Data breaches that exposed Government issued IDs
27 breaches (2.8% of the total) exposed Government issued IDs. Below are the yearly counts and the 27 largest of these breaches.
Breaches per year
| Year | Matching | All |
|---|---|---|
| 2007 | 0 | 1 |
| 2008 | 0 | 3 |
| 2009 | 0 | 2 |
| 2010 | 0 | 4 |
| 2011 | 0 | 15 |
| 2012 | 1 | 19 |
| 2013 | 1 | 28 |
| 2014 | 1 | 48 |
| 2015 | 2 | 67 |
| 2016 | 1 | 94 |
| 2017 | 1 | 50 |
| 2018 | 1 | 70 |
| 2019 | 0 | 80 |
| 2020 | 1 | 93 |
| 2021 | 3 | 67 |
| 2022 | 0 | 55 |
| 2023 | 4 | 42 |
| 2024 | 3 | 76 |
| 2025 | 2 | 52 |
| 2026 | 6 | 82 |
Largest breaches
| Service | Breach date | Accounts | Risk |
|---|---|---|---|
| National Public Data * | 2024-04-09 | 133,957,569 | 72 |
| AT&T | 2021-08-20 | 49,102,176 | 71 |
| Addi | 2026-03-25 | 34,532,941 | 83 |
| Prosper | 2025-09-01 | 17,605,276 | 78 |
| Angel One | 2023-04-01 | 6,765,054 | 86 |
| Odido | 2026-02-12 | 6,077,025 | 95 |
| JobStreet | 2012-03-07 | 3,883,455 | 91 |
| DentaQuest | 2026-05-23 | 2,553,599 | 80 |
| Master Deeds | 2017-03-14 | 2,257,930 | 81 |
| RentoMojo | 2023-04-15 | 2,185,697 | 94 |
| Banorte | 2014-08-18 | 2,107,000 | 73 |
| Experian (South Africa) | 2020-08-19 | 1,284,637 | 64 |
| Baydöner | 2026-03-08 | 1,266,822 | 88 |
| Salvadoran Citizens | 2024-04-02 | 946,989 | 73 |
| Miljödata | 2025-08-25 | 870,108 | 72 |
| Glendale Community College | 2026-06-15 | 793,925 | 75 |
| ViewFines | 2018-05-07 | 777,649 | 85 |
| JD Group | 2023-05-31 | 521,878 | 67 |
| JCPenney | 2026-06-12 | 368,418 | 73 |
| Upstox | 2021-04-08 | 111,002 | 95 |
| CityBee | 2021-02-05 | 110,156 | 82 |
| Tappware | 2024-04-23 | 94,734 | 77 |
| Qatar National Bank | 2015-07-01 | 88,678 | 99 |
| eThekwini Municipality | 2016-09-07 | 81,830 | 95 |
| Vodafone | 2013-11-30 | 56,021 | 96 |
| Flashback | 2015-02-11 | 40,256 | 58 |
| Jobzone | 2023-04-15 | 29,708 | 74 |
* = The original data marks this breach as unverified, possibly fabricated, or a spam list.
This site organizes publicly available information about data breaches. Data as of October 9, 2026. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.