Top incidents
The largest catalogued cyberattacks, ranked by financial loss, records leaked, and users affected.
By financial loss
- 01SolarWinds SUNBURST supply-chain compromise (Cozy Bear)$100.00B
- 02MOVEit Transfer mass exploitation (Cl0p)$12.15B
- 03NotPetya destructive wiper$10.00B
- 04ICBC Financial Services LockBit ransomware (2023)$9.00B
- 05WannaCry ransomware worm$6.00B
- 06Facebook–Cambridge Analytica data scandal$5.00B
- 07Change Healthcare ransomware (ALPHV/BlackCat)$2.87B
- 08Jaguar Land Rover global production halt (Scattered Lapsus$ Hunters, 2025)$2.40B
- 09Ascension Health ransomware attack$1.80B
- 10Bybit cold wallet heist$1.50B
- 11Equifax data breach$1.38B
- 12Didi Global data security enforcement case$1.20B
- 13Coupang insider data breach (2025)$1.17B
- 14CDK Global BlackSuit ransomware (2024)$1.00B
- 15Ronin Bridge heist$625.0M
- 16Marks & Spencer DragonForce ransomware (Scattered Spider, 2025)$550.0M
- 17Coincheck NEM heist$530.0M
- 18T-Mobile US data breach (Binns)$500.0M
- 19Yahoo data breaches (3 billion accounts)$470.0M
- 20U.S. Office of Personnel Management breach$350.0M
By records leaked
- 01Swissport ransomware attack1600.00B
- 02Bank Syariah Indonesia (BSI) ransomware attack1500.00B
- 03Yahoo data breaches (3 billion accounts)3.00B
- 04National Public Data SSN breach2.90B
- 05Synthient Credential Stuffing Threat Data data breach (2025)1.96B
- 06Aadhaar database exposure1.10B
- 07Data leak at IDMerit - Exposed database1.00B
- 08Shanghai National Police database leak1.00B
- 09First American Financial document exposure885.0M
- 10Collection #1 credential dump772.9M
- 11Verifications.io data breach (2019)763.1M
- 12Onliner Spambot data breach (2017)711.5M
- 13Data Enrichment Exposure From PDL Customer data breach (2019)622.2M
- 14Exploit.In data breach (2016)593.4M
- 15Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)560.0M
- 16Data leak at Ticketmaster560.0M
- 17Sina Weibo data leak538.0M
- 18Facebook 533M scraped records leak533.0M
- 19Marriott / Starwood guest data breach500.0M
- 20Anti Public Combo List data breach (2016)458.0M
By users affected
- 01Yahoo data breaches (3 billion accounts)3.00B
- 02Aadhaar database exposure1.10B
- 03Shanghai National Police database leak1.00B
- 04Collection #1 credential dump772.9M
- 05Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)560.0M
- 06Sina Weibo data leak538.0M
- 07Facebook 533M scraped records leak533.0M
- 08Marriott / Starwood guest data breach500.0M
- 09FriendFinder Networks breach412.2M
- 10MySpace credentials breach360.0M
- 11Exactis data exposure340.0M
- 12BPJS Kesehatan data leak279.0M
- 13Instructure Canvas LMS ShinyHunters breach (2026)275.0M
- 14Wattpad data breach (2020)268.8M
- 15NetEase data breach (2015)234.8M
- 16Deezer data breach (2019)229.0M
- 17Brazil 223-million mega-leak223.0M
- 18Zynga data breach (2019)172.9M
- 19VNG Zing ID 163-million account breach163.7M
- 20Dubsmash data breach (2018)161.7M