Security incidents

Incidents at named organisations, each linked to the source that reported it: material incident filings companies made to the SEC, breaches verified by Have I Been Pwned, and claims posted by ransomware groups.

142
Confirmed incidents
113
Unconfirmed claims
255
Last 30 days
136
Organisations tracked
2,705,731,734
Records disclosed

This view includes organisations named on ransomware leak sites. Those are the groups’ claims, not confirmed breaches — the organisations have not confirmed them and no filing or verified record supports them.

ConfirmedData breach2026-08-25

Carhartt: a data breach

In August 2026, clothing retailer Carhartt was the target of a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data allegedly obtained from the company including 12.9M unique email addresses, names, phone numbers and physical addresses. The published corpus also contained millions of synthetic records that did not relate to real individuals and were excluded from the breach.

12,933,413 recordsCarharttHave I Been Pwned
ConfirmedData breach2026-02-22

CarGurus: a data breach

In February 2026, the automotive marketplace CarGurus was the target of a data breach attributed to the threat actor ShinyHunters . Following an attempted extortion, the data was published publicly and contained more than 12M email addresses across multiple files including user account ID mappings, finance pre-qualification application data and dealer account and subscription information. Impacted data also included names, phone numbers, physical and IP addresses, and auto finance application outcomes.

12,461,887 recordsCarGurusHave I Been Pwned
ConfirmedData breach2026-05-13

Canada Life: a data breach

In April 2026, Canada Life was the victim of a "pay or leak" extortion campaign by the ShinyHunters group . The group subsequently published the data which contained over 200k unique email addresses along with names, phone numbers, physical addresses and, in some cases, customer support tickets. In their disclosure notice , Canada Life advised that "it is a small proportion of our customers who may have been impacted". In the wake of the incident, Canada Life also published an alert cautioning customers to be wary of phishing attacks , a pattern often seen after the public release of breached data.

237,810 recordsCanada LifeHave I Been Pwned
ConfirmedData breach2026-02-17

Canada Goose: a data breach

In February 2026, a data breach allegedly containing data relating to Canada Goose customers was published publicly . The data contained 920k records with 582k unique email addresses and included names, phone numbers, IP addresses, physical addresses and partial credit card data, specifically card type and last 4 digits. Canada Goose advised that the data "appears to relate to past customer transactions" and stated that it originated from a breach at a third party in August 2025. The most recent transaction date in the data is July 2025.

581,877 recordsCanada GooseHave I Been Pwned
ConfirmedData breach2026-08-08

Brinks Home: a data breach

In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial credit card data (last 4 digits, card type and expiry). In Brinks' disclosure notice , they acknowledged the incident and risk of disclosure, and advised that they would notify impacted parties "consistent with applicable law".

732,162 recordsBrinks HomeHave I Been Pwned
ConfirmedData breach2026-03-27

BreachForums Version 5: a data breach

In March 2026, a breach of one of the many iterations of the BreachForums hacking forum known as "Version 5" was publicly disclosed . The incident exposed 340k unique email addresses along with usernames and argon2 password hashes.

339,778 recordsBreachForums Version 5Have I Been Pwned
ConfirmedData breach2026-01-10

BreachForums (2025): a data breach

In October 2025, a reincarnation of the hacking forum BreachForums, which had previously been shut down multiple times, was taken offline by a coalition of law enforcement agencies . In the months leading up to the takedown, the site itself suffered a data breach that exposed a total of 672k unique email addresses across all tables, including within forum posts and private messages. The users table alone contained 324k unique email addresses, usernames, and Argon2 password hashes.

672,247 recordsBreachForums (2025)Have I Been Pwned
Claimed by storm · unconfirmedRansomware claim2026-09-09

Our Hospice Of South Central Indiana named on storm's leak site

Healthcare | Columbus, Indiana, United States | Our Hospice provides compassionate end-of-life care and dedicated support to patients and their families in South Central Indiana. Their services include hospice care, personal care, palliative care, bereavement care, and specialized programs for veterans and pediatric patients. The organization is committed to ensuring comfort, dignity, and quality of care tailored to individual needs. With a focus on community and compassion, they serve 22 counties, offering 24/7 support to those in need. 2626 E. 17th Street, Columbus, IN 47201 , 51-200 Employees | Deadline: 2026-08-29T01:34:12.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Schardein Mechanical named on storm's leak site

Construction | Louisville, Kentucky, United States | Schardein Mechanical is a trusted mechanical contractor providing top-of-the-line engineering services to commercial clients in Kentucky and Southern Indiana. Their offerings include design, installation, maintenance, and replacement of HVAC, plumbing, and process piping systems, with 24/7 availability for emergency services. The company caters to a diverse range of industries, including healthcare, education, and manufacturing, ensuring high-quality installations by skilled professionals. With multiple locations in Louisville, Elizabethtown, and Bowling Green, Schardein Mechanical has been delivering innovative solutions since 1984. The company headquarters is located in 1810 Outer Loop, Louisville, KY 40219, United States.. 51-200 Employees | Deadline: 2026-08-31T17:12:57.482Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Phoenix Group of Companies named on storm's leak site

Manufacturing | Philadelphia, Pennsylvania, United States | The Phoenix Group of Companies is a leading single-source provider of print solutions from concept to completion that produces high quality communications to help businesses rise above the competition and overcome everyday challenges. The company headquarters is located in 11631 Caroline Road, Philadelphia, PA 19154, United States. 201-500 Employees | Deadline: 2026-09-04T09:11:43.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Ramsey Bros named on storm's leak site

Retail & E-commerce | Cleve, South Australia, Australia | Ramsey Bros is a family-owned and operated business that serves as an authorized Case IH dealer, providing quality machinery, parts, and services. They offer a wide range of new and used machinery, along with scheduled servicing programs and operator training. Their intended clients include farmers and agricultural businesses looking for reliable equipment and support. With multiple dealership locations, they aim to be a powerful partner in harvesting and agricultural operations. The company headquarters is located in 23 Henderson Avenue, Cleve, SA 5640, Australia.. 51-200 Employees | Deadline: 2026-09-04T09:11:43.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Pinnacle Hospital named on storm's leak site

Healthcare | Crown Point, Indiana, United States | Pinnacle Healthcare / Pinnacle Hospital is a physician-owned, patient-centered healthcare organization operating an 18-bed acute care hospital in Crown Point, Indiana. The company provides a wide range of medical and surgical services through a network of more than 150 physicians and medical specialists. Its services include family medicine, internal medicine, gastroenterology, general surgery, gynecology, orthopedics, pain management, urology, breast care, specialty clinics, and walk-in care. Pinnacle Healthcare focuses on delivering personalized, high-quality care in a smaller hospital environment, emphasizing patient satisfaction, efficient treatment, personal service, and respect for patients and their families. The company headquarters is located in 9301 Connecticut Drive, Crown Point, IN 46307, United States. 201-500 Employees | Deadline: 2026-09-07T17:24:04.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Proveli named on storm's leak site

Retail & E-commerce | Bloomington, Indiana, United States | Proveli is a privately held business founded by two brothers: Reinhardt and Thomas. Proveli prides itself on having an entrepreneurial culture that encourages and rewards innovative thinking, collaboration, and ownership. The company's greatest asset is the company's passionate and dedicated team; it's their drive and passion for developing and executing strategies that have lead to the company being recognized for its accomplishments. Proveli is constantly searching for and evaluating organic and acquisition growth opportunities. If you have an investment opportunity that you feel would be a good fit for Proveli, please contact the company. The company encourage you to read about how we've cultivated a unique and dynamic culture at Proveli - one that helps the company build companies that make a difference. The company headquarters is 1900 S Liberty Drive, Bloomington, IN 47403, United States. 51-200 Employees | Deadline: 2026-09-08T10:35:20.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

AutoDie named on storm's leak site

Manufacturing | Grand Rapids, Michigan, United States | Founded in 1962 and headquartered in Grand Rapids, MI, Autodie LLC is a company that specializes in design and manufacture large-scale dies for metal stamping. The company headquarters is located in 44 Coldbrook Street NW, Grand Rapids, MI 49503, United States. 201-500 Employees | Deadline: 2026-09-10T17:28:41.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Penfold named on storm's leak site

Retail & E-commerce | Burwood, Victoria, Australia | Penfold Motor Group is a family-owned auto dealership in Australia that has been serving car buyers since 1964. Originally starting as a used car yard in Blackburn, the company has grown into one of the country's most successful auto dealers, specializing in high-quality vehicles from brands like Audi, Volkswagen, Suzuki, Hyundai, and Mazda. They offer a range of services including vehicle sales, financing options, and car servicing, catering to a diverse clientele. With a commitment to exceptional customer service and a secure online purchasing experience, Penfold aims to make car buying simple and accessible. | Deadline: 2026-09-11T00:00:00.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

SITES Medical named on storm's leak site

Healthcare | Columbia City, Indiana, United States | SITES Medical is a trusted partner for orthopedic implant companies, offering innovative orthopedic technologies and a rapid product concept-to-launch process. They provide comprehensive R&D services, including regulatory filings, and contract manufacturing capabilities to ensure high-quality products at reduced costs. Their expertise spans various markets, including orthopedic, spine, dental, and more, with a focus on enhancing product offerings through advanced technologies like OsteoSync Ti. SITES Medical collaborates closely with clients to integrate these technologies into their product lines, supporting their success in the competitive medical market. The company headquarters is located in 4707 East Park 30 Drive, Columbia City, IN 46725, United States. 11-50 Employees | Deadline: 2026-09-11T19:59:33.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Southern Metals Company named on storm's leak site

Retail & E-commerce | Charlotte, North Carolina, United States | Southern Metals Company, based in Charlotte, NC, specializes in the recycling of ferrous and non-ferrous metals, including steel, brass, copper, aluminum, and automobile bodies. Established in 1938, the company is committed to responsible recycling, superior customer service, and providing exceptional value for recyclable products. Serving a diverse clientele throughout the Carolinas, Southern Metals has built a reputation for integrity and efficiency over its long history. The company continues to uphold the principles set by its founders while adapting to modern recycling needs. The company headquarters is located in 2200 Donald Ross Road, Charlotte, NC 28208, United States. 51-200 Employees | Deadline: 2026-09-13T12:01:14.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Hinman Straub named on storm's leak site

Construction | Albany, New York, United States | Hinman Straub is a full-service law firm located in Albany, New York, offering a comprehensive range of legal and lobbying services. The firm caters to a diverse clientele, including Fortune 500 companies, associations, and local governments, providing expertise in areas such as Labor and Employment, Corporate Law, Real Estate, and Healthcare. With a team of experienced professionals, they guide clients through complex legal matters at various governmental levels, leveraging strong relationships with key decision-makers. Additionally, their public affairs partner, Corning Place Communications, enhances their clients' communication strategies to effectively convey their messages to the public. The company headquarters is located in 121 State Street, Albany, NY 12207, United States. 51-200 Employees | Deadline: 2026-09-13T13:17:47.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Sharp Motor Group named on storm's leak site

Retail & E-commerce | Tweed Heads, New South Wales, Australia | Sharp Motor Group is a privately owned automotive dealership group based in Tweed Heads, New South Wales, Australia. The company serves customers across Tweed Heads, the Northern Rivers region, and the Gold Coast. Sharp Motor Group sells new, used, and demonstrator vehicles and provides vehicle servicing, spare parts, finance, insurance, and trade-in services. Its dealership represents major automotive brands, including Kia, Suzuki, Mahindra, Chery, Renault, and GMSV. The company focuses on providing a convenient one-stop automotive service and emphasizes customer service, value, choice, and a positive buying and ownership experience. The company headquarters is located in 153 Wharf Street, Tweed Heads, NSW 2485, Australia. 51-200 Employees | Deadline: 2026-09-14T12:58:23.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Integra Castings named on storm's leak site

Manufacturing | Winkler, Manitoba, Canada | Integra Castings is an ISO 9001:2015 certified gray and ductile iron foundry that specializes in melting, molding, and core-making a variety of materials. As a division of The CTD Group, they focus on producing customized solutions for clients while adhering to strict quality assurance guidelines. Their capabilities include high production No-Bake lines for castings weighing up to 4,500 lbs and advanced quality control processes. Integra Castings serves industries requiring high-quality iron castings, including those needing specific material grades for structural and high tensile strength applications. The company headquarters is located in 200 Pacific Street, Winkler, MB R6W 0K2, Canada. 51-200 Employees | Deadline: 2026-09-15T12:31:03.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Petrocare Construction named on storm's leak site

Construction | Saskatoon, Saskatchewan, Canada | Petrocare Construction is a company founded on old fashioned principals - yet implementing cutting edge technology and state-of-the-art building methods, and we are proud of this. We have and continue to make a difference by "Teaming in Partnership" with our clients. Important to us is - what is important to you, namely: accurate job costing, timely progress reports, effective construction management, qualified staff, subcontractors and more. Because our team is in partnership with you, we will always work hard to maintain a solid, long-term relationship with you - that is our way of doing business. We understand the challenges of modern construction. We are pro-active in our response to the complex needs of environmental, technological and time sensitive issues. It is our clear focus to meet and exceed the needs of our clients. We are specialists in commercial, industrial, wholesale and retail petroleum facilities. Whether it be design/build construction, environmental remediation ordecommissioning we will serve your needs all over Western Canada. We are a company of people, equipment and technology that will provide the catalyst to meet and exceed your building construction and site maintenance needs for today and beyond. The company headquarters is located in 1202 Avenue X South, Saskatoon, SK S7M 3H9, Canada. 51-200 Employees | Deadline: 2026-09-15T15:44:55.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Macquarrie named on storm's leak site

Manufacturing | Melbourne, Victoria, Australia | Macquarrie specializes in diesel engine management solutions, telemetry solutions, and VK debarkers for milling operations. With over 70 years of experience, they provide a comprehensive range of products including controllers, displays, and monitoring instrumentation tailored for various industries such as mining, agriculture, and marine. The company prides itself on customer-focused service, offering local technical support, extensive after-sales assistance, and expert software programming. As the exclusive Australian agents for Valon Kone Oy, Macquarrie is recognized for its expertise in debarking solutions for sawmills. The company headquarters is located in Unit 1/600 Lorimer Street, Port Melbourne, VIC 3207, Australia. 11-50 Employees | Deadline: 2026-09-16T20:01:46.809Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Melitron named on storm's leak site

Manufacturing | Guelph, Ontario, Canada | Melitron Corporation is a Canadian manufacturing company headquartered in Guelph, Ontario, specializing in contract manufacturing, precision metal fabrication, and electro-mechanical assembly. Founded in 1995, the company designs and manufactures durable metal enclosures, precision components, frames, racks, cable assemblies, and integrated enclosure systems for global OEMs. Melitron also develops and installs indoor and outdoor digital signage, self-service kiosks, menu boards, and customizable Level 2 EV charging stations. Its customers operate across communications, energy, healthcare, industrial, retail, restaurant, security, entertainment, and transportation markets. The company provides end-to-end services including engineering, prototyping, fabrication, finishing, assembly, supply-chain management, and logistics. The company headquarters is located in 404 Silvercreek Parkway North, Guelph, ON N1H 1E8, Canada. 51-200 Employees | Deadline: 2026-09-17T20:37:58.000Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Tapper Cuddy LLP named on storm's leak site

Other | Winnipeg, Manitoba, Canada | Tapper Cuddy LLP is a full-service law firm based in Manitoba, specializing in civil litigation, family law, and commercial law. With over 40 years of experience, the firm is dedicated to providing personalized legal representation in a clear and understandable manner. They prioritize client relationships, viewing clients as people rather than cases, and aim to serve a diverse range of legal needs across more than 20 specialized practice areas. Tapper Cuddy LLP is committed to reconciliation and collaboration with Indigenous communities, reflecting their respect for the traditional territories they operate on. The company headquarters is located in 1000–330 St. Mary Avenue, Winnipeg, MB R3C 3Z5, Canada. 51-200 Employees | Deadline: 2026-09-18T13:14:56.300Z

Records not disclosedRansomLook
Claimed by storm · unconfirmedRansomware claim2026-09-09

Lowerys named on storm's leak site

Retail & E-commerce | Thunder Bay, Ontario, Canada | Lowerys is a provider of office supplies, printing, and photocopying services, catering to businesses and individuals in Thunder Bay and Fort Frances. They offer a wide range of products including office supplies, janitorial supplies, and managed IT services. With a history of 100 years, Lowerys emphasizes local shopping and provides a price match guarantee. Their services also include wide format printing and bottled water solutions. The company headquarters is located in 540 Central Avenue, Thunder Bay, ON P7B 6B4, Canada. 51-200 Employees | Deadline: 2026-09-19T20:45:32.000Z

Records not disclosedRansomLook
Page 7 of 10 · 228 incidentsPreviousNext

Filings come from SEC EDGAR and are filtered to 8-K submissions that declare Item 1.05, not merely mention it. Breach records come from Have I Been Pwned. Ransomware claims come from RansomLook, used under CC BY 4.0; we store metadata only and never leak links.