Skip to content
CBCyber Breaches
Search

Top incidents

The largest catalogued cyberattacks, ranked by financial loss, records leaked, and users affected.

By financial loss

  1. 01SolarWinds SUNBURST supply-chain compromise (Cozy Bear)$100.00B
  2. 02MOVEit Transfer mass exploitation (Cl0p)$12.15B
  3. 03NotPetya destructive wiper$10.00B
  4. 04ICBC Financial Services LockBit ransomware (2023)$9.00B
  5. 05WannaCry ransomware worm$6.00B
  6. 06Change Healthcare ransomware (ALPHV/BlackCat)$2.87B
  7. 07Jaguar Land Rover global production halt (Scattered Lapsus$ Hunters, 2025)$2.40B
  8. 08Bybit cold wallet heist$1.50B
  9. 09Equifax data breach$1.38B
  10. 10Coupang insider data breach (2025)$1.17B
  11. 11CDK Global BlackSuit ransomware (2024)$1.00B
  12. 12Ronin Bridge heist$625.0M
  13. 13Marks & Spencer DragonForce ransomware (Scattered Spider, 2025)$550.0M
  14. 14Coincheck NEM heist$530.0M
  15. 15T-Mobile US data breach (Binns)$500.0M
  16. 16Yahoo data breaches (3 billion accounts)$470.0M
  17. 17U.S. Office of Personnel Management breach$350.0M
  18. 18Target POS malware breach$292.0M
  19. 19Capital One cloud misconfiguration breach$270.0M
  20. 20Anthem Inc. data breach$260.0M

By records leaked

  1. 01Yahoo data breaches (3 billion accounts)3.00B
  2. 02Aadhaar database exposure1.10B
  3. 03Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)560.0M
  4. 04Marriott / Starwood guest data breach500.0M
  5. 05Instructure Canvas LMS ShinyHunters breach (2026)275.0M
  6. 06Equifax data breach147.9M
  7. 07AT&T Snowflake call-records breach110.0M
  8. 08Target POS malware breach110.0M
  9. 09Capital One cloud misconfiguration breach106.0M
  10. 10Change Healthcare ransomware (ALPHV/BlackCat)100.0M
  11. 11MOVEit Transfer mass exploitation (Cl0p)95.0M
  12. 12Anthem Inc. data breach78.8M
  13. 13T-Mobile US data breach (Binns)76.6M
  14. 14Argentina RENAPER national ID database breach (2021)45.0M
  15. 15Coupang insider data breach (2025)33.7M
  16. 16Star Health insurance breach and senior-official extortion (India, 2024)31.2M
  17. 17U.S. Office of Personnel Management breach21.5M
  18. 18Latitude Financial Services data breach14.0M
  19. 1910,000,000 O'Tacos customers affected by a data leak10.0M
  20. 20Optus customer data breach9.8M

By users affected

  1. 01Yahoo data breaches (3 billion accounts)3.00B
  2. 02Aadhaar database exposure1.10B
  3. 03Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)560.0M
  4. 04Marriott / Starwood guest data breach500.0M
  5. 05Instructure Canvas LMS ShinyHunters breach (2026)275.0M
  6. 06Equifax data breach147.9M
  7. 07AT&T Snowflake call-records breach110.0M
  8. 08Target POS malware breach110.0M
  9. 09Capital One cloud misconfiguration breach106.0M
  10. 10Change Healthcare ransomware (ALPHV/BlackCat)100.0M
  11. 11MOVEit Transfer mass exploitation (Cl0p)95.0M
  12. 12Anthem Inc. data breach78.8M
  13. 13T-Mobile US data breach (Binns)76.6M
  14. 14Argentina RENAPER national ID database breach (2021)45.0M
  15. 15AIIMS Delhi ransomware40.0M
  16. 16Coupang insider data breach (2025)33.7M
  17. 17Star Health insurance breach and senior-official extortion (India, 2024)31.2M
  18. 18U.S. Office of Personnel Management breach21.5M
  19. 19Latitude Financial Services data breach14.0M
  20. 20Optus customer data breach9.8M