Largest data breaches of 2025
The 44 data breaches first reported in 2025 with the most people affected, using official totals from the filings. Where no official total was filed, the number is the sum of state filings and is labelled "At least". Facts come from official filings with US state attorneys general, the U.S. Department of Health and Human Services (HHS) and the SEC; each breach page links its sources.
| # | Organization | First filed | People affected | Information exposed | Filed with |
|---|---|---|---|---|---|
| 1 | Conduent Business Services, LLCConduent Business Services, LLC breach history | 62,486,662Official total |
|
HHS, California AG, Washington AG, Texas AG | |
| 2 | Aflac IncorporatedAflac Incorporated breach history | 22,653,844Official total |
|
California AG, Texas AG | |
| 3 | Aflac Incorporated (“Aflac”)Aflac Incorporated breach history | 13,924,906Official total |
|
HHS | |
| 4 | Prosper Marketplace, IncProsper Marketplace, Inc breach history | 13,076,476Official total |
|
Washington AG, California AG, Texas AG | |
| 5 | Episource, LLCEpisource, LLC breach history | 6,725,572Official total |
|
Washington AG, HHS, California AG, Texas AG | |
| 6 | 700Credit, LLC700Credit, LLC breach history | 5,836,521Official total |
|
Washington AG, California AG, Texas AG | |
| 7 | Blue Shield of CaliforniaBlue Shield of California breach history | 4,700,000Official total |
|
HHS, California AG | |
| 8 | University of Phoenix, Inc.University of Phoenix, Inc. breach history | 3,489,274Official total |
|
Washington AG, California AG, Texas AG | |
| 9 | Columbia UniversityColumbia University breach history | 3,067,242Official total |
|
Washington AG, California AG, Texas AG | |
| 10 | DaVita Inc.DaVita Inc. breach history | 2,689,826Official total |
|
Washington AG, HHS | |
| 11 | Veradigm LLCVeradigm LLC breach history | 2,672,036Official total |
|
Washington AG, California AG, Texas AG | |
| 12 | Veradigm LLCVeradigm LLC breach history | 2,672,036Official total |
|
HHS, California AG | |
| 13 | Anne Arundel DermatologyAnne Arundel Dermatology breach history | 1,905,000Official total |
|
HHS, California AG | |
| 14 | Radiology Associates of Richmond, Inc.Radiology Associates of Richmond breach history | 1,419,091Official total |
|
Washington AG, HHS, California AG | |
| 15 | Farmers Insurance Exchange, Farmers Group, Inc. (its attorney-in fact), and their subsidiaries and affiliatesFarmers Insurance Exchange, Farmers Group, Inc. , and their subsidiaries and affiliates breach history | 1,071,300Official total |
|
California AG, Texas AG | |
| 16 | People's Community ClinicPeople's Community Clinic breach history | 700,000Official total |
|
Texas AG, HHS | |
| 17 | Marquis Software SolutionsMarquis Software Solutions breach history | At least 624,062Sum of state filings |
|
Washington AG, Texas AG, California AG | |
| 18 | The University of PennsylvaniaThe University of Pennsylvania breach history | 442,500Official total |
|
Washington AG, California AG, Texas AG | |
| 19 | VITAS Hospice Services, LLCVITAS Hospice Services, LLC breach history | 319,177Official total |
|
California AG, Texas AG, HHS | |
| 20 | CareNexa, LLC, dba Molecular Testing Labs (“MTL”)CareNexa, LLC breach history | 258,874Official total |
|
California AG, Texas AG | |
| 21 | Outcomes One, Inc.Outcomes One, Inc. breach history | 256,031Official total |
|
Washington AG, HHS, California AG, Texas AG | |
| 22 | Sax LLPSax LLP breach history | 228,876Official total |
|
California AG, Texas AG | |
| 23 | Activehours, Inc. d/b/a EarnInActivehours, Inc. breach history | 202,480Official total |
|
Washington AG, Texas AG | |
| 24 | Payactiv, Inc.Payactiv, Inc. breach history | 202,194Official total |
|
Washington AG, California AG, Texas AG | |
| 25 | Modernizing Medicine, Inc.Modernizing Medicine, Inc. breach history | 198,795Official total |
|
HHS | |
| 26 | Delta Dental of VirginiaDelta Dental of Virginia breach history | 145,918Official total |
|
Texas AG, HHS, California AG | |
| 27 | WEL Companies, Inc.WEL Companies, Inc. breach history | 122,960Official total |
|
Washington AG, California AG, Texas AG | |
| 28 | CNHI, LLCCNHI, LLC breach history | 117,049Official total |
|
California AG, Texas AG | |
| 29 | Dartmouth CollegeDartmouth College breach history | 98,990Official total |
|
Washington AG, California AG, Texas AG | |
| 30 | CPAP Medical Supplies and Services Inc.CPAP Medical Supplies and Services Inc. breach history | 90,133Official total |
|
Washington AG, HHS, California AG | |
| 31 | Healthcare Interactive, Inc.Healthcare Interactive, Inc. breach history | 87,565Official total |
|
California AG, Texas AG, Washington AG | |
| 32 | Discord Inc.Discord Inc. breach history | 74,729Official total |
|
California AG, Texas AG | |
| 33 | Anchorage Neighborhood Health CenterAnchorage Neighborhood Health Center breach history | 70,555Official total |
|
HHS, California AG, Texas AG, Washington AG | |
| 34 | Parexel International, LLC (“Parexel”)Parexel International, LLC breach history | 65,587Official total |
|
Texas AG, California AG | |
| 35 | SSL and ACL and their current and former affiliatesSSL and ACL and their current and former affiliates breach history | 57,253Official total |
|
California AG, Texas AG | |
| 36 | Brevard Skin and Cancer CenterBrevard Skin and Cancer Center breach history | 54,570Official total |
|
HHS | |
| 37 | Baker UniversityBaker University breach history | 53,624Official total |
|
California AG, Texas AG | |
| 38 | Rockrose Development L.L.C.Rockrose Development L.L.C. breach history | 47,392Official total |
|
Texas AG, California AG | |
| 39 | Southern Graphics Inc.Southern Graphics Inc. breach history | 31,480Official total |
|
California AG, Texas AG | |
| 40 | Susan B. Allen Memorial HospitalSusan B. Allen Memorial Hospital breach history | 11,866Official total |
|
HHS | |
| 41 | Inotiv, Inc.Inotiv, Inc. breach history | 10,482Official total |
|
California AG, Texas AG | |
| 42 | Albany College of Pharmacy and Health SciencesAlbany College of Pharmacy and Health Sciences breach history | At least 3,245Sum of state filings |
|
Washington AG, California AG | |
| 43 | Eisner Advisory Group LLCEisner Advisory Group LLC breach history | At least 2,121Sum of state filings |
|
Washington AG, California AG | |
| 44 | Finastra Technology, Inc.Finastra Technology, Inc. breach history | At least 679Sum of state filings |
|
Washington AG, California AG |
Other years
People affected is the official total from a filing, or “At least” the sum of state filings where no total was filed. Spotted an error? Report a correction.