Last year many cyber incidents were reported. Here is the lookback of Top 10 Biggest Data Breaches and leaks reported in 2026 which made a huge impact on the organizations.
Here we have listed Top 10 Biggest Data Breaches which costs companies in million dollars and loss in reputation.
Also Read: TOP 10 Cyber Attacks and Critical Vulnerabilities of 2026
Hackers had breached the company’s system and accessed people’s names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers.
They also stole credit card numbers for about 209,000 people and dispute documents with personal identifying information for about 182,000 people.
Yahoo announced that all user accounts were affected in the August 2013 theft. Previously they announced that “more than one billion user accounts” may have been stolen by hackers during the attack that took place in August 2013.
Leaked details still remain secret, besides the range of affected users and that hackers stole names, email addresses, date of birth, phone numbers, hashed passwords, safety questions and answers.
A massive database that contains 123 Million American households sensitive personal information leaked online by California-based data analytics firm.
An unsecured cloud-based data repository was left publicly due to the bad misconfiguration in Amazon Web Services S3 cloud storage and the repository are massive data sets belonging to consumer credit reporting agency Alteryx partner Experian.
An Unsecured Server Hosted on Amazon’s S3 storage service which is holding 137 gigabytes of Customer data has completely left unsecured which Could be affected tons Accenture Cloud Platform Customer Sensitive Data.
Exposed Cloud Data servers belong to
Uber data Breach, Hackers stole 57 million Uber users around the world and 600,000 drivers names including their license numbers.
The breach took place in October 2016 and the leaked data includes names, email addresses and mobile phone numbers that related to Uber accounts.
An unprotected MongoDB database contains a large volume of data which belongs to California state voters information exposed online. It can be accessed by anyone by having the just simple internet connection and the database named as ‘cool_db’.
Also, it was open to view, edit and modifying the entire database by anyone which contains 2 collections of the database.
one collection contains set of voter registration data and other collections contain entire California state voters that are holding 19,264,123 records, all open for public access.
Malaysian’s Biggest Data Breach Exposed around 46.2 Million Mobile phone numbers have been leaked online from Malaysian telecoms and mobile virtual network operators (MVNO).
The information that has got out includes postpaid and prepaid numbers, customer details, addresses, IMEI and IMSI numbers.
This Data Breach occurred due to “Human Error” and Verizon’s Cloud-based file server was operated by Verizon’s Third Party vendor
Pentagon Data Leak, Amazon Web Services S3 cloud storage buckets that contain social media surveillance data configured in the way that users with free AWS account can read and download the contents.
Leaked data consist of billions of public internet posts, news commentary and other writings from individuals from the US and other Countries.
Millions of customer personal data exposed online due to a Misconfiguration with MongoDB that belongs to Ai.Type, the company that well know for developing the personalized virtual keyboard app for Android and iOS.
the company exposed their entire 577GB Mongo-hosted in public, anyone with internet connection can access the database.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…