USA Government Data Breaches

Breaches and security incidents involving US federal agencies, state government, cities and counties, school districts and public universities — plus the federal advisory stream.

A body appears here when its own name identifies it as a US public agency and the record places it in the United States. Government bodies outside the US are tracked on the global tracker; a private contractor that serves a government is not itself a government body and is not listed here.

Advisories published by CISA and its partner agencies. An advisory is a warning about a campaign or a vulnerable product — it is not a report that the named vendor was breached, and no exposure is claimed on these.

Looking for the rest? All recent USA data breaches →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.