List of data breaches and cyber attacks in November 2018 – 251,286,753 records leaked

Last month I thought I’d try something new, so I focused on three stories rather than putting together a long list of breaches. It wasn’t a very popular approach.

So the list is back.

I count this month’s total of known leaked records to be 251,286,753. No particular stories stand out this month, but one thing I did notice is that there weren’t as many healthcare breaches as there normally are.

As always, if I’ve missed anything, please let me know in the comments.

Cyber attack and ransomware

OVMC, EORH Computers Attacked by Hackers

Johannesburg-Lewiston Area Schools recovering from ransomware attack

Tullamore hospital hit by ransomware attack

Family Tree Relief Nursery notifies families of ransomware attack

Media Prima Locked Out By Ransomware – 1,000 Bitcoins In Ransom Demanded

Little Miami High School profile hacked on Google

May Eye Care notified 30,000 patients after ransomware incident

Altus Baytown Hospital system hit by Dharma ransomware

Sugar City recall petition delayed by county malware attack

Bowker Investigating Breach of ISBN Site

Australian Shipbuilder Hacked, Refuses to Pay Ransom

Target and other high profile Twitter accounts exploited for cryptocurrency scams

Data Breach

JavaScript keylogger sees Vision Direct’s customer data stolen

Amazon’s data breach email looks like a phishing scam

Mercy Medical Center – North Iowa notifies 1,900 patients after insider wrong-doing discovered

Private health information leaked from University Kentucky HealthCare

Noida: Two leak legal firm’s data to former employee, held

‘Appalling’ emergency services data breach to be investigated

Brazilian personal data exposure

Massive Lands Authority security flaw leaks data online

Tandigm Health notifying 7,000 patients after discovering vulnerability that might have exposed patient data in 2017

Valley Health sending letters to 857 patients possibly affected by security breach

Another ‘decision makers’ database leaked

Edmonton Humane Society apologizes after personal financial info ‘accidentally posted’ on its website

High Tail Hall data breach exposes over 400,000 furry fans

USPS Site Exposed Data on 60 Million Users

Boxes of private, personal records left exposed in government office for weeks

Unauthorized users could have accessed private information of 7,700 people following ETSU breach

University at centre of potential data breach after USB stick ‘goes missing’

UK pub exposes 17,000 customer details

New York Oncology Hematology notifying more than 128,400 employees and patients after phishing attack

HealthEquity, Inc. notifying 190,000 after two employee email accounts were hacked

FHN Family Counseling Center notifies 4,458 of stolen laptop

City of Amarillo Employees’ Personal Information at Risk

Data exposes SMS texts including password resets and two-factor codes

Medical worker in Kilmarnock suspended over data breach

Children’s charity Kars4Kids leaks info on thousands of donors

GDPR plugin on WordPress exposes sites to hackers

City of Bakersfield announces data breach from hacked Click2Gov system

Summit Medical Group notifies patients about missing notebook

Health First, Inc. notified 42,000 patients after phishing incident

Florida Department of Health data breach could affect Escambia, Santa Rosa patients

Medical records of 1,216 Upstate University Hospital patients breached

Security breach at Nordstorm exposed employee data

Huntsville Hospital vendor reports data breach

Metrocare notifies 1,804 patients after employees’ email hacked

Police probe into data breach at Crosshouse after staff accessed patient records

Southwest Washington Regional Surgery Center notifies 2,393 patients after phishing attack exposed their PHI

Computers and voter data stolen from California Democrat’s office in brazen Election Day burglary

Names of recreational cannabis buyers hacked

Data of nearly 700,000 Amex India customers exposed

Bankers Life notified more than 566,000 after hack of employees’ email resulted in breach of PHI

The theft of an Auckland legal aid lawyer’s laptop compromises 80 cases

Supply-chain attack on cryptocurrency exchange

Five Guys notifies employees of data breach

Data leak affects thousands of Moscow residents

Data breach hits luxury hotels in Tasmania, with guest details at risk of theft by ‘third party’

Private messages from 81,000 hacked Facebook accounts for sale

Financial information

Hacker lifts $1 million in cryptocurrency using San Francisco man’s phone number, prosecutors say

Internet con men ripped off Pathe NL for €19m in sophisticated fraud

Mobile World flounders after serious security breach

Card data of 20,000 Pakistani bank users sold on dark web


GDPR fine for German chat app platform

UK cops won’t go after researcher who reported security issue to York city officials

Data breaches happen - are you prepared?


  1. Jan van de Weerdhof 28th November 2018
  2. Debi McKinnell 29th November 2018
  3. Nick 6th December 2018