Skip to content

Compromised by infostealers

Infostealer victims list

Real-world organizations whose employees, contractors, or users were compromised by infostealer infections — confirmed by Hudson Rock investigations and public reporting.

47 documented breaches
Compromised January 05, 2026

50+ Company Data Breach Spree

· pickettusa.com

Multiterabyte data footprint across ~50 global enterprises (e.g., 2.3TB military police health records from Maida, 139GB utility blueprints from Pickett).

Read the breach
Compromised April 27, 2026

100+ Companies Ransomware Spree

· jbs.com.br

Massive corporate data siphoned across 100+ global enterprises (e.g., 43GB from Efficy, cloud/SFTP data from Canada Goose, Aptim, and others).

Read the breach
Compromised November 05, 2025

Nikkei

· nikkei.co.jp

Names, emails, chat logs, user profiles, and metadata from 17,368 registered developer Slack accounts.

Read the breach
Compromised February 08, 2026

Conpet (Romania's Oil Pipeline)

· conpet.ro

1TB of sensitive internal data, including financial records and internal documents.

Read the breach
Compromised April 20, 2026

Vercel

· www.vercel.com

Enterprise OAuth tokens, source code repositories, and plaintext deployment environment variables.

Read the breach
Compromised June 24, 2025

Hy-Vee

· hy-vee.com

53GB of critical data, including internal documents, infrastructure diagrams, training materials, and technical details about operational systems like Aisles Online, e-commerce operations, employee benefits, IT systems, and data…

Read the breach
Compromised June 23, 2025

Ministry of Public Health and Social Welfare of Paraguay

7.4M citizen data leak (largest in Paraguay's history)

Read the breach
Compromised June 18, 2025

Nobitex

· nobitex.net

$81.7 million stolen from the cryptocurrency exchange

Read the breach
Compromised July 2021

EA Sports

· ea.com

Infostealer, source code stolen

Read the breach
Compromised August 2022

MediBank

· medibank.com.au

Infostealer infection leading to 9M records stolen

Read the breach
Compromised September 2022

Uber

· uber.com

Infostealer infection leading to internal network access

Read the breach
Compromised January 2023

CircleCI

· circleci.com

Infostealer infection leading to database access

Read the breach
Compromised September 2023

Airbus

· airbus.com

RedLine infostealer infection leading to a 3,200 sensitive suppliers leak

Read the breach
Compromised December 2023

Brazil's Police Portal

Infostealer, database access rented

Read the breach
Compromised January 3, 2024

Orange Spain

· orange.com

Infostealer infection leading to a RIPE account hijack

Read the breach
Compromised February 2024

Change Healthcare

· changehealthcare.com

Infostealer infection leading to a successful $22M ransomware attack

Read the breach
Compromised February 2024

Binance

· binance.com

Infostealer, law enforcement portal access

Read the breach
Compromised February 2024

Meta

· meta.com

Infostealer, law enforcement system hack

Read the breach
Compromised February 2024

TikTok

· tiktok.com

Infostealer, law enforcement system hack

Read the breach
Compromised February 2024

Google

· google.com

Infostealer, law enforcement system hack

Read the breach
Compromised February 2024

AU10TIX

· au10tix.com

Infostealer, ID verification breach

Read the breach
Compromised March 2024

Argentina Police

· argentina.gob.ar

Infostealer, 12K emails leaked

Read the breach
Compromised June 2024

Neiman Marcus

· neimanmarcus.com

Snowflake hack, 70M transactions

Read the breach
Compromised June 2024

Cylance

· cylance.com

Snowflake-related, 34M emails

Read the breach
Free Tools Check your exposure