LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker

Data study

The most frequently targeted companies

Ranked by how often a company is named in a tracked data-exposure incident — not by confirmed breaches. Most entries in this tracker are unverified listings posted by ransomware and extortion groups, which count for less here and are shown separately. Appearing high on this list is not a finding that a company was breached.

0 of the 25 companies below have no corroborated incident at all — every entry against their name is an extortion group’s own posting, which the company has not confirmed and which no regulator, breach index or named news outlet has independently reported. Read the ranking as a measure of who is being named, not of who has been breached.

#CompanyIncidents trackedUnconfirmed claimsCorroborated
1Rockland Trust24024
2Eastern Bank20020
3The Village Bank19019
4Savers Bank16016
5Main Street Bank16016
6St Mary's Credit Union14014
7Bank of America12012
8Jackson National Life Insurance12012
9JPMorgan Chase Bank, N.A.12012
10Webster Five Cents Savings Bank11011
11Department of Revenue10010
12Salem Five Bank909
13St Marys Credit Union909
14Wells Fargo Bank, N.A.909
15The Lincoln National Life Insurance909
16Adams Community Bank909
17Watertown Savings Bank909
18ExamOne707
19Brigham and Women's Hospital707
20TD Bank N.A.707
21Intuit Inc.707
22JP Morgan Chase Bank, N.A.606
23Ally Bank606
24Wells Fargo Clearing Services, LLC606
25MutualOne Bank606

Ordered by incident count weighted by evidence, so a corroborated breach counts more than an unverified listing — the same weighting the DoxxScan™ Rating uses. Only incidents where a source described a loss of personal information are counted; outages, destructive attacks and vulnerability advisories are tracked but are not breaches. Updated as new incidents are recorded.

Are you in any of these breaches?
Check your email against 15.4B breach records, free — run a scan on GalaxyWarden.
Methodology: figures are aggregated from breaches tracked in the RecentBreaches database, grouped by incident month. Free to cite with attribution to RecentBreaches.

More: all studies · monthly reports.