Independent public-records tracker. Not a government website.Facts from official state, HHS and SEC filings
BreachRecord

Data breaches that exposed passwords (with an email address or username)

Data breaches whose official filings or notice letters list passwords (with an email address or username) among the information involved: 14 breaches, newest first. Facts come from official filings with US state attorneys general, the U.S. Department of Health and Human Services (HHS) and the SEC; each breach page links its sources.

Updated Oct 21, 2026 · Showing 1–14 of 14

Organization First filed People affected Information exposed Filed with
Cornerstone Staffing Solutions, Inc.Cornerstone Staffing Solutions, Inc. breach history 366,122
  • Social Security number
  • Medical information
  • Driver's license
  • +9 more
 Washington AG, California AG, Texas AG
Catalyst Brands LLCCatalyst Brands LLC breach history 187,341
  • Social Security number
  • Driver's license
  • Passport number
  • +8 more
 Washington AG, California AG, Texas AG
Pan American Group LLCPan American Group LLC breach history At least 12,309
  • Social Security number
  • Medical information
  • Driver's license
  • +10 more
 Washington AG, California AG
ASOS US Sales LLCASOS US Sales LLC breach history 138,828
  • Financial account number
  • Payment card
  • Date of birth
  • +6 more
 Washington AG, Texas AG, California AG
Apple American Group LLC and Apple American Group II, LLCApple American Group LLC and Apple American Group II, LLC breach history At least 20,653
  • Social Security number
  • Medical information
  • Driver's license
  • +9 more
 Washington AG, California AG
USA DeBusk LLCUSA DeBusk LLC breach history 18,067
  • Social Security number
  • Medical information
  • Driver's license
  • +12 more
 California AG, Texas AG
Alta Orthopaedics Medical Group, Inc.Alta Orthopaedics Medical Group, Inc. breach history 24,496
  • Social Security number
  • Medical information
  • Driver's license
  • +12 more
 HHS, California AG
Monmouth UniversityMonmouth University breach history 399,600
  • Social Security number
  • Medical information
  • Driver's license
  • +9 more
 California AG, Texas AG
Plaza Home Mortgage, Inc.Plaza Home Mortgage, Inc. breach history 137,976
  • Social Security number
  • Driver's license
  • Date of birth
  • +4 more
 Washington AG, California AG, Texas AG
OneDigital Investment Advisors LLCOneDigital Investment Advisors LLC breach history 28,414
  • Social Security number
  • Financial account number
  • Date of birth
  • +2 more
 Washington AG, California AG, Texas AG
Mercer Advisors Inc.Mercer Advisors Inc. breach history 143,104
  • Social Security number
  • Medical information
  • Driver's license
  • +9 more
 Washington AG, California AG, Texas AG
Navia Benefit Solutions, Inc.Navia Benefit Solutions, Inc. breach history 2,697,540
  • Social Security number
  • Medical information
  • Date of birth
  • +3 more
 Washington AG, HHS, California AG, Texas AG
Comcast Cable Communications LLCComcast Cable Communications LLC breach history At least 3,100,608
  • Social Security number
  • Date of birth
  • Username and password
  • +1 more
 Washington AG, California AG
Yahoo Inc.Yahoo Inc. breach history At least 2,448,000
  • Date of birth
  • Username and password
  • Name
  • +3 more
 Maine AG, California AG

People affected is the official total from a filing, or “At least” the sum of state filings where no total was filed. Spotted an error? Report a correction.