Skip to content

Top incidents

The largest catalogued cyberattacks, ranked by financial loss, records leaked, and users affected.

By financial loss

  1. 01SolarWinds SUNBURST supply-chain compromise (Cozy Bear)$100.00B
  2. 02MOVEit Transfer mass exploitation (Cl0p)$12.15B
  3. 03NotPetya destructive wiper$10.00B
  4. 04ICBC Financial Services LockBit ransomware (2023)$9.00B
  5. 05WannaCry ransomware worm$6.00B
  6. 06Facebook–Cambridge Analytica data scandal$5.00B
  7. 07Change Healthcare ransomware (ALPHV/BlackCat)$2.87B
  8. 08Jaguar Land Rover global production halt (Scattered Lapsus$ Hunters, 2025)$2.40B
  9. 09Ascension Health ransomware attack$1.80B
  10. 10Bybit cold wallet heist$1.50B
  11. 11Equifax data breach$1.38B
  12. 12Didi Global data security enforcement case$1.20B
  13. 13Coupang insider data breach (2025)$1.17B
  14. 14CDK Global BlackSuit ransomware (2024)$1.00B
  15. 15Ronin Bridge heist$625.0M
  16. 16Marks & Spencer DragonForce ransomware (Scattered Spider, 2025)$550.0M
  17. 17Coincheck NEM heist$530.0M
  18. 18T-Mobile US data breach (Binns)$500.0M
  19. 19Yahoo data breaches (3 billion accounts)$470.0M
  20. 20U.S. Office of Personnel Management breach$350.0M

By records leaked

  1. 01Swissport ransomware attack1600.00B
  2. 02Bank Syariah Indonesia (BSI) ransomware attack1500.00B
  3. 03Yahoo data breaches (3 billion accounts)3.00B
  4. 04National Public Data SSN breach2.90B
  5. 05Synthient Credential Stuffing Threat Data data breach (2025)1.96B
  6. 06Aadhaar database exposure1.10B
  7. 07Data leak at IDMerit - Exposed database1.00B
  8. 08Shanghai National Police database leak1.00B
  9. 09First American Financial document exposure885.0M
  10. 10Collection #1 credential dump772.9M
  11. 11Verifications.io data breach (2019)763.1M
  12. 12Onliner Spambot data breach (2017)711.5M
  13. 13Data Enrichment Exposure From PDL Customer data breach (2019)622.2M
  14. 14Exploit.In data breach (2016)593.4M
  15. 15Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)560.0M
  16. 16Data leak at Ticketmaster560.0M
  17. 17Sina Weibo data leak538.0M
  18. 18Facebook 533M scraped records leak533.0M
  19. 19Marriott / Starwood guest data breach500.0M
  20. 20Anti Public Combo List data breach (2016)458.0M

By users affected

  1. 01Yahoo data breaches (3 billion accounts)3.00B
  2. 02Aadhaar database exposure1.10B
  3. 03Shanghai National Police database leak1.00B
  4. 04Collection #1 credential dump772.9M
  5. 05Snowflake customer-account credential-stuffing campaign (UNC5537, 2024)560.0M
  6. 06Sina Weibo data leak538.0M
  7. 07Facebook 533M scraped records leak533.0M
  8. 08Marriott / Starwood guest data breach500.0M
  9. 09FriendFinder Networks breach412.2M
  10. 10MySpace credentials breach360.0M
  11. 11Exactis data exposure340.0M
  12. 12BPJS Kesehatan data leak279.0M
  13. 13Instructure Canvas LMS ShinyHunters breach (2026)275.0M
  14. 14Wattpad data breach (2020)268.8M
  15. 15NetEase data breach (2015)234.8M
  16. 16Deezer data breach (2019)229.0M
  17. 17Brazil 223-million mega-leak223.0M
  18. 18Zynga data breach (2019)172.9M
  19. 19VNG Zing ID 163-million account breach163.7M
  20. 20Dubsmash data breach (2018)161.7M