AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/17/2026 at 3:33 PM EST
Customer Data Breaches Surface Across Services
Coverage from SecurityWeek, BleepingComputer, and others
Several organizations have disclosed or confirmed breaches involving customer names, contact details, account information, purchase records, and partial payment data.
Origin Energy is investigating a potentially large compromise, while Suno’s previously undisclosed incident reportedly affected 55.3 million accounts; OnTrac has also reported possible access to customer files. The incidents highlight persistent uncertainty about breach scope, the risk of phishing and impersonation using exposed data, and the importance of timely notification and containment.
Looking Back
16 Day Timeline
Jul 20
Jul 21
Jul 23
Jul 24
Jul 25
Jul 27
Jul 28
History
07/28/2026
The biggest change is the addition of a large, previously undisclosed Suno breach and a new Origin Energy investigation, which broadens the story from general breach patterns to specific, high-scale incidents with uncertain scope and notification gaps.
07/26/2026
The story broadens from Suno-centered breach reporting into a wider pattern of major privacy incidents across healthcare, logistics, education, and state benefits systems. The new emphasis is on delayed disclosure, third-party exposure, and resulting legal and fraud-response actions.
All Articles37 articles
Additional
Origin Energy Limited confirmed on July 23 that unauthorized access occurred to some customer data in Australia after a July 22 investigation announcement.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy confirmed a customer data breach in Australia in response to an external threat claim, coordinating with Australian law enforcement and regulators.
7/23/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
OnTrac disclosed on March 23 detection of a breach affecting files accessed March 20 to 22, and offered CyberScout identity protection to customers.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Suno suffered a November 2025 cyberattack that exposed data for over 55.3 million people, including partial payment card numbers, without timely user notification.
7/21/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy announced a data breach affecting nearly five million customers in Australia, with investigation involving federal agencies after exposure of personal and partial payment data.
7/23/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Have I Been Pwned added 55.3 million affected Suno accounts on July 20, 2026, after a November 2025 breach exposed contact details and partial payment card data.
7/22/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Oklahoma health officials investigated fraudulent Medicaid enrollments in an alleged scheme exploiting an out-of-state data breach, while the attorney general launched an independent inquiry.
7/21/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
RTX disclosed a June 25, 2026 incident exposing Social Security numbers and addresses in Massachusetts, with Equifax Complete Premier credit monitoring offered.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
OnTrac disclosed in July 2026 that unauthorized access to company files exposed personal information of more than 40,000 individuals.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
From July 17-23, 2026, multiple organizations disclosed data breaches involving third-party access, privilege escalation, legacy systems, credential-stuffing, and exposed customer and employee data.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
OnTrac reported a March 23 breach after unauthorized access between March 20 and 22 potentially exposed customer personal information in the United States.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy disclosed in Australia that an unauthorized access incident exposed some customer identity and partial financial data, with notification and assessment ongoing.
7/23/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy disclosed on July 23 a breach involving former employee credentials on a vendor platform, exposing partial payment details, while potential notification and enforcement timelines depend on Australian laws.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Centers Laboratory detected suspicious activity in August 2025 and notified 542,377 affected patients around July 20, 2026, prompting privacy litigation claims.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy addressed regulator engagement after alleged unauthorized access on a vendor platform using a fired former employee credential in Australia, affecting customer data.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Organizations in Turkey, Sweden, and Puerto Rico reported personal-data breaches from July to October 2025, alongside governance updates on ISO 27701.
7/28/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
TripleX claims a nearly 1TB leak from Bank of Baroda in India, while Ransomware.live reports dark-web exposure and Bank of Baroda runs an internal investigation.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy confirmed in Australia that stolen customer data followed a hacker claim, with federal authorities and cyber experts investigating while impact counts remain under review.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy confirmed in 2020s reporting that hackers accessed customer data including PII and last-four payment-card identifiers, and began investigation after media notification in Australia.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Bank of Baroda disclosed a data exposure in India after employee email compromise and alleged ransomware posting by Triple X on July 24.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Bank of Baroda reported an alleged 1TB customer-data exposure after employee email compromise enabled darknet leakage, with Triple X reportedly claiming responsibility.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
OnTrac confirmed unauthorized access to its parcel delivery network in the western United States, potentially exposing customer personal information and prompting downstream breach-risk reviews.
7/25/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Suno confirmed a November 2025 incident in which Have I Been Pwned added breached records on July 20, exposing data of 55.3 million users.
7/22/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Sumner County Schools in Tennessee, after discovering a network security breach, postponed school dates as the FBI and Tennessee Bureau of Investigation assessed potential access to student records.
7/22/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Suno confirmed a November 2025 security incident, and Have I Been Pwned added breached dataset records tied to 55.3 million users on July 20.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy reported July 23 unauthorized access and disclosure of some customer personal and partial financial data in Australia.
7/23/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Federman & Sherwood began investigating an ASP Unifrax data breach reported to the Vermont Attorney General after exposure of Social Security numbers and health records.
7/23/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Federman & Sherwood investigates a Unlimited Technology Systems, LLC data breach reported to the Vermont Attorney General involving unauthorized access to Vermont residents healthcare and identity data.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy disclosed an Australian security incident involving unauthorized access and disclosure of customer personal data and partial financial digits, while notifying affected customers.
7/23/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Federman & Sherwood investigates a 11th Street Commons data breach reported to the Vermont Attorney General on July 24, 2026.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Origin Energy disclosed a data breach affecting Australian customers, with Australian cyber and privacy authorities investigating after exposure of personal data and partial financial details.
7/26/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Bank of Baroda investigated a dark web cybersecurity incident in India after reported exposure of customer identity and loan documents, attributed to a compromised employee email account.
7/27/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Centers Laboratory in New Jersey detected unauthorized access in August 2025 and reportedly began patient notification around July 20, 2026 after data exfiltration.
7/24/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
Ultrahuman released the Emerald update for Ring PRO on July 23, 2026, adding on-device UltraSphere guidance after a June 2026 credential-based analytics breach.
7/24/2026 • Privacy Technology & AI • Automated Decision Impacts
Ohio consumers can receive breach notifications and take protective actions after unauthorized access to personal information triggers notice requirements.
7/20/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches
OpenLoop Health confirmed a breach affecting over 716,000 patients across 120 healthcare organizations after an unauthorized session exposed regulated patient records.
7/26/2026 • Data Breaches & Exposure Events • third-party/vendor Breaches
Paidwork users faced a reported data breach in which personal and financial data were exposed for more than 23 million users, with an impact-check process provided in the associated report.
7/22/2026 • Data Breaches & Exposure Events • Data Breaches & Exposure Events: Consumer Data Breaches