The attacker published a queryable online registry of stolen UNI IDs and told Bloomberg News they were investigating whether Columbia continued to practice race-based affirmative action in admissions following the Supreme Court’s 2023 ban. The vulnerability allows unauthenticated remote attackers to take control of the Oracle Concurrent Processing component via HTTP, with no credentials required and no user interaction needed. PowerSchool’s breach response cost the company more than $14 million, including the cost of identity theft monitoring for victims.
DoorDash’s operational model requires sharing customer data, names, addresses, phone numbers, and payment metadata, with a layered ecosystem of logistics vendors, marketing platforms, customer service providers, and payment processors. In 2019, DoorDash disclosed a breach affecting 4.9 million customers, delivery workers, and merchants, one of the earliest large-scale breaches in the gig economy. DoorDash confirmed the breach in mid-November after internal monitoring detected anomalous data access patterns originating from the vendor’s environment.
Once the exact way that the data was compromised is identified, there is typically https://northfloridahouse.com/powerful-ai-algorithms-for-market-analysis-and-automation-of-trading-processes.html only one or two technical vulnerabilities that need to be addressed in order to contain the breach and prevent it from reoccurring. To stop exfiltration of data, common strategies include shutting down affected servers, taking them offline, patching the vulnerability, and rebuilding. After a data breach becomes known to the company, the next steps typically include confirming it occurred, notifying the response team, and attempting to contain the damage.
Threat actors
Consulting a data breach attorney costs nothing upfront in most class action structures and allows you to evaluate whether participation is appropriate for your situation. These are signatures of synthetic identity fraud and tax fraud, respectively, both of which can follow SSN exposure by months or years. Class-action lawsuits are already being filed against TransUnion, seeking accountability and compensation for individuals whose private information was exposed.
New York University disclosed that an attacker had defaced its website and extracted the personal data of over 3 million applicants, including names, test scores, intended majors, family backgrounds, and financial aid details, dating back to 1989. Oracle denied the breach, but multiple security researchers and some customers confirmed the authenticity of sample data, and the incident has since been classified as one of the year’s most impactful supply chain events. A threat actor identified as “rose87168” claimed to have exfiltrated approximately six million records from Oracle’s Single Sign-On and LDAP systems, including Java KeyStore files, encrypted passwords, and key files, potentially affecting more than 140,000 Oracle Cloud tenants. Alongside that, PowerSchool, an educational technology company serving over 60 million students, disclosed a breach affecting schools across the US and Canada.
The breach caused $3.09 billion in losses for UnitedHealth and disrupted claims processing across the healthcare system for months. Each monthly section leads with the highest-impact incidents of that period, identified by record count, sector sensitivity, or downstream organizational reach. What follows is a month-by-month tracker of the year’s most significant breaches, organized so you can scan by timeframe, identify the organizations involved, understand which data was exposed, and assess scale.
Change Healthcare / UnitedHealth (January 2025) technically belongs in the top ten by record count, at 190 million. F5 Networks (October 2025) sits at the top of this list by potential downstream consequence. Still, they caused disproportionate damage due to the sensitivity of the data, the criticality of the affected systems, or the downstream organizational impact.
A significant portion of those affected by a data breach become victims of identity theft. Nevertheless, the statistics show a continued increase in the number and severity of data breaches that continues as of 2022update. Join this webinar to explore practical strategies for operating and governing AI agents responsibly at scale, with expert insights on observability, risk management and accountable AI operations. Organizations that extensively integrate artificial intelligence (AI) and automation into security operations resolve breaches 80 days faster than those that don’t, according to the Cost of a Data Breach 2025 report. Employees can expose data by storing it in unsecured locations, misplacing devices with sensitive information saved on their hard drives or mistakenly granting network users excessive access privileges.
- A threat actor had been selling 400GB of stolen Finastra data on dark web forums since October 2024, including sensitive financial transaction records, client credentials, and operational banking data.
- These are signatures of synthetic identity fraud and tax fraud, respectively, both of which can follow SSN exposure by months or years.
- The scale claim at the center of the Salesforce breach story, that ShinyHunters stole approximately one billion records across the campaign, sits in contested territory.
- Credit bureau files contain the exact combination of identifiers, SSN, DOB, full legal name, current and prior addresses, that enable synthetic identity fraud at scale, meaning the downstream exposure risk extends years beyond the breach date.
Most major 2025 breach respondents- TransUnion, Conduent, Coinbase, SimonMed, Yale New Haven Health- offered between 12 and 24 months of free credit monitoring and identity theft insurance as part of their notification package. The median time from vulnerability disclosure to exploitation by threat actors continues to compress; the 72-hour window documented for cloud environments reflects a broader acceleration enabled by automated vulnerability scanning tools that attackers deploy the moment a new CVE is published. Phishing remained the third most common initial access vector in 2025, accounting for 16% of confirmed data breaches analyzed in Verizon’s DBIR, behind credential abuse at 22% and vulnerability exploitation at 20%. The global average cost of a data breach fell 9% from $4.88 million in 2024 to $4.44 million in 2025, according to IBM’s Cost of a Data Breach Report, the first decrease in five years and the result of faster breach detection and containment driven primarily by AI and automation adoption in security operations. Coinbase CEO Brian Armstrong publicly confirmed the arrest, thanked the Hyderabad Police, and indicated that further arrests could follow as investigations continued across multiple jurisdictions. The breach was linked to $355 million in downstream social engineering losses, attackers using the stolen personal and financial data to impersonate Coinbase support staff and manipulate victims into transferring funds to attacker-controlled wallets.
The DoorDash data breach of November 2025 was a third-party vendor incident that exposed customer names, email addresses, phone numbers, and partial payment card details, along with a subset of delivery driver account information, through a compromised service provider with access to DoorDash’s customer service infrastructure. The viral spread of the May 28 story, generating millions https://newsgary.com/quantum-ai-the-convenient-platform-for-trading-in-the-financial-market.html of views before Ring issued any public statement, demonstrated how consumer security awareness, while broadly positive, can accelerate misinformation when companies fail to communicate proactively during technical incidents. Independent experts agreed that a display error was the likely scenario rather than the hack suggested by some users. The Ring security incident of May 28, 2025, became one of the year’s most viral consumer security stories, and one of its most instructive examples of how a technical glitch can be amplified into a mass breach narrative before the facts are established.
Prevention
IBM’s data confirms that organizations with IR plans tested through tabletop exercises or red-team simulations contained breaches an average of 54 days earlier than those without. Still, organizations without unified XDR platforms were viewing each signal in isolation rather than as components of a single attack pattern. The Salesforce campaign’s success in 2025 was partly attributable to https://214rentals.com/the-pen-test-is-designed-to-simulate-the-actions-of-hackers.html the fact that the exfiltration activity generated signals in Salesforce audit logs, OAuth management consoles, and network monitoring systems simultaneously.
This page tracks every major breach of 2025, by company, date, records exposed, and threat actor, updated as new incidents are confirmed. A September hack and data breach saw JLR’s car plant stall production for months as the company worked to get its systems back up and running. Every year, TechCrunch looks back at the cybersecurity horror shows of the past 12 months — from the biggest data breaches to hacks resulting in weeks of disruption — to see what we can learn. This email address has been found in multiple data breaches.