The largest data violations in 2025 – so far

We are hardly two months after 2025, but this year has already seen many data violations that affect the personal information of millions of individuals, including everything from students’ records to phone data and sensitive health information.

Last year, 2024, he saw More than a billion stealing records. If the first two months of this year is anything to go through, it appears that 2025 is scheduled to be an unprecedented year of databases.

PowerSchool is likely to affect tens of millions of students and teachers

The ED-Tech Giant Powerschool is the largest student data violations in modern history. Although we still do not know exactly the number of records that were stolen (PowerSchool has repeatedly refused to reveal this number) The reports claim that the breach affected more than 62 million students and 9.5 million teachers in the United States.

PowerSchool, which provides K-12 for more than 18,000 schools throughout North America, It revealed for the first time the data breach In January. At that time, PowerSchool said that the infiltrators were not named using one approval data at risk to access their customer support portal, allowing access to data wealth in the school information system, PowerSchool SIS, which schools use to manage student records.

The infiltrators have reached sensitive personal information, including students, medical information and social security numbers. Techcrunch multiple schools have been told that other information is very sensitive, including Student data is very sensitiveIncluding information about restriction orders, accessed.

PowerSchool did not confirm or deny 62 million reported, however Various files She confirmed that millions of people were influenced by breach. The submission of a request to the Prosecutor in Texas revealed that nearly 800,000 residents of the state had stolen their data, while the Rochester City School area confirmed that 134,000 students were affected.

PowerSchool recently emphasized Techcrunch About 16,000 people in the United Kingdom were also stolen In the breach.

Access to Musk’s Doge represents a major compromise of US federal government data

The first few weeks of the Trump administration witnessed a different kind of violation – and it is likely to decrease in history like The largest compromise ever for US government data.

Individuals working for Elon Musk, who is behind the alleged government efficiency Ministry of the Trump administration, or Dog, took control of the most important federal departments and data groups to access huge groups of sensitive federal data. Doug – consisting of Most of them are private sector employees from Musk’s private business – The widespread arrival of the critical payment systems of the United States government, which contains personal information of millions of Americans and responsible for the exchange of trillion dollars every year.

Since then, more than ten American countries have allied litigate To prevent the Musk team from the cost stations from accessing government systems that contain the personal data of the Americans. More than 100 current and former federal officials filed a lawsuit against Dog Agency in Musk To reach the employees’ records sensitive to Americans without proper permission.

The Community Health Center, a non -profit health care provider in Connecticut, said in January, The infiltrator has reached sensitive data for more than a million patients.

The Chc, which provides services including healthcare and drug abuse programs in schools, said that the infiltrator whose name has not led to the risk of his network on January 2 to steal the personal data of patients and sensitive health information. This data includes patient addresses, phone numbers, diagnoses, treatment details, test results, social security numbers and health insurance information.

Hasel tools applications

Three of the chase applications revealed the personal data of millions of people who unintentionally planted on their devices, A security researcher revealed to techcrunch In February.

Three applications – Planetary, spyAnd Spyzie – Everyone participates in the same weakness that allows anyone to access personal data, including messages, photos and call records, from the devices that have been installed, usually without knowing the owners of the devices.

Bug also displays easy to dispense with email addresses for people who subscribed to Stalkerware applications. This allowed the security researcher to rid the email addresses of about 3.2 million e -mail from Cocospy, Spyic and Spyzie customers, which were provided to the breach notification site.

American employee examination service confirms Disa breach that affects more than 3 million people

Disa, a provider in Texas for employee examination services including drug, alcohol and background tests, confirmed in February a huge violation of data that occurred about a year ago in April 2024.

In a file with the public prosecutor in Maine, Disa said that the breach affected more than 3.3 million people Those who underwent employee examination tests. While the company said that its internal investigation “cannot conclusively conclude” what has been stolen, the separate deposit in the state of Massachusetts confirms that social security numbers, financial information and identity documents issued by the government are among the stolen data.

Disa blamed an unidentified infiltration, who managed to reach part of the company’s network for more than two months before being noticed.