Data study
The most frequently targeted companies
Ranked by how often a company is named in a tracked data-exposure incident — not by confirmed breaches. Most entries in this tracker are unverified listings posted by ransomware and extortion groups, which count for less here and are shown separately. Appearing high on this list is not a finding that a company was breached.
0 of the 25 companies below have no corroborated incident at all — every entry against their name is an extortion group’s own posting, which the company has not confirmed and which no regulator, breach index or named news outlet has independently reported. Read the ranking as a measure of who is being named, not of who has been breached.
| # | Company | Incidents tracked | Unconfirmed claims | Corroborated |
|---|---|---|---|---|
| 1 | Eastern Bank | 9 | 0 | 9 |
| 2 | Rockland Trust | 8 | 0 | 8 |
| 3 | Department of Revenue | 7 | 0 | 7 |
| 4 | St Mary's Credit Union | 6 | 0 | 6 |
| 5 | Jackson National Life Insurance | 6 | 0 | 6 |
| 6 | Savers Bank | 5 | 0 | 5 |
| 7 | The Village Bank | 5 | 0 | 5 |
| 8 | Wells Fargo Bank, N.A. | 5 | 0 | 5 |
| 9 | The Lincoln National Life Insurance | 5 | 0 | 5 |
| 10 | JPMorgan Chase Bank, N.A. | 5 | 0 | 5 |
| 11 | Fall River Municipal Credit Union | 4 | 0 | 4 |
| 12 | TD Bank U.S. | 4 | 0 | 4 |
| 13 | Main Street Bank | 4 | 0 | 4 |
| 14 | Bank of America | 4 | 0 | 4 |
| 15 | Webster Five Cents Savings Bank | 4 | 0 | 4 |
| 16 | University of Pennsylvania | 4 | 1 | 3 |
| 17 | OnePoint Patient Care | 4 | 1 | 3 |
| 18 | U.S. Bank | 3 | 0 | 3 |
| 19 | Rhodes | 3 | 0 | 3 |
| 20 | Quantum Health, Inc. | 3 | 0 | 3 |
| 21 | ExamOne (a Quest Diagnostics Company) | 3 | 0 | 3 |
| 22 | First Advantage Corporation | 3 | 0 | 3 |
| 23 | JP Morgan Chase Bank, N.A. | 3 | 0 | 3 |
| 24 | Salem Five Bank | 3 | 0 | 3 |
| 25 | Heart City Health Center | 3 | 0 | 3 |
Ordered by incident count weighted by evidence, so a corroborated breach counts more than an unverified listing — the same weighting the DoxxScan™ Rating uses. Only incidents where a source described a loss of personal information are counted; outages, destructive attacks and vulnerability advisories are tracked but are not breaches. Updated as new incidents are recorded.
Check your email against 15.4B breach records, free — run a scan on GalaxyWarden.
More: all studies · monthly reports.