The most large data violations of 2025 – so far

We have hardly been a few months by 2025, but this year he has already seen several data violations affecting the personal information of millions of people, including everything from students’ records to telephone data and sensitive health information.

Last year, 2024, I saw Stolen more than one billion recordsS If the first two months of this year are something to pass, 2025 seems to be an unprecedented year to disturb the data.

Powerschool Breach probably affects tens of millions of students and teachers

Violation of the giant Powerschool Ed-Tech is one of the biggest violations of students’ data in the latest history. Although we still don’t know exactly how many records have been stolen (Powerschool repeatedly refuses to reveal this figure), reports say the violation has affected more than 62 million students and 9.5 million teachers in the United States.

Powerschool, which provides K-12 software to more than 18,000 schools in North America, First revealed violation of data In January. At that time, Powerschool stated that unnamed hackers used single compromised identification data to access their customer support portal, providing access to the wealth of data in their school information system, Powerschool SIS, which schools used to manage students.

Hackers have access to sensitive personal information, including students’ assessments, medical information and social security number. Numerous schools affected by the offense told TechCrunch that another highly sensitive information, including Highly sensitive students for studentsIncluding restraint information was available.

Powerschool has not confirmed or refused the reported 62 million digits, but Various documents have confirmed that millions of people have been affected by the violation. Filing to the Prosecutor General of Texas revealed that nearly 800,000 state residents had stolen their data, while the school district of Rochester confirms that 134,000 students were affected.

Powerschool has recently confirmed to TechCrunch About 16,000 people in the UK have also had stolen data in the violation.

Access to Musk Dog is a huge compromise on US federal government data

The first few weeks of the Trump administration saw a different type of violation – and one who is likely to enter history as The largest compromises of US government data so farS

People working for Elon Musk, who is behind the so-called Ministry of Efficiency of the Trump or Dog administration, took control of the best federal departments and data sets to access huge threes of sensitive federal data. Dog – composed of Mainly employees in the private sector of Musk’s own business – They have seized wide access to the US government’s critical payment systems containing the personal information of millions of Americans and responsible for paying trillion dollars each year.

Since then a coalition of more than a dozen states in the US have brought a case To block the Musk team from costs to access state systems that contain Americans’ personal data. More than 100 current and former federal employees have also judged the Musk’s Doge Agency to access the sensitive records of the staff of Americans without proper permission.

Community Health Center, based on a non -profit -based Connecticut, said in January that a Hacker has gained access to sensitive data to more than a million patientsS

CHC, which provides services, including school health and drug abuse, said the unnamed hacker compromised its network on January 2 to steal patient personal data and sensitive health information. These data include patient addresses, telephone numbers, diagnoses, treatment details, test results, social security numbers and health insurance information.

Stalkerware Cocospy, Spyic and Spyzie apps expose the phone to millions of people

A Stalkerware apps have exposed the personal data to millions of people who inadvertently plant them on their devices, Security Researcher revealed to TechCrunch in February.

The three applications – Cocospy, Spyicand Spyzie – Everyone shares the same security vulnerability that allows anyone to access personal data, including messages, photos and call logs, from devices that have applications installed, usually without the knowledge of device owners.

An easy -to -operate error also displays the email addresses of the people who have registered for Stalkerware applications. This allowed the security researcher to scrape the email addresses of about 3.2 million email addresses of Coconut clients, Spyic and Spyzie, which was provided on the notification site for violation of the notification site.

US Employee Screening Service confirms a violation affecting over 3 million people

Disa, based on Texas, a employee screening service provider, including drug and alcohol tests and background checks, confirmed a large-scale data violation in February, which happened almost a year earlier in April 2024.

In submission to Maine’s Attorney General, Disa said the offense had affected more than 3.3 million people who have undergone employee screening tests. While the company stated that his internal investigation “cannot finally conclude” what specific data had been stolen, a separate submission to Massachusetts confirms that social security numbers, financial information and government documents issued are among the stolen data.

DISA has accused the violation of an unidentified hacker that has access to part of the company network for more than two months before being spotted.