11 BIGGEST DATA BREACHES OF 2015

1. November: VTech
Toy maker VTech on Friday admitted that 5 million of its customer accounts including at least 200,000
accounts related to children had been breached. It's not OK when adults get hacked, it's really not OK when it
happens to kids.
2. July: Harvard University
Following in the footsteps of eight other education breaches this year. Breach affected as many as eight schools
and administrative offices, though it remains unclear what information was accessed by the hackers.
3. July: Hacking Team
Hacking Team develops spy tools for government agencies, including those that can go around traditional antivirus solutions. The breach published more than 1 million emails from the Italian surveillance company.
4. July: Army National Guard
Result of an improperly handled data transfer to a non-accredited data center by a contract employee. Exposed
850,000 current and former National Guard members, dating back to 2004 including Social Security Numbers.
5. June: Kaspersky Lab
Infiltration of several internal systems. The attack was believed to be a nation-state-sponsored attack. Victims
also included events and venues with links to world power meetings, including recent negotiations for an Iran
nuclear deal.
6. June: Last Pass
Compromised email addresses, password reminders, server per user salts and authentication hashes. Shows an
increasing trend from attackers to target the security vendors themselves.
7. June: Office Of Personnel Management
One of the biggest cyberattacks in history. Affected 21.5 million federal workers. Discovered in late May after a
separate, unrelated breach hit the agency in April, exposing the personnel data of 4.2 million individuals.
8. May: CareFirst BlueCross BlueShield
Hackers had gained access to it's members database via the company's website and services. 1 million members
had their personal data and subscriber information compromised. Member password encryption prevented access
to Social Security numbers, medical claims, employment, credit card and financial data.
9. February: Multi-Bank Cyberheist
Billion dollar bank cyberheist. Affected as many as 100 banks around the world. Infiltration of the banks'
networks using tactics such as phishing and gaining access to key resources, including employee account
credentials and privileges.
10. February: Anthem Health Insurer
Breach that exposed an astonishing 80 million patient and employee records.
11. January: Premera BlueCross BlueShield
Premera BlueCross said in March that it had discovered a breach in January that affected as many as 11.2
million subscribers, as well as other individuals who do business with the company.