016
  82. ^ "Important Message from Facebook's White Hat Program". facebook.com. 
  83. ^ "Fidelity National Data Theft Affects 8.5 Million Customers". PCWorld. 27 July 2007. 
  84. ^ "Over 300 million AdultFriendFinder accounts have been exposed in a massive breach". The Verge. Retrieved 13 November 2016. 
  85. ^ "AdultFriendFinder network hack exposes 412 million accounts". ZDNet. Retrieved 14 November 2016. 
  86. ^ "Formspring disables user passwords in security breach". CNET. CBS Interactive. 11 July 2012. 
  87. ^ Greenberg, Andy. "Eight Million Email Addresses And Passwords Spilled From Gaming Site Gamigo Months After Hacker Breach". Forbes. 
  88. ^ "Gap Contractor Blamed for Data Breach". PCWorld. 29 September 2007. 
  89. ^ Arthur, Charles. "Gawker falls victim to hackers". the Guardian. 
  90. ^ "Gawker Hacked - Gawker Commenter Database Hacked - Mediaite". mediaite.com. 12 December 2010. 
  91. ^ Tsukayama, Hayley (2 April 2012). "FAQ: The Global Payments hack". Washington Post. 
  92. ^ Protalinski, Emil. "5 Million Gmail Passwords Leak, Google Says No Compromise". The Next Web. 
  93. ^ "Hacker arrested for allegedly stealing ID info of most of Greece". Wired UK. 
  94. ^ "GS Caltex - Stratigos Security". 
  95. ^ "The 15 Most Massive Data Breaches in History". 
  96. ^ "Gyft Notifies Users of Data Breach", Low Cards, Feb. 8, 2016
  97. ^ "Gyft Notifies Affected Users of Security Incident", BusinessWire, Feb. 5, 2016
  98. ^ Messmer, Ellen (28 March 2008). "Details emerging on Hannaford data breach". Network World. 
  99. ^ "Harbortouch is Latest POS Vendor Breach — Krebs on Security". krebsonsecurity.com. 
  100. ^ "Health Net Fined Second Time for Breach". databreachtoday.com. 
  101. ^ HCPro, Inc. (1 February 2016). "CA Investigating Latest Health Net Data Breach". healthleadersmedia.com. 
  102. ^ Johnson, Bobbie. "Heartland hackers also behind $750,000 cash machine strike". the Guardian. 
  103. ^ "'Massive' credit card data breach involves all major brands". CNNMoney. 
  104. ^ "Laptop with HP employee data stolen". CNET. CBS Interactive. 
  105. ^ Hackett, Robert (25 November 2015). "Hilton Hotels Confirms Data Breach Following Starwood and Trump". Fortune. 
  106. ^ "Banks: Credit Card Breach at Home Depot". Krebs on Security. 
  107. ^ "Honda Canada hit by online security breach; 283,000 car owners' personal data stolen". guelphmercury.com. 
  108. ^ "Hyatt Reveals Data Breach Impacted About 250 Hotels". ABC News. 
  109. ^ "Protecting Customer Information". hyatt.com. 
  110. ^ "IRS: Thieves May Have Stolen Info From 220,000 Additional Tax Accounts". ABC News. 
  111. ^ "IRS taxpayer data theft seven times larger than originally thought", CNN, Feb. 26, 2016
  112. ^ "Inuvik hospital confirms potential data breach by employees". Canadian Broadcasting Corporation. 5 February 2016. 
  113. ^ Protalinski, Emil. "3 million bank accounts hacked in Iran". ZDNet. 
  114. ^ "Web error fallout ongoing - Journal News - News, sports, jobs, community information for Martinsburg - The Journal". 
  115. ^ "J.P. Morgan Chase Probing Possible Data Breach". PCWorld. 1 May 2007. 
  116. ^ Perlroth, Jessica Silver-Greenberg, Matthew Goldstein and Nicole. "JPMorgan Chase Hacking Affects 76 Million Households". 
  117. ^ Williams, Martyn (13 June 2006). "KDDI suffers massive data breach". Computerworld. 
  118. ^ "Data Breach At Kirkwood Community College Exposes SS#'s". Data Breach Watch. 
  119. ^ a b "A Teen Hacker Is Targeting Russian Sites as Revenge for the MH17 Crash". 
  120. ^ "20 Million People Fall Victim to South Korea Data Leak - SecurityWeek.Com". securityweek.com. 
  121. ^ "Police arrest two in KT data leak case". 29 July 2012. 
  122. ^ "Hackers accused of stealing data from 9M Korean mobile users". CNET. CBS Interactive. 30 July 2012. 
  123. ^ "Restaurant chains hit with data breach - Bankrate.com". bankrate.com. 
  124. ^ "Data security critical as menu of breaches grows". 
  125. ^ http://www.phiprivacy.net/?tag=lincoln-medical-and-mental-health-center
  126. ^ "What the password leaks mean to you (FAQ)". CNET. CBS Interactive. 8 June 2012. 
  127. ^ "8 million leaked passwords connected to LinkedIn, dating website". Ars Technica. 
  128. ^ "50,000,000 usernames and passwords lost as LivingSocial "special offers" site hacked – Naked Security". Naked Security. 
  129. ^ Perlroth, Nicole. "LivingSocial Hack Exposes Data for 50 Million Customers". 
  130. ^ "Hack of MacRumors forums exposes password data for 860,000 users". Wired UK. 
  131. ^ "Mandarin Oriental says 10 properties impacted in credit card breach". SC Magazine. 
  132. ^ "Press Release And Notice Regarding Mandarin Oriental Credit Card Breach". mandarinoriental.com. 
  133. ^ "Hackers hit Nasdaq, 7-Eleven, others for $300 million: feds". 
  134. ^ "Update: Hackers hit business associate, swipe PHI and Social Security numbers". Healthcare IT News. 
  135. ^ Jayakumar, Amrita (19 April 2014). "Michaels says 3 million customers hit by data breach". Washington Post. 
  136. ^ "Reborn LulzSec Claims Hack of Dating Site for Military Personnel". PCWorld. 27 March 2012. 
  137. ^ "BBC NEWS - Americas - Hacker leaks 6m Chileans' records". bbc.co.uk. 
  138. ^ "Government servers in Chile hacked, 6 million personal records made public - News - Geek.com". @geekdotcom. 
  139. ^ "BBC NEWS - Technology - Monster attack steals user data". bbc.co.uk. 
  140. ^ Hern, Alex. "Mozilla confirms leak of 76,000 developer email addresses". the Guardian. 
  141. ^ McCrank, John (18 July 2013). "Nasdaq forum website hacked, passwords compromised". Reuters. 
  142. ^ "There's Another Possible Payment Data Breach At Natural Grocers – Consumerist". Consumerist. 
  143. ^ "Neiman Marcus Data Breach Worse Than First Said". The New York Times. 24 January 2014. 
  144. ^ "Stealthy, Razor Thin ATM Insert Skimmers — Krebs on Security". krebsonsecurity.com. 
  145. ^ "ZeroSecurity - Information Security & Technology News". Zerosecurity. 
  146. ^ Keizer, Gregg (19 April 2010). "Network Solutions sites hacked again". Computerworld. 
  147. ^ "Security Fix - Network Solutions Hack Compromises 573,000 Credit, Debit Accounts". washingtonpost.com. 
  148. ^ Pandurangan, Vijay. "On Taxis and Rainbows". Medium. 
  149. ^ Reuters Editorial (26 November 2011). "Data of 13 million South Korean online game subscribers hacked". Reuters. 
  150. ^ "NHS Researchers Lose Laptop With 8m Patient Records". TechWeekEurope UK. 
  151. ^ "Club Nintendo Japan hacked". Engadget. 
  152. ^ "Largest Data Leak in Norway: data on 4 million Norwegians sent to media". infowatch.com. 
  153. ^ "Ofcom tackles mass data breach of TV company information", The Guardian, March 10, 2016
  154. ^ "Hacking of Government Computers Exposed 21.5 Million People". The New York Times. 10 July 2015. 
  155. ^ "US government hack stole fingerprints of 5.6 million federal employees". the Guardian. 
  156. ^ "Texas attorney general exposes millions of voters' Social Security numbers". rawstory.com. 
  157. ^ "OVH Tasks". ovh.net. 
  158. ^ "About the Cyberattack". premeraupdate.com. 
  159. ^ Gallagher, Sean. "More passwords, please: 98 million leaked from 2012 breach of "Russia's Yahoo"". Ars Technica. Retrieved 30 September 2016. 
  160. ^ "LeakedSource: Rambler.ru breach". Retrieved 30 September 2016. 
  161. ^ "RBS WorldPay breach exposes 1.5 million". theregister.co.uk. 
  162. ^ Cubrilovic, Nik (14 December 2009). "RockYou Hack: From Bad To Worse". TechCrunch. AOL. 
  163. ^ "Rosen Hotels warns customers of 18-month data breach", Orlando Sentinel, March 8, 2016
  164. ^ "SF utilities agency warns of potential breach". CNET. CBS Interactive. 2 June 2011. 
  165. ^ Hackett, Robert (2 October 2015). "Scottrade Data Breach Affects 4.6 Million Customers". Fortune. 
  166. ^ "Scribd, "world's largest online library," admits to network intrusion, password breach". Naked Security. 
  167. ^ http://www.nbcnews.com/technology/scribd-hack-exposes-thousands-users-1B9239618
  168. ^ "Gamers hack server to patient records: 230,000 clients of Seacoast Radiology in Rochester affected; no info believed compromised". fosters.com. 
  169. ^ Cohen, Peter. "Sega: 1.3 million customer records hacked, LulzSec promises retribution". ZDNet. 
  170. ^ "BBC NEWS - UK - England - Gloucestershire - Personnel records stolen from MoD". bbc.co.uk. 
  171. ^ "Slack gets hacked – rolls out two-factor authentication after user database breach – Naked Security". Naked Security. 
  172. ^ Fung, Brain. "A Snapchat security breach affects 4.6 million users. Did Snapchat drag its feet on a fix?". The Washington Post. 
  173. ^ McMillan, Robert (3 May 2011). "Sony cuts off Sony Online Entertainment service after hack". Computerworld. 
  174. ^ "Sony hack: Can Sony's brand recover from massive breach? - May. 10, 2011". CNNMoney. 
  175. ^ Warren, Christina (2 June 2011). "Sony Pictures Website Hacked, 1 Million Accounts Exposed". Mashable. 
  176. ^ "A Look Through The Sony Pictures Data Hack: This Is As Bad As It Gets". BuzzFeed. 
  177. ^ Kessler, Sarah (31 May 2011). "Sony Promises All PlayStation Services Will Return This Week (Again)". Mashable. 
  178. ^ "Anonymous hacks police site, releases list of South African whistleblowers". Wired UK. 
  179. ^ "Personal data for 228,000 in SC compromised". thestate. 
  180. ^ http://www.spartanburgregional.com/Pages/PatientNotice.aspx
  181. ^ Ilana DeBare, Chronicle Staff Writer (8 June 2008). "Stanford employees' data on stolen laptop". SFGate. 
  182. ^ "Starwood Hotels Malware Data Breach: What You Need to Know". ABC News. 
  183. ^ "Starwood data breach: See which hotels were hacked". cbsnews.com. 20 November 2015. 
  184. ^ "Texas Data Breach Exposed 3.5 Million Records". Dark Reading. 
  185. ^ "Valve's online game service Steam hit by hackers". BBC News. 
  186. ^ Perlroth, Nicole. "Questions About Motives Behind Stratfor Hack". 
  187. ^ Tom Huddleston, Jr. (29 September 2014). "Supervalu announces another possible data breach at grocery store chain - Fortune". Fortune. 
  188. ^ "Industry News Archives -". simplysecurity.com. 
  189. ^ "Syria files: Wikileaks releases 2m 'embarrassing' emails". BBC News. 5 July 2012. Archived from the original on 10 July 2012. Retrieved 5 July 2012. 
  190. ^ Greenberg, Andy (5 July 2012). "WikiLeaks Announces Massive Release With The 'Syria Files': 2.4 Million Emails From Syrian Officials And Companies". Forbes. Archived from the original on 10 July 2012. Retrieved 5 July 2012. 
  191. ^ "Data breach in China: 100 million records used to hack 20 million Taobao users". Naked Security. 
  192. ^ "Broker cuts Target earnings outlook after data theft". tribunedigital-chicagotribune. 
  193. ^ "Target Hacked: Retailer Confirms 'Unauthorized Access' Of Credit Card Data". The Huffington Post. 19 December 2013. 
  194. ^ Saunders, Laura. "Tax software firm warns of data breach". MarketWatch. 
  195. ^ "Ameritrade Hack Settlement: $2 Per Victim, $1.8 Million for Lawyers". WIRED. 11 July 2008. 
  196. ^ Payne, Mark (9 December 2014). "TD Bank reaches data breach settlement with Massachusetts". 
  197. ^ "TD Bank Pays $625,000 in Mass. Data Breach Settlement". American Banker. 
  198. ^ "TerraCom and YourTel threaten journalists who exposed massive personal data breach". Boing Boing. 
  199. ^ "Reporters sued as 'hackers' for finding a security hole with Google". Wired UK. 
  200. ^ Pauli, Darren (10 July 2013). "28 million clear text passwords found after Tianya hack". iTnews. 
  201. ^ Espiner, Tom. "Wi-Fi hack caused TK Maxx security breach". ZDNet. 
  202. ^ "T.J. Maxx theft believed largest hack ever". msnbc.com. 
  203. ^ http://www.datalossdb.org%7C%7Chttp://www.informationweek.com/security/attacks/t-mobile-lost-17-million-subscribers-per/210700232
  204. ^ "Trump Hotel Collection™ – Data Security Notice". trumphotelcollection.com. 
  205. ^ "Trump Hotel Collection Confirms Card Breach — Krebs on Security". krebsonsecurity.com. 
  206. ^ "21st Century Oncology notifies 2.2 million of hacking, data breach", CBS12, March 14, 2016
  207. ^ "Oh No, Not Again…Chalk Up Yet Another Health Data Breach", National Law Review, March 14, 2016
  208. ^ "Twitch warns users of possible data breach". USA TODAY. 24 March 2015. 
  209. ^ "Twitter hacked: 250,000 accounts believed compromised". Wired UK. 
  210. ^ "Uber Statement". Uber Global. 
  211. ^ "Security update regarding your Ubisoft account - please create a new password - Forums". ubi.com. 
  212. ^ "Hack exposes e-mail addresses, password data for 2 million Ubuntu Forum users". Ars Technica. 
  213. ^ "BBC NEWS - UK - UK Politics - Home Office guilty of data breach". 
  214. ^ "Up to 1.7m people's data missing". BBC News. 
  215. ^ "Data lost by Revenue and Customs". BBC News. 
  216. ^ "Hackers breach UC Berkeley computers". msnbc.com. 
  217. ^ "Data breach affects 80,000 UC Berkeley faculty, students and alumni", Fox News, Feb. 28, 2016
  218. ^ "Hackers swipe data of 4.5M at UCLA Health System in massive cyberattack". Healthcare IT News. 
  219. ^ "63K Social Security numbers compromised in UCF data breach". The Washingtion Times. 
  220. ^ Rogers, Alex. "UPS: We've Been Hacked". TIME.com. 
  221. ^ Greenberg, Andy. "Wikileaks Reveals The Biggest Classified Data Breach In History". Forbes. 
  222. ^ "VA settlement demonstrates just how costly lax security can be -- GCN". gcn.com. 
  223. ^ "AntiSec Breach Yields Huge Amount of Law Officers' Personal Data". PCMAG. 
  224. ^ "Probe Targets Archives' Handling of Data on 70 Million Vets". WIRED. 1 October 2009. 
  225. ^ Rogers, Simon. "WikiLeaks embassy cables: download the key data and see how it breaks down". the Guardian. 
  226. ^ "Verizon's Data Breach Fighter Gets Hit With, Well, a Data Breach", Fortune magazine, March 24, 2016
  227. ^ "Insider Steals Data of 2 Million Vodafone Germany Customers - SecurityWeek.Com". securityweek.com. 
  228. ^ "Security Breach at Toy Maker VTech Includes Data on Children". The New York Times. 1 December 2015. 
  229. ^ "June Hack of Washington Post Netted 1.27M User Account Details". PCMAG. 
  230. ^ Porterfield, Elaine (9 May 2013). "Washington State system hacked, data of thousands at risk". Reuters. 
  231. ^ "Washington State Courts - Data Breach Information - Home Page". wa.gov. 
  232. ^ "Tens of millions of websites at risk in latest mega breach". LeakedSource. Retrieved 25 October 2016. 
  233. ^ Ashok, India. "Weebly confirms hack affecting over 40 million users, Foursquare accounts also exposed". International Business Times. Retrieved 25 October 2016. 
  234. ^ "Weebly hacked, 43 million credentials stolen". TechCrunch. Retrieved 25 October 2016. 
  235. ^ "Wendy's Probes Reports of Credit Card Breach". Krebs on Security. 
  236. ^ Martha C. White. "Wendy's Investigates Possible Data Breach". MONEY.com. 
  237. ^ "LulzSec on Hacks: 'We Find it Entertaining'". PCMAG. 
  238. ^ "Yahoo Discloses New Breach of 1 Billion User Accounts". The Wall Street Journal. Retrieved 15 December 2016. 
  239. ^ "Yahoo confirms data breach affecting at least 500 million accounts". Washington Post. September 22, 2016. Retrieved 22 September 2016. 
  240. ^ "What Yahoo users should do"
  241. ^ "Yahoo warns users at least 500 million accounts were hacked"
  242. ^ Perlroth, Nicole. "Yahoo Says Hackers Stole Data on 500 Million Users in 2014". The New York Times. Retrieved 22 September 2016. 
  243. ^ "Yahoo Says at Least 500 Million Accounts Breached in Attack". Bloomberg. Retrieved 22 September 2016. 
  244. ^ Reuters Editorial (17 May 2013). "Yahoo Japan suspects 22 million user IDs leaked: Kyodo". Reuters. 
  245. ^ "Nearly Half a Million Yahoo Passwords Leaked [Updated] - Slashdot". slashdot.org. 
  246. ^ "Yahoo Voices Breach Exposes 453,000 Passwords", PC Magazine, July 12, 2012
  247. ^ Greenberg, Andy. "Zappos Says Hackers Accessed 24 Million Customers' Account Details". Forbes. 
  248. ^ "Bank of America loses customer data". msnbc.com. 2005-03-01. Retrieved 2017-01-09. 
  249. ^ "1.4 million exposed in shoe data breach". msnbc.com. 2005-04-19. Retrieved 2017-01-09.