Data Breaches 2018

We’ve compiled a helpful table of U.S. data breaches reported in 2018. We define a data breach as a confirmed incident in which sensitive, confidential or otherwise protected data has been accessed and/or disclosed in an unauthorized fashion. This list is compiled from various sources, including press reports, government news releases and mainstream news articles and while we update it regularly, it is not meant to be an exhaustive list of all breaches in 2018.

If you’ve been a victim of a data breach, read our step-by-step guide, What to Do After a Data Breach.

Total Records Stolen in 2018: 197,386,800 (and counting)

Date ReportedEntityRecords BreachedType of DataIncident DateSource
April 4, 2018DeltaUnknownCredit and debit card informationSeptember 27, 2017 - October 12, 2017 PR Statement
April 4, 2018Sears100,000Credit and debit card informationSeptember 27, 2017 - October 12, 2017 PR Statement
April 2, 2018Panerabread37,000,000Names, email and physical addresses, birthdays, credit cardsAugust 2017News Report
March 30, 2018CareFirst BlueCross BlueShield6,800Names, identification numbers and dates of birthMarch 12, 2018CareFirst PR
March 28, 2018Lord & Taylor's, Saks Fifth Avenue5,000,000Credit and debit card informationMay 2017 to presentLord & Taylor Statement
March 25, 2018Under Armour/MyFitnessPal150,000,000Usernames, email addresses and hashed passwordsFebruary 2018MyFitnessPal FAQ
March 20, 2018Orbitz, AmexTravel880,000Names, phone, emails , gender, addresses and dates of birthJanuary-June 2016Orbitz Link
March 2, 2018Applebee's UnknownCredit and debit card informationNovember 2017-Jan 2, 2018RMH Franchise PR
March 1, 2018Equifax2,400,000Names and drivers licenses2017Equifax PR
February 5, 2018Bongo International / FedEx119,000Names, addresses, phone numbers, passports and drivers licensesFebruary 5, 2018News Link
January 11, 2018Jason's Deli2,000,000Credit and debit card informationJune 2017 - December 2017Jason's Deli PR