Breach Intelligence

6,875

Total breached databases

New Jersey Voter 2017

New Jersey Voter 2017

In 2017, the New Jersey state voter registration database (nj.gov) was allegedly leaked and later redistributed for free on a hacking forum. Reports suggest the records of approximately 5.5 million New Jersey residents were exposed, including full names, physical and previous addresses, dates of birth, genders, phone numbers, and government-issued voter IDs. No passwords were included.
  • Date: 2017
  • Domain: nj.gov
  • Country: United States
  • Category: Government
  • Data: Names Phone Numbers Physical Locations Government IDs Genders Birthdates Personal Information
  • Records: 5,578,302
  • Lines: 5,578,303
  • Size: 1.21 GB
  • Passwords: No
Connecticut 2018 Voter 2018

Connecticut 2018 Voter 2018

In October 2018, a voter database for the state of Connecticut was leaked on an underground forum. The compromised database includes approximately 2.29 million records. Some of the leaked data includes voter IDs, full names, physical addresses, previous addresses, dates of birth, genders, phone numbers, voter status, and voter history.
  • Date: Oct 2018
  • Domain: ct.gov
  • Country: United States
  • Category: Government
  • Data: Names Phone Numbers Physical Locations Government IDs Genders Birthdates Political Affiliation
  • Records: 2,290,209
  • Lines: 2,290,207
  • Size: 1.65 GB
  • Passwords: No
Arkansas 2017 Voter 2017

Arkansas 2017 Voter 2017

In 2017, the Arkansas voter registration database, associated with the domain arkansas.gov, was allegedly leaked and distributed on a hacking forum. Reports suggest the data of approximately 1.7 million individuals was exposed, including full names, dates of birth, genders, residential addresses, phone numbers, voter registration details, and other personal information. The exposed records did not contain passwords.
  • Date: 2017
  • Domain: arkansas.gov
  • Country: United States
  • Category: Government
  • Data: Names Phone Numbers Physical Locations Government IDs Genders Birthdates Personal Information
  • Records: 1,746,066
  • Lines: 1,746,067
  • Size: 584.07 MB
  • Passwords: No
Rhode Island 2017 Voter 2017

Rhode Island 2017 Voter 2017

In 2017, a database containing voter information from Rhode Island was compromised. The breach exposed approximately 770,000 voter records. Among the compromised data were voter IDs, full names, physical addresses, previous addresses, dates of birth, genders, voter statuses, email addresses, and phone numbers.
  • Date: 2017
  • Domain: ri.gov
  • Country: United States
  • Category: Government
  • Data: Names Email Addresses Phone Numbers Physical Locations Government IDs Genders Birthdates Political Affiliation
  • Records: 770,422
  • Lines: 770,424
  • Size: 133.21 MB
  • Passwords: No
Harvard University 2025

Harvard University 2025

In November 2025, Harvard University allegedly suffered a data breach affecting its Alumni Affairs and Development department. Harvard University is a private research university based in Cambridge, Massachusetts. Reports suggest the incident stemmed from a voice-phishing (vishing) attack and exposed data relating to approximately 848,000 individuals. The compromised information allegedly included email addresses, names, phone numbers, birthdates, geographic locations, genders, nationalities, ethnicities, relationship statuses, and company information.
  • Data: Email Addresses Names Phone Numbers Geographic Locations Relationship Statuses Genders Company Information Birthdates Ethnicities Nationalities
  • Records: 1,384,520
  • Lines: 1,384,530
  • Size: 3.23 GB
  • Passwords: No
7-Eleven 2026

7-Eleven 2026

In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters, with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A small number of records also contained additional exposed data fields. The company later advised the breach was limited to "certain 7-Eleven systems used to store franchisee documents", a statement consistent with the exposed data.
  • Data: Email Addresses Names Phone Numbers Geographic Locations IP Addresses Websites Birthdates
  • Records: 1,097,251
  • Lines: 1,124,870
  • Size: 678.13 MB
  • Passwords: No
Baker Distributing 2026

Baker Distributing 2026

In May 2026, the US-based HVAC/R wholesale distributor Baker Distributing Company allegedly suffered a data breach. Reports suggest the ShinyHunters extortion group obtained data from the company's SharePoint and Salesforce infrastructure and later published it publicly. It has been reported that approximately 101,000 individuals were affected, with the exposed data including email addresses, names, phone numbers, physical addresses, fax numbers, company information and support tickets relating to the company's HVAC contractor customer base.
  • Data: Email Addresses Names Phone Numbers Geographic Locations Genders Websites Company Information Fax Numbers
  • Records: 261,199
  • Lines: 465,707
  • Size: 134.49 MB
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.