Breach Intelligence

6,874

Total breached databases

In February 2023, the University of Maryland, Baltimore County (UMBC) allegedly experienced a data breach from February 10 to February 12. Reports suggest that insufficient security of their Google Directory led to the exposure of personal information. Approximately 27,000 records were involved in the breach, affecting around 7,200 individuals. The compromised data included full names and university email addresses.
  • Date: Feb 11, 2023
  • Domain: umbc.edu
  • Country: United States
  • Category: Education
  • Data: Email Addresses Names
  • Records: 27,205
  • Lines: 27,264
  • Size: 948.15 KB
  • Passwords: No
In September 2023, Conduent, an American business services provider, allegedly experienced a data breach resulting in the exposure of confidential information. Reports suggest that the data was posted by an unknown user on a Telegram group. Approximately 96,000 records were affected, which included email addresses, names, phone numbers, geographic locations, and site activity. No passwords were compromised.
  • Data: Email Addresses Names Phone Numbers Geographic Locations Site Activity
  • Records: 95,590
  • Lines: 95,781
  • Size: 33.27 MB
  • Passwords: No
In January 2023, a database allegedly belonging to Bank of America was compromised and subsequently posted on a hacking forum by a user known as "IntelBroker" on March 2, 2023. Reports suggest that the breach affected approximately 4 million users. The compromised data includes names, credit card information, and bank balances.
  • Data: Names Credit Card Information Balances
  • Records: 4,040,000
  • Lines: 4,050,309
  • Size: 729.79 MB
  • Passwords: No
In 2023, Moon Valley Nurseries, a U.S.-based company specializing in the cultivation and retail of mature trees, plants, and shrubs, allegedly experienced a data breach. Reports suggest that approximately 31,000 records may have been exposed. The compromised data is said to include email addresses, names, phone numbers, geographic locations, and site activity.
  • Data: Email Addresses Names Phone Numbers Geographic Locations Site Activity
  • Records: 31,004
  • Lines: 31,794
  • Size: 7.05 MB
  • Passwords: No
On January 7, 2026, the American bakery-café restaurant chain Panera Bread (panerabread.com) suffered a data breach caused by the ShinyHunters group, resulting in the compromise of around 14 million records. When Panera Bread failed to meet ransom demands within the given deadline, the group released the data on January 27, 2026. Notably, Panera Bread has been breached in the past and faced a class-action lawsuit over a March 2024 data breach that impacted around 147,321 current and former employees. The company agreed to a $2.5 million settlement to resolve the claims in June 2024.
  • Data: Birthdates Company Information Email Addresses Job Information Names Phone Numbers Physical Locations
  • Records: 9,110,567
  • Lines: 9,121,353
  • Size: 4.65 GB
  • Passwords: No
In November 2025, Under Armour allegedly experienced a data breach. Under Armour is an American company involved in the design, manufacture, and distribution of sports and casual apparel, footwear, and accessories. Reports suggest that approximately 115,362,000 records were compromised, including email addresses, names, geographic locations, genders, birthdates, and site activity. However, no passwords were reported as compromised in this incident.
  • Data: Email Addresses Names Geographic Locations Genders Site Activity Birthdates
  • Records: 115,362,319
  • Lines: 115,362,364
  • Size: 11.73 GB
  • Passwords: No
In April 2011, the X Factor Contestants on fox.com allegedly experienced a data breach. Fox.com is the official website of Fox Corporation, hosting a wide range of entertainment content. It has been reported that approximately 74,000 records were compromised, including email addresses, names, phone numbers, geographic locations, genders, birthdates, and site activity. The attack did not result in the exposure of passwords.
  • Data: Email Addresses Names Phone Numbers Geographic Locations Genders Site Activity Birthdates
  • Records: 73,727
  • Lines: 73,755
  • Size: 23.67 MB
  • Passwords: No

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.