Learn more about the latest data breaches

The list of companies involved in data breaches is seemingly endless and continuing to grow. And that’s just the data breaches that make national news; many never come to light. Universities, health insurance companies, retailers ranging from mega to small--any institution that collects data about its customers is vulnerable to attack, and hackers seem to be enjoying a new era of data breaches.

Privacy Rights Clearinghouse lists breaches as they are exposed here, with a ticker counting the number of records exposed (quickly approaching 1 billion as of early 2016).

Sonic Drive-In breach

Sonic Drive-In announced that nearly 3,600 of its locations were subject to a point-of-sale data breach. This breach is believed to have affected up to 5 million of its customers’ credit card numbers.

Equifax breach

Credit reporting company Equifax announced that it was the subject of a massive data breach on September 7, 2017. An estimated 143 million consumers may have had their personally identifiable information compromised.It appears that Equifax’s records were breached from mid-May through July 2017.

The Buckle breach

On June 16, 2017, The Buckle Inc., a clothing retailer that operates over 450 stores in the U.S., announced that its brick and mortar locations were the subject of a point-of-sale data breach. The breach is believed to have compromised many of its customers’ credit card numbers, although no exact numbers have been released....

Cloud Pets breach

“Cloud Pets,” a company that makes stuffed animals that allow children to communicate with distant loved ones, has suffered a data breach. Cyber experts estimate that the connected stuffed animal manufacturer had more than 820,000 user accounts compromised. The user accounts contained sensitive information including the email addresses of the parents, passwords, child profile...

Arby's breach

The fast food chain Arby’s has announced that their point-of-sales systems (POS) were compromised. The breach affected hundreds of corporate-owned stores between October 25, 2016 and January 19, 2017.  The stolen information reportedly included over 350,000 credit and debit card numbers.

E-Sports Entertainment Association (ESEA) breach

On December 30, 2016 the E-Sports Entertainment Association (ESEA) announced that they experienced a data breach, which news outlets are reporting to have affected 1.5 million of their users. The breach compromised users emails addresses, usernames, private messages, IPs, mobile phone numbers (for SMS messages), forum posts, hashed passwords, and hashed secret question answers....

Yahoo breach

On December 14, 2016, Yahoo Inc. announced that they were the subject of a data breach that occurred in August 2013, affecting more than one billion user accounts. This breach is believed to be separate from the one announced in September 2016 that affected 500 million user accounts. Yahoo’s latest breach has compromised...

FriendFinder Networks breach

The adult entertainment and online dating conglomerate FriendFinder Networks recently announced that the personal information of its users has been compromised, including users’ email addresses, passcodes, log-in times, IP addresses and membership statuses. Cyber experts estimate that more than 412 million user accounts have been breached.

Kimpton Hotels and Restaurants breach

Kimpton Hotels and Restaurants has announced that the point-of-sale systems at 62 of their boutique hotels and/or restaurants have been compromised by malware between February 16, 2016 and July 7, 2016.

Cici's Breach

The fast food pizza buffet chain, Cici's, has announced that their point-of-sales systems have been compromised. The breach, which affected 140 of their 450 restaurants from June 2015 through July 2016, is believed to have compromised more than 600,000 payment cards.