Entity Year Records Organization type Method Sources Uber 2017 57,000,000 transport hacked [4] Heathrow Airport 2017 2.5GB transport lost / stolen media [5][6][7] Deloitte 2017 consulting, accounting poor security [8] Equifax 2017 143,000,000 financial, credit reporting hacked [9] 21st Century Oncology 2016 2,200,000 healthcare hacked [10][11] Accendo Insurance Co. 2011 175,350 healthcare poor security [12][13] […]
| Entity | Year | Records | Organization type | Method | Sources |
|---|---|---|---|---|---|
| Uber | 2017 | 57,000,000 | transport | hacked | [4] |
| Heathrow Airport | 2017 | 2.5GB | transport | lost / stolen media | [5][6][7] |
| Deloitte | 2017 | consulting, accounting | poor security | [8] | |
| Equifax | 2017 | 143,000,000 | financial, credit reporting | hacked | [9] |
| Entity | Year | Records | Organization type | Method | Sources |
|---|---|---|---|---|---|
| Uber | 2017 | 57,000,000 | transport | hacked | [4] |
| Heathrow Airport | 2017 | 2.5GB | transport | lost / stolen media | [5][6][7] |
| Deloitte | 2017 | consulting, accounting | poor security | [8] | |
| Equifax | 2017 | 143,000,000 | financial, credit reporting | hacked | [9] |
| 21st Century Oncology | 2016 | 2,200,000 | healthcare | hacked | [10][11] |
| Accendo Insurance Co. | 2011 | 175,350 | healthcare | poor security | [12][13] |
| Adobe Systems | 2013 | 152,000,000 | tech | hacked | [14][15] |
| Advocate Medical Group | 2013 | 4,000,000 | healthcare | lost / stolen media | [16][17] |
| Affinity Health Plan, Inc. | 2009 | 344,579 | healthcare | lost / stolen media | [18] |
| Ameritrade | 2005 | 200,000 | financial | lost / stolen media | [19] |
| Ankle & Foot Center of Tampa Bay, Inc. | 2010 | 156,000 | healthcare | hacked | [20] |
| Anthem Inc. | 2015 | 80,000,000 | healthcare | hacked | [21] |
| AOL | 2004 | 92,000,000 | web | inside job, hacked | [22][23] |
| AOL | 2006 | 20,000,000 | web | accidentally published | [24] |
| AOL | 2014 | 2,400,000 | web | hacked | [25] |
| Apple, Inc./BlueToad | 2012 | 12,367,232 | tech, retail | accidentally published | [26] |
| Apple | 2013 | 275,000 | tech | hacked | [27] |
| Apple Health Medicaid | 2016 | 91,000 | healthcare | poor security | [28] |
| Ashley Madison | 2015 | 32,000,000 | web | hacked | [29] |
| AT&T | 2008 | 113,000 | telecoms | lost / stolen computer | [30] |
| AT&T | 2010 | 114,000 | telecoms | hacked | [31] |
| Auction.co.kr | 2008 | 18,000,000 | web | hacked | [32] |
| Australian Immigration Department | 2015 | G20 world leaders | government | accidentally published | [33] |
| Automatic Data Processing | 2005 | 125,000 | financial | poor security | [34] |
| AvMed, Inc. | 2009 | 1,220,000 | healthcare | lost / stolen computer | [35] |
| Bailey’s Inc. | 2015 | 250,000 | retail | hacked | [36] |
| Barnes & Noble | 2012 | 63 stores | retail | hacked | [37][38] |
| Bedford/St. Martin’s | 2012-2014 | unknown | retail | unknown | [39] |
| Betfair | 2010 | 2,300,000 | web | hacked | [30] |
| Bethesda Game Studios | 2011 | 200,000 | gaming | hacked | [40] |
| Blizzard Entertainment | 2012 | 14,000,000 | gaming | hacked | [41][42] |
| BlueCross BlueShield of Tennessee | 2009 | 1,023,209 | healthcare | lost / stolen media | [43] |
| The Bank of New York Mellon | 2008 | 12,500,000 | financial | lost / stolen media | [44] |
| British Airways | 2015 | tens of thousands | retail | hacked | [45] |
| California Department of Child Support Services | 2012 | 800,000 | government | lost / stolen media | [30][46] |
| CardSystems Solutions Inc.
(MasterCard, Visa, Discover Financial Services and American Express) |
2005 | 40,000,000 | financial | hacked | [47][48] |
| CareFirst BlueCross Blue Shield – Maryland | 2015 | 1,100,000 | healthcare | hacked | [49] |
| Central Coast Credit Union | 2016 | 60,000 | financial | hacked | [50] |
| Central Hudson Gas & Electric | 2013 | 110,000 | energy | hacked | [51] |
| CheckFree Corporation | 2009 | 5,000,000 | financial | hacked | [52] |
| China Software Developer Network | 2011 | 6,000,000 | web | hacked | [53] |
| Chinese gaming websites (three: Duowan, 7K7K, 178.com) | 2011 | 10,000,000 | web | hacked | [54] |
| Citigroup | 2005 | 3,900,000 | financial | lost / stolen media | [55] |
| Citigroup | 2011 | 360,083 | financial | hacked | [56] |
| Citigroup | 2013 | 150,000 | financial | poor security | [57] |
| City and Hackney Teaching Primary Care Trust | 2007 | 160,000 | government | lost / stolen media | [58] |
| Colorado government | 2010 | 105,470 | healthcare | lost / stolen computer | [59] |
| Community Health Systems | 2014 | 4,500,000 | healthcare | hacked | [60] |
| Commission on Elections | 2016 | 55,000,000 | government | hacked | |
| Compass Bank | 2007 | 1,000,000 | financial | inside job | [30][61] |
| Countrywide Financial Corp | 2006 | 2,600,000 | financial | inside job | [30] |
| Countrywide Financial Corp | 2011 | 2,500,000 | financial | inside job | [62] |
| Cox Communications | 2016 | 40,000 | telecoms | hacked | [63] |
| Crescent Health Inc., Walgreens | 2013 | 100,000 | healthcare | lost / stolen computer | [51][64] |
| CVS | 2015 | millions | retail | hacked | [65] |
| Dai Nippon Printing | 2007 | 8,637,405 | retail | inside job | [66] |
| Data Processors International
(MasterCard, Visa, Discover Financial Services and American Express) |
2008 | 8,000,000 | financial | hacked | [67] |
| Defense Integrated Data Center (South Korea) | 2017 | 235 GB | military | hacked | [68] |
| Democratic National Committee | 2016 | 19,252 | political | [69] | |
| Department of Homeland Security | 2016 | 30,000 | government | poor security | [70][71] |
| Domino’s Pizza (France) | 2014 | 600,000 | web | hacked | [72] |
| Driving Standards Agency | 2007 | 3,000,000 | government | lost / stolen media | [73] |
| Dropbox | 2012 | unknown | web | hacked | [74] |
| Drupal | 2013 | 1,000,000 | web | hacked | [75] |
| Dun & Bradstreet | 2013 | 1,000,000 | tech | hacked | [76][77] |
| eBay | 2014 | 145,000,000 | web | hacked | [78] |
| Educational Credit Management Corporation | 2010 | 3,300,000 | financial | lost / stolen media | [79] |
| Eisenhower Medical Center | 2011 | 514,330 | healthcare | lost / stolen computer | [80] |
| Embassy Cables | 2010 | 251,000 | government | inside job | [81] |
| Emergency Healthcare Physicians, Ltd. | 2010 | 180,111 | healthcare | lost / stolen media | [80][82] |
| Emory Healthcare | 2012 | 315,000 | healthcare | poor security | [80] |
| Erie County Medical Center | 2017 | unknown | healthcare | poor security | [83] |
| European Central Bank | 2014 | unknown | financial | hacked | [84][85] |
| Evernote | 2013 | 50,000,000 | web | hacked | [86][87] |
| Excellus BlueCross BlueShield | 2015 | 10,000,000 | healthcare | hacked | [88] |
| Experian – T-Mobile US | 2015 | 15,000,000 | telecoms | hacked | [89][90] |
| EyeWire | 2016 | unknown | tech | lost / stolen computer | [91] |
| 2013 | 6,000,000 | web | accidentally published | [92] | |
| Federal Reserve Bank of Cleveland | 2010 | 400,000 | financial | hacked | [30] |
| Fidelity National Information Services | 2007 | 8,500,000 | financial | inside job | [93] |
| Florida Department of Juvenile Justice | 2013 | 100,000 | government | lost / stolen computer | [51] |
| Friend Finder Networks | 2016 | 412,214,295 | web | poor security / hacked | [94][95] |
| Formspring | 2012 | 420,000 | web | accidentally published | [96] |
| Gamigo | 2012 | 8,000,000 | web | hacked | [97] |
| Gap Inc. | 2007 | 800,000 | retail | lost / stolen computer | [98] |
| Gawker | 2010 | 1,500,000 | web | hacked | [99][100] |
| Global Payments | 2012 | 7,000,000 | financial | hacked | [101] |
| Gmail | 2014 | 5,000,000 | web | hacked | [102] |
| Greek government | 2012 | 9,000,000 | government | hacked | [103] |
| Grozio Chirurgija | 2017 | 25,000 | healthcare | hacked | [104][105][106] |
| GS Caltex | 2008 | 11,100,000 | energy | inside job | [107][108] |
| Gyft | 2016 | unknown | web | hacked | [109][110] |
| Hannaford Brothers Supermarket Chain | 2007 | 4,200,000 | retail | hacked | [111] |
| Health Net | 2009 | 500,000 | healthcare | lost / stolen media | [112] |
| Health Net — IBM | 2011 | 1,900,000 | healthcare | lost / stolen media | [113] |
| Heartland | 2009 | 130,000,000 | financial | hacked | [114][115] |
| Hewlett Packard | 2006 | 200,000 | tech, retail | lost / stolen media | [116] |
| Hilton Hotels | 2015 | unknown | hotel | hacked | [117] |
| Home Depot | 2014 | 56,000,000 | retail | hacked | [118] |
| Honda Canada | 2011 | 283,000 | retail | poor security | [119] |
| Hyatt Hotels | 2015 | 250 locations | hotel | hacked | [120][121] |
| Internal Revenue Service | 2015 | 720,000 | financial | hacked | [122][123] |
| Inuvik hospital | 2016 | 6,700 | healthcare | inside job | [124] |
| Iranian banks (three: Saderat, Eghtesad Novin, and Saman) | 2012 | 3,000,000 | financial | hacked | [125] |
| Jefferson County, West Virginia | 2008 | 1,600,000 | government | accidentally published | [30][126] |
| JP Morgan Chase | 2010 | 2,600,000 | financial | lost / stolen media | [127] |
| JP Morgan Chase | 2014 | 76,000,000 | financial | hacked | [128] |
| KDDI | 2006 | 4,000,000 | telecoms | hacked | [129] |
| Kirkwood Community College | 2013 | 125,000 | academic | hacked | [51][130] |
| KM.RU | 2016 | 1,500,000 | web | hacked | [131] |
| Korea Credit Bureau | 2014 | 20,000,000 | financial | inside job | [132] |
| Kroll Background America | 2013 | 1,000,000 | tech | hacked | [76][77] |
| KT Corporation | 2012 | 8,700,000 | telecoms | hacked | [133][134] |
| LexisNexis | 2014 | 1,000,000 | tech | hacked | [76][77] |
| Landry’s, Inc. | 2015 | 500 locations | restaurant | hacked | [135][136] |
| Lincoln Medical & Mental Health Center | 2010 | 130,495 | healthcare | lost / stolen media | [80][137] |
| LinkedIn, eHarmony, Last.fm | 2012 | 8,000,000 | web | accidentally published | [138][139] |
| Living Social | 2013 | 50,000,000 | web | hacked | [140][141] |
| MacRumors.com | 2014 | 860,000 | web | hacked | [142] |
| Mandarin Oriental Hotels | 2014 | 10 locations | hotel | hacked | [143][144] |
| Massachusetts Government | 2011 | 210,000 | government | poor security | [30] |
| Massive American business hack
including 7-Eleven and Nasdaq |
2012 | 160,000,000 | financial | hacked | [145] |
| Medicaid | 2012 | 780,000 | government, healthcare | hacked | [30] |
| Medical Informatics Engineering | 2015 | 3,900,000 | healthcare | hacked | [146] |
| Memorial Healthcare System | 2011 | 102,153 | healthcare | lost / stolen media | [80] |
| Michaels | 2014 | 3,000,000 | retail | hacked | [147] |
| Militarysingles.com | 2012 | 163,792 | web, military | accidentally published | [148] |
| Ministry of Education (Chile) | 2008 | 6,000,000 | government | accidentally published | [149][150] |
| Monster.com | 2007 | 1,600,000 | web | hacked | [151] |
| Morgan Stanley Smith Barney | 2011 | 34,000 | financial | lost / stolen media | [30] |
| Mozilla | 2014 | 76,000 | web | poor security | [152] |
| NASDAQ | 2014 | unknown | financial | hacked | [153] |
| Natural Grocers | 2015 | 93 stores | retail | hacked | [154] |
| Neiman Marcus | 2014 | 1,100,000 | retail | hacked | [155][156] |
| Nemours Foundation | 2011 | 1,055,489 | healthcare | lost / stolen media | [80][157] |
| Network Solutions | 2009 | 573,000 | tech | hacked | [158][159] |
| New York City Health & Hospitals Corp. | 2010 | 1,700,000 | healthcare | lost / stolen media | [80] |
| New York State Electric & Gas | 2012 | 1,800,000 | energy | inside job | [30] |
| New York Taxis | 2014 | 52,000 | transport | poor security | [160] |
| Nexon Korea Corp | 2011 | 13,200,000 | web | hacked | [161] |
| NHS | 2011 | 8,300,000 | healthcare | lost / stolen media | [162] |
| Nintendo | 2013 | 240,000 | gaming | hacked | [163] |
| Nival Networks | 2016 | 1,500,000 | gaming | hacked | [131] |
| Norwegian Tax Administration | 2008 | 3,950,000 | government | accidentally published | [164] |
| Ofcom | 2016 | unknown | telecom | inside job | [165] |
| Office of Personnel Management | 2015 | 21,500,000 | government | hacked | [166][167] |
| Office of the Texas Attorney General | 2012 | 6,500,000 | government | accidentally published | [168] |
| Ohio State University | 2010 | 760,000 | academic | hacked | [30] |
| Oregon Department of Transportation | 2011 | unknown | government | poor security | [30] |
| OVH | 2013 | undisclosed | web | hacked | [169] |
| Premera | 2015 | 11,000,000 | healthcare | hacked | [170] |
| Puerto Rico Department of Health | 2010 | 515,000 | healthcare | hacked | [80] |
| Rambler.ru | 2012 | 98,167,935 | web | hacked | [171][172] |
| RBS Worldpay | 2008 | 1,500,000 | financial | hacked | [173] |
| Restaurant Depot | 2011 | 200,000 | retail | hacked | [30] |
| RockYou! | 2009 | 32,000,000 | web, gaming | hacked | [174] |
| Rosen Hotels | 2016 | unknown | hotel | hacked | [175] |
| San Francisco Public Utilities Commission | 2011 | 180,000 | government | hacked | [176] |
| Scottrade | 2015 | 4,600,000 | financial | hacked | [177] |
| Scribd | 2013 | 500,000 | web | hacked | [178][179] |
| Seacoast Radiology, PA | 2010 | 231,400 | healthcare | hacked | [80][180] |
| Sega | 2011 | 1,290,755 | gaming | hacked | [181] |
| Service Personnel and Veterans Agency (UK) | 2008 | 50,500 | government | lost / stolen media | [182] |
| Slack | 2015 | 500,000 | tech | poor security | [183] |
| SnapChat | 2013 | 4,700,000 | web, tech | hacked | [184] |
| Sony Online Entertainment | 2011 | 24,600,000 | gaming | hacked | [185][186] |
| Sony Pictures | 2011 | 1,000,000 | web | hacked | [187] |
| Sony Pictures | 2014 | 100 terabytes | media | hacked | [188] |
| Sony PlayStation Network | 2011 | 77,000,000 | gaming | hacked | [189] |
| South Africa police | 2013 | 16,000 | government | hacked | [190] |
| South Carolina Government | 2012 | 6,400,000 | healthcare | inside job | [80][191] |
| South Shore Hospital, Massachusetts | 2010 | 800,000 | healthcare | lost / stolen media | [30] |
| Southern California Medical-Legal Consultants | 2011 | 300,000 | healthcare | hacked | [30] |
| Spartanburg Regional Healthcare System | 2011 | 400,000 | healthcare | lost / stolen computer | [80][192] |
| Stanford University | 2008 | 72,000 | academic | lost / stolen computer | [30][193] |
| Starbucks | 2008 | 97,000 | retail | lost / stolen computer | [30] |
| Starwood Hotels
including Westin Hotels and Sheraton Hotels |
2015 | 54 locations | hotel | hacked | [194][195] |
| State of Texas | 2011 | 3,500,000 | government | accidentally published | [196] |
| Steam | 2011 | 35,000,000 | web | hacked | [197] |
| Stratfor | 2011 | 935,000 | military | accidentally published | [198] |
| Supervalu | 2014 | 200 stores | retail | hacked | [199] |
| Sutter Medical Center | 2011 | 4,243,434 | healthcare | lost / stolen computer | [80][200] |
| Syrian government (Syria Files) | 2012 | 2,434,899 | government | hacked | [201][202] |
| Taobao | 2016 | 20,000,000 | retail | hacked | [203] |
| Taringa! | 2017 | 28,722,877 | web | hacked | [204] |
| Target Corporation | 2014 | 70,000,000 | retail | hacked | [205][206] |
| TaxSlayer.com | 2016 | unknown | web | hacked | [207] |
| TD Ameritrade | 2007 | 6,300,000 | financial | hacked | [208] |
| TD Bank | 2012 | 260,000 | financial | hacked | [209][210] |
| TerraCom & YourTel | 2013 | 170,000 | telecoms | accidentally published | [211][212] |
| Texas Lottery | 2007 | 89,000 | government | inside job | [30] |
| Tianya Club | 2011 | 28,000,000 | web | hacked | [213] |
| TK / TJ Maxx | 2007 | 94,000,000 | retail | hacked | [214][215] |
| T-Mobile, Deutsche Telecom | 2006 | 17,000,000 | telecoms | lost / stolen media | [216] |
| Tricare | 2011 | 4,901,432 | military, healthcare | lost / stolen computer | [30] |
| Triple-S Salud, Inc. | 2010 | 398,000 | healthcare | lost / stolen media | [80] |
| Trump Hotels | 2014 | 8 locations | hotel | hacked | [217][218] |
| Tumblr | 2013 | 65,469,298 | web | hacked | [219] |
| Twitch.tv | 2015 | unknown | tech | hacked | [220] |
| 2013 | 250,000 | web | hacked | [221] | |
| Uber | 2014 | 50,000 | tech | poor security | [222] |
| Ubisoft | 2013 | unknown | gaming | hacked | [223] |
| Ubuntu | 2013 | 2,000,000 | tech | hacked | [224] |
| UK Home Office | 2008 | 84,000 | government | lost / stolen media | [225] |
| UK Ministry of Defence | 2008 | 1,700,000 | government | lost / stolen media | [226] |
| UK Revenue & Customs | 2007 | 25,000,000 | government | lost / stolen media | [227] |
| University of California, Berkeley | 2009 | 160,000 | academic | hacked | [228] |
| University of California, Berkeley | 2016 | 80,000 | academic | hacked | [229] |
| University of Maryland, College Park | 2014 | 300,000 | academic | hacked | [230] |
| UCLA Medical Center, Santa Monica | 2015 | 4,500,000 | healthcare | hacked | [231] |
| University of Central Florida | 2016 | 63,000 | academic | hacked | [232] |
| University of Miami | 2008 | 2,100,000 | academic | lost / stolen computer | [30] |
| University of Utah Hospital & Clinics | 2008 | 2,200,000 | academic | lost / stolen media | [30] |
| University of Wisconsin–Milwaukee | 2011 | 73,000 | academic | hacked | [30] |
| UPS | 2014 | 51 locations | retail | hacked | [233] |
| U.S. Army | 2011 | 50,000 | military | accidentally published | [30] |
| U.S. Army
(classified Iraq War documents) |
2010 | 392,000 | government | inside job | [234] |
| U.S. Department of Defense | 2009 | 72,000 | military | lost / stolen media | [30] |
| U.S. Department of Veteran Affairs | 2006 | 26,500,000 | government, military | lost / stolen computer | [235] |
| U.S. law enforcement (70 different agencies) | 2011 | 123,461 | government | accidentally published | [236] |
| National Archives and Records Administration (U.S. military veterans’ records) | 2009 | 76,000,000 | military | lost / stolen media | [237] |
| U.S. government (United States diplomatic cables leak) | 2010 | 260,000 | military | inside job | [238] |
| National Guard of the United States | 2009 | 131,000 | military | lost / stolen computer | [30] |
| Verizon Communications | 2016 | 1,500,000 | telecoms | hacked | [239] |
| Virginia Department of Health | 2009 | 8,257,378 | government, healthcare | hacked | [30] |
| Virginia Prescription Monitoring Program | 2009 | 531,400 | healthcare | hacked | [30] |
| Vodafone | 2013 | 2,000,000 | telecoms | inside job | [240] |
| VTech | 2015 | 5,000,000 | retail | hacked | [241] |
| Walmart | 2015 | millions | retail | hacked | [65] |
| Washington Post | 2011 | 1,270,000 | media | hacked | [242] |
| Washington State court system | 2013 | 160,000 | government | hacked | [243][244] |
| Weebly | 2016 | 43,430,316 | web | hacked | [245][246][247] |
| Wendy’s | 2015 | unknown | restaurant | hacked | [248][249] |
| Writerspace.com | 2011 | 62,000 | web | hacked | [250] |
| Xat.com | 2015 | 6,054,459 | web | social engineering | [251] |
| Yahoo | 2013 | 3,000,000,000 | web | hacked | [252][253] |
| Yahoo | 2014 | 500,000,000 | web | hacked | [254][255][256][257][258] |
| Yahoo Japan | 2013 | 22,000,000 | tech, web | hacked | [259] |
| Yahoo! Voices | 2012 | 450,000 | web | hacked | [260][261] |
| Yale University | 2010 | 43,000 | academic | accidentally published | [30] |
| Zappos | 2012 | 24,000,000 | web | hacked | [262] |
| Bank of America | 2005 | 1,200,000 | financial | lost / stolen media | [263] |
| DSW Inc. | 2005 | 1,400,000 | retail | hacked | [264] |
Content retrieved from: https://en.wikipedia.org/wiki/List_of_data_breaches.