The biggest data breaches of 2025 — so far

We have barely a few months in 2025, but this year has already seen several data violations that affect the personal information of several million people, including students’ records from the record to phone data and sensitive health information.

Last year, 2024, Karat More than one billion recorded has been stolenThe If anything in the first two months of this year is showing as an unprecedented year for 2025 data violations.

PowerScol violations probably affect a few million students and teachers

The violation of the Ed-Tech Giant PowerSscul is one of the largest violations of recent history students. Although we still don’t know how many records have been stolen (PowerScus has repeatedly refused to publish this image), The report claims that the violation influenced more than 1.5 million teachers in the United States Million2 million students and 1.5 million teachers.

PowerScus, which provides K -12 software in more than 18,000 schools across North America, At first the data violated In January At that time, PowerSscul said that anonymous hackers used a single compromised certificate to access his customer support portal, his school information system, PowerScul SIS, which schools used to manage the students’ records.

Hackers have accessed students with sensitive personal information with grades, medical information and social security numbers. Multiple schools affected by violations have informed TechCrunch that including other highly sensitive information Data for highly sensitive studentsControl order was accessed with information related information.

The PowerScourse reported 62 million images confirmed or denied, however Various filing He confirmed that millions of people were affected by the violation. In a filing near the Texas Attorney General, about 5,7 state residents have stolen their data, while the Rochester City School District has confirmed that 5 students were damaged.

PowerScol recently confirmed to TechCrunch About 16,000 people in the UK were also stolen data Into breach.

The Dog Access of the musk represents a huge compromise of the US Federal Government Data

The first few weeks of the Trump administration saw a variety of violations – and it would probably go down in history US government’s data is the largest upset of all timeThe

The people working on behalf of Elon Mask behind the so -called Government Skill section of the Trump administration took control of the top federal divisions and datasets to access the vast trove sensitive federal data. Doge – made Mostly from the mask’s own business to private sector employees – The US government contains the personal information of millions of Americans in critical payment systems and is responsible for distributing trillion dollars every year.

There has been more than a dozen states of the United States since then a coalition Have filed a case Blocking the Cost-Tarters’ team of Costars from accessing government systems that Americans have personal data. More than 5 current and former federal officials have also sued the dose agency of Kastur To access the records of sensitive staff of Americans without proper approval.

Connecticut -based non -profit healthcare providing community health center said in January Hacker accessed the sensitive data of more than one million patientsThe

CHC, which provides services with school-based health care and substance abuse programs, says that on January 2 to steal personal data and sensitive health information for anonymous hackers, it has compromised on its network. This data includes patient addresses, phone numbers, diagnosis, treatment details, test results, social security numbers and health insurance information.

Stackerware Apps Cocrospi, Spike and Spyes reveal the phone data of several million people

A three -year -old of the stackerware apps exposed the personal data of millions of people who unknowingly planted on their device, A security researcher has revealed in TechCrunch In February.

Three applications – Cocrospi, spikeAnd Spy – All share the same security weaknesses that allow applications installed from devices to access personal data with messages, photos and call logs that are usually without the knowledge of the owners of the device.

Easily-Express Bug also reveals email addresses for people signed up for stackerware applications. It allows any security researcher to scrap the email addresses of about 3.2 million email addresses of Cocospei, Spike and SpyGG, which was provided to the violation notification site.

US Employees Screening Service DISA confirmed the violation of more than 3 million people affecting people

The DISA, a supplier of employee screening services, with Texas -based drugs and alcohol tests and background checks, confirmed a huge data violation that took place about a year ago in April 2024 in February.

In a filing near the Attorney General of Maine, DISA says the breach has influenced more than 1.5 million people Whose employee was screening tests. Although the company says its internal investigation has been stolen specific “cannot finish specifically”, a separate filing in the state of Massachusetts confirms that social security numbers, financial information and government-known identity documents are stolen.

The DISA blamed the unidentified hacker in violation, who had access to a part of the company’s network for more than two months before they came to notice.