Third-party and supply chain breach incidents
Definition
Third-party incidents document breaches at a vendor, processor, software supplier or service provider that exposed the personal data held on behalf of their customers.
Included
- Breaches at a processor, payroll provider or billing vendor
- Compromise of widely used software that exposed many organizations' data
- Breaches at a contractor or partner holding shared personal data
- Incidents where one breach is reported by several affected organizations
Excluded
- Breaches inside the organization itself with no outside party involved
Incident records79
Nov 2026State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breachDataBreaches.netag.ny.govNov 2026Student Data Breach Affects Up to 16 Icelandic SchoolsDataBreaches.neticelandreview.comOct 2026NY AG James and CT AG Tong Secure $2.7 Million from Boston Children’s Health Physicians and XTIUM for 2024 Data BreachDataBreaches.netag.ny.govSep 2026Data breach incident targets prisoner medical records at 2 Mass. jailsDataBreaches.netmasslive.comcorrections1.comSep 2026The U.S. military leaked more than 93,000 tips via insecure P3 Global Intel. Has anyone been notified?DataBreaches.netSep 2026North Dakota Supreme Court impacted by third-party data breach that has affected dozens of statesDataBreaches.netvalleynewslive.comreuters.com+1Aug 2026Ascent Skilled Nursing Facilities Assure Breach Victims of “Credible Evidence” Stolen Data Was DeletedDataBreaches.netbearmountainnhr.commass.govAug 2026Quincy Valley Medical Center notifies patients of Aesto breachDataBreaches.netfacebook.comAug 2026Dutch retailer Bol follows De Bijenkorf in warning of data breach as leaked data appears on dark webDataBreaches.netnltimes.nlrtl.nlAug 2026CareCloud Data Breach Impacts Over 350,000DataBreaches.netmass.govsecurityweek.comJul 2026Instructure Incident Driving 58 Percent of Breach Notices in 2026DataBreaches.netgovtech.comidtheftcenter.orgJul 2026The Breach That Won’t End: An Update on Canvas, and how they created an EdTech’s Vendor Trust ProblemDataBreaches.netlnkd.inJun 2026MOVEit Breach Defendants Lose 2nd Bid to Toss Negligence ClaimsDataBreaches.netbloomberglaw.comnews.bloomberglaw.comJun 2026Power company in Japan fears data breach after losing storage drive containing customer detailsDataBreaches.netasahi.comnews.web.nhk+1May 2026Rhode Island’s workers’ compensation notifies those affected by January data breachDataBreaches.netrhodeislandcurrent.comMay 2026When Your Vendor’s Breach Becomes Your Lawsuit: Privacy Risk Lessons from Recent Bank LitigationDataBreaches.netfbtgibbons.comMay 2026Missouri regulators escalate pressure on Conduent over data breach potentially affecting millionsDataBreaches.netdci.mo.govconduent.com+1May 2026Instructure discloses second data breach in less than a yearDataBreaches.netinstructure.comweb.archive.org+2May 2026Unprecedented: Private Equity Firm Potentially on Hook for PowerSchool’s Data BreachDataBreaches.netwomblebonddickinson.comjdsupra.comApr 2026Judge lets state auditor’s investigation into data breach affecting Blue Cross Blue Shield members move forwardDataBreaches.netktvh.comApr 2026Iowa AG files lawsuit against Change Healthcare over 2024 data breachDataBreaches.netiowaattorneygeneral.govbeckershospitalreview.comApr 2026Meta Pauses Work With Mercor After Data Breach Puts AI Industry Secrets at RiskDataBreaches.netwired.comarchive.is+1Apr 2026FBI calls breach of sensitive agency networks a ‘major incident’DataBreaches.netmsn.comApr 2026Questions raised after Cherry Creek students notified of data breach, lawsuitDataBreaches.netkdvr.comJan 2026Investigation into data breach involving Blue Cross Blue Shield members could head to courtDataBreaches.netktvh.comkxlh.comDec 2025Software company lacked ‘downstream’ liability for data breachDataBreaches.netarchive.ismasslawyersweekly.comDec 2025Should entities be required to disclose the name of a vendor if the breach was at the vendor’s?DataBreaches.netmass.govOct 2025Gatineau gymnastics centre warns members of possible data breachDataBreaches.netmsn.comOct 2025Data breach in 42 Latvian municipalities: DVI imposes 300,000 euro fine on ZZ DatsDataBreaches.netbnn-news.comOct 2025From sizzle to drizzle to fizzle: The massive data leak that wasn’t (1)DataBreaches.netqantas.comOct 2025Missing Risk Analysis Cost NY CPA Firm $175K-But Not the Big Group Whose Data Was Breached in 2019DataBreaches.netjdsupra.comhcca-info.orgSep 2025Volvo Group Data Breach Affects Workforce PIIDataBreaches.netclaimdepot.comAug 2025TransUnion notifying more than 4.4 U.S. million consumers of data breach (1)DataBreaches.netAug 2025Thousands more Afghans affected by second data breach, ministers sayDataBreaches.netnews.sky.comJul 2025Credit reports among personal data of 190,000 breached, put for sale on Dark Web; IT vendor finedDataBreaches.netstraitstimes.comJul 2025Qantas customers involved in mammoth data breachDataBreaches.netnews.com.auJun 2025Ontario health agency atHome ordered to inform 200,000 patients of March data breachDataBreaches.netmsn.comJun 2025HealthEC Agrees to $5.48 Million Settlement to End Data Breach LawsuitDataBreaches.netnetsec.newsMay 2025Update: ALN Medical Management’s Data Breach Total Soars to More than 1.8 Million Patients AffectedDataBreaches.netoag.my.site.comoag.ca.gov+1May 2025PA: York County alerts residents of potential data breachDataBreaches.netpennlive.comyorkcountypa.govMay 2025Patients left in the dark almost a year after criminals leaked sensitive medical data from SynnovisDataBreaches.nettherecord.mediasynnovis.co.ukMar 2025Four months after learning of a vendor’s breach, Concord Orthopaedics notifies almost 68,000 patients (1)DataBreaches.netconcordortho.commm.nh.govFeb 2025Bluesight’s 2025 Breach Barometer Report Reveals Surge in Healthcare Data BreachesDataBreaches.netc212.netFeb 2025Medical Billing Vendor Sued Over Health Data Leak ‘Gold Mine’DataBreaches.netbloomberglaw.comnews.bloomberglaw.com+1Feb 2025Business Associate breaches account for the largest percentage of breached patient recordsDataBreaches.netbluesight.comFeb 2025Imprisoned IRS Contractor Leaked Information of Over 400,000 TaxpayersDataBreaches.netjudiciary.house.govnationalreview.comFeb 2025DISA Global Solutions reports more than 3.3 million people affected by 2024 data breach, but questions remainDataBreaches.netpublicnow.commaine.gov+1Feb 2025Humboldt Independent Practice Association’s breach notification leaves questions unansweredDataBreaches.nethumboldtipa.comJan 2025RIBridges has many lines of defense. How was the system breached?DataBreaches.netrhodeislandcurrent.commalwarebytes.com+2Dec 2024More details emerge about RIBridges data breach; Deloitte tells state threat actors have leaked dataDataBreaches.netnecn.commynorthwest.com
50 of 79 shownFilter all 79 in Explore →