Data Breach Observatory
Four in five small businesses have suffered a recent data breach. And a single incident can cost a small firm over $1 million. So why don’t we hear more data breach news?
Proton isn’t waiting for breaches to be reported. Instead, we go to the dark web and track leaks in real time. Click below to see if you’re affected, and to reduce your risk, use a business password manager.

Data sensitivity: Critical
Records exposed: 921,457
Compromised data: Name, physical address, phone number, email address

Association Nationale des Premiers Secours (ANPS)
France
Nonprofit organization
15 employees
Data sensitivity: Critical
Records exposed: 307,576
Compromised data: Name, date of birth, physical address, phone number, email address, username, password, IBAN

Substack
United States
Media & Entertainment
94 employees
Data sensitivity: Moderate
Records exposed: 662,750
Compromised data: Phone number, email address

Bumble
United States
Media & Entertainment
900 employees
Data sensitivity: Critical
Records exposed: 3,464
Compromised data: Name, physical address, phone number, email address, username

Match Group
United States
Media & Entertainment
2,205 employees
Data sensitivity: Critical
Records exposed: 93,672
Compromised data: Name, date of birth, physical address, phone number, email address, username, password

Panera Bread
United States
Food & Hospitality
140,000 employees
Data sensitivity: Critical
Records exposed: 8.2 million+
Compromised data: Name, date of birth, phone number, email address, username

SoundCloud
Germany
Media & Entertainment
945 employees
Data sensitivity: Moderate
Records exposed: 29.8 million+
Compromised data: Name, email address

Thermomix (Vorwerk) – Recipe World Forum
Germany
Retail & Wholesale Trade
4,700 employees
Notes
Confirmed attribution via a third-party incident
Data sensitivity: Critical
Records exposed: 3.1 million+
Compromised data: Name, date of birth, physical address, postal code, phone number, email address, username

Endesa
Spain
Energy & Utilities
10,000 employees
Data sensitivity: Critical
Records exposed: 49,651
Compromised data: Name, postal code, phone number, email address, ID number, IBAN

Qantas Airways
Australia
Transportation & Logistics
11,467 employees
Data sensitivity: Critical
Records exposed: 11.8 million+
Compromised data: Name, date of birth, physical address, phone number, email address

Vietnam Airlines
Vietnam
Transportation & Logistics
6,409 employees
Data sensitivity: Critical
Records exposed: 30.4 million+
Compromised data: Name, date of birth, physical address, postal code, phone number, email address

Bouygues Telecom
France
Telecommunications
8,937 employees
Data sensitivity: Critical
Records exposed: 6.3 million+
Compromised data: Name, date of birth, physical address, postal code, phone number, email address, IBAN

Miljödata
Sweden
Technology & IT
30 employees
Data sensitivity: Critical
Records exposed: 5.2 million+
Compromised data: Name, date of birth, physical address, postal code, phone number, email address, username, password, ID number

Free
France
Telecommunications
5,665 employees
Data sensitivity: Critical
Records exposed: 19.6 million+
Compromised data: Name, date of birth, postal code, phone number, email address, IBAN

Royal Mail
United Kingdom
Transportation & Logistics
158,592 employees
Notes
Confirmed attribution via a third-party incident
Data sensitivity: Critical
Records exposed: 127,968
Compromised data: Name, date of birth, physical address, postal code, phone number, email address, username, password

Hertz
United States
Consumer Services
25,000 employees
Data sensitivity: Critical
Records exposed: 29.3 million+
Compromised data: Name, email address, username, password

Orange Romania
Romania
Telecommunications
2,366 employees
Data sensitivity: Critical
Records exposed: 3.4 million+
Compromised data: Name, date of birth, physical address, postal code, phone number, email address, username, ID number

Zacks Investment Research
United States
Insurance & Financial Services
390 employees
Data sensitivity: Critical
Records exposed: 5.4 million+
Compromised data: Name, physical address, postal code, phone number, email address, username, password

PhoneMondo
Germany
Telecommunications
5 employees
Notes
Unconfirmed attribution
Data sensitivity: Critical
Records exposed: 10.5 million+
Compromised data: Name, date of birth, physical address, postal code, phone number, email address, username, password, IBAN
Keep your business off this list
Your passwords and multi-factor authentication are your first line of defense against hackers. Learn how thousands of small business leaders streamline password management and protect their data.
About the Data Breach Observatory
- What is the Data Breach Observatory?
- Where do you get your information?
- Why report data breach news?
- Doesn't disclosing recent data breaches harm the businesses?
- How are breaches added to the Data Breach Observatory?
- What data is leaked?
- What types of data make a breach critical?
- What does the breach publication date mean?

