What is the largest data breach in history?

The 2013 Yahoo data breach, which affected all 3 billion user accounts, is considered the largest data breach in history by number of accounts compromised.

What common factors lead to major data breaches?

Major data breaches often result from weak or stolen credentials, unpatched software vulnerabilities, insider threats, or sophisticated phishing and social engineering attacks.

How can individuals protect themselves after a data breach?

Change your passwords immediately, enable two-factor authentication, monitor your financial accounts for suspicious activity, and consider freezing your credit to prevent identity theft.

Which industries are most frequently targeted in data breaches?

Technology, healthcare, finance, and retail industries are most frequently targeted because they store vast amounts of sensitive personal and financial data.

What are the long-term consequences of a data breach for a company?

Consequences can include regulatory fines, lawsuits, loss of customer trust, reputational damage, and significant costs for remediation and security upgrades.

App / Software

Top 10 Worst Data Breaches in History

The most catastrophic data breaches that exposed billions of records — your data was probably in at least three of these. Which one shocked you most? Vote for the breach that should rank #1.

2026170 viewsJul 18, 2026 Updated Sep 7, 2026

Product

Community rankings for this product

Be the first

Current Rankings

0
#1
Yahoo (2013-2014)
All 3 billion Yahoo accounts were compromised in the largest data breach ever — a staggering 6x more than Marriott International’s 500 million-record leak. Attackers stole names, email addresses, phone numbers, and hashed passwords across a 2013–2014 campaign that Yahoo disclosed only in 2016. That total represents 93% of the world’s internet users at the time, dwarfing every competitor. The aftermath included a $350 million reduction in Verizon’s acquisition price and years of regulatory scrutiny.
Get it →
Details →
0
#2
National Public Data (2024)
National Public Data leaked 2.9 billion records containing Social Security numbers, names, and addresses of nearly every American, Canadian, and British citizen in 2024. That record count outranks the Equifax 2017 breach by nearly 20x, covering an estimated 87% of the U.S. population. The background check company’s failure to secure a database exposed far more sensitive personal data than any prior incident, triggering class-action lawsuits and federal investigations within days.
Get it →
Details →
0
#3
Equifax (2017)
A preventable Apache Struts vulnerability at Equifax allowed hackers to steal 147 million Americans’ Social Security numbers, birth dates, and credit histories in 2017. That victim count is 49% higher than the American victims in the National Public Data breach, despite the latter having 20x more total records. The breach cost Equifax over $1.4 billion in settlements, fines, and remedial security upgrades, and directly led to sweeping credit monitoring reforms.
Get it →
Details →
0
#4
Marriott International (2018)
Hackers lurked inside Marriott’s Starwood reservation system for four years, eventually stealing 500 million guest records including passport numbers and payment details. While this dwarfs the National Public Data leak in per-record sensitivity — passport data is uniquely damaging — it amounts to 83% fewer total records than the 2.9 billion-event. The breach triggered a £18.4 million fine under GDPR and forced Marriott to overhaul its global cybersecurity infrastructure.
Get it →
Details →
0
#5
Facebook/Cambridge Analytica (2018)
The Facebook/Cambridge Analytica scandal exposed how 87 million users’ data was harvested without consent for political advertising—three times more affected than the 30 million initially reported in the Equifax breach, and impacting 13% of Facebook’s 2018 user base. The data leveraged psychological profiles for 50 million US voters, triggering a global regulatory shift that cost Facebook $5 billion in FTC fines alone.
Get it →
Details →
0
#6
LinkedIn (2021)
In 2021, data from 700 million LinkedIn users—93% of its user base—was scraped and sold, including email addresses, phone numbers, and geolocation. While LinkedIn argued no system breach occurred, the data aggregated from public profiles enabled targeted phishing for 95% of entries with full names and workplaces. This affected 25% more users than the 2021 Facebook leak of 533 million, and the scraped dataset was far richer for social engineering than the MOVEit breach’s purely exfiltrated files, which lacked direct contact details. The incident cost LinkedIn an estimated $1.2 million in remediation and legal fees.
Get it →
Details →
0
#7
MOVEit (2023)
The MOVEit breach exploited a zero-day SQL injection flaw, compromising 2,700+ organizations and exposing 93.3 million individuals—over five times more victims than the SolarWinds supply chain attack, which affected 18,000 organizations. The Clop ransomware gang’s data exfiltration method exposed personal data in 94% of impacted entities, a rate 30% higher than typical ransomware incidents. This attack’s scale dwarfs the Facebook/Cambridge Analytica scandal in organizational impact, as MOVEit hit government and enterprise systems globally, with estimated costs exceeding $10 billion in recovery and litigation.
Get it →
Details →
0
#8
SolarWinds (2020)
The SolarWinds breach inserted backdoor code into Orion software updates, infiltrating 18,000 organizations including U.S. Treasury and DHS. Attackers maintained undetected access for an average of 9 months—over 2.8 times longer than the typical 95-day dwell time for advanced persistent threats. This espionage-focused attack outranks the MOVEit breach in strategic sophistication, targeting government networks rather than widespread extortion. The breach’s supply chain vector exposed sensitive communications from 100+ federal agencies, with estimated response costs of $100 million for SolarWinds alone.
Get it →
Details →
0
#9
Target (2013)
The 2013 Target data breach marked a significant turning point in cybersecurity, prompting a global re-evaluation of security protocols within major corporations. Threat actors gained access to Target's systems through a compromised HVAC vendor, ultimately exfiltrating 40 million credit card numbers and 70 million customer records, including names, addresses, phone numbers, and email addresses. This incident notably surpassed the 2007 TJX breach, which previously held the record for the largest retail breach with 45.6 million credit and debit card numbers stolen, highlighting the increasing sophistication of cyber threats. In the aftermath, Target faced substantial financial repercussions, including a reported net loss of $292 million and an estimated cost exceeding $200 million.
Get it →
Details →
0
#10
Sony PlayStation Network (2011)
The Sony PlayStation Network suffered a catastrophic security breach in 2011, leading to a 23-day network outage and the compromise of approximately 77 million user accounts. This extensive downtime significantly damaged Sony's reputation and incurred estimated costs of $171 million for the company. The stolen data included usernames, passwords, and other personal information, with credit card data also compromised, though encrypted.
Get it →
Details →

Current Rankings

Share this list

170 views

Get ranking updates

Get the weekly technology rundown

The most-voted lists across every category — curated weekly. Join the early readers.

The most-voted lists across every category
Exclusive early-access to new categories
Reader picks vs editorial picks compared

No spam. One email per week. Unsubscribe anytime.

Readers Also Ranked

More Lists Like This

Top 10 Cloud Storage Services in 2026

#1Dropbox
#2Google Drive
#3Microsoft OneDrive

Top 10 Indonesian Tech Startups in 2026

#1GoTo Group
#2Tokopedia
#3Traveloka

Top 10 Swedish Technology Companies 2026

#1Spotify
#2Ericsson
#3Klarna

Discussion

Have a take on this ranking?

Comments are how the argument actually happens here. Posting one needs a free account — it takes about a minute.

Create a free account Already have one? Sign in

No comments yet.

The first comment sets the terms of the argument.

Would your top 10 look different?

Publish your own ranking of this topic. Your list gets its own page, and readers vote on it the same way you just voted on this one.

Build your own Top 10

Play ranking game →Seal as Time Capsule?→

More Technology Rankings

Top 10 US Autonomous Vehicle Companies 2026

Top 10 European SaaS Companies 2026

Top 10 European AI Startups 2026

10 Quantum Computing Breakthroughs That Actually Matter in 2026

More Apps & Software Rankings

Top 10 Most Successful Tech Startups of All Time

118 views · @admin

Top 10 Worst Tech Predictions That Failed

118 views · @admin

Top 10 AI-Powered Productivity Apps of 2026

119 views · @admin

Top 10 Most Revolutionary Apps Ever Made

119 views · @admin

Top 10 Open Source Software Projects Powering the Modern Tech Stack (2026)

119 views · @admin

Top 10 Semiconductor Innovations from Taiwan in 2026

119 views · @admin

Lists like this

If you liked this, you might love these

TECHNOLOGY

People Also Explore

Because you're viewing Technology

Top 10 Ars Technica — Latest — March 14, 2026

173 views · 0 votes

Top 10 Cameras That Changed Photography Forever (From Brownie to iPhone)

174 views · 0 votes

Top 10 AI Coding Tools for Developers in 2026

175 views · 0 votes

Best Dev Tools

175 views · 0 votes

Top 10 Ars Technica — Latest — March 15, 2026

176 views · 1 votes

Top 10 European Fintech-Tech Crossover Companies

177 views · 0 votes

TECHNOLOGYSame type

Top 10 Best Password Managers 2026

10 items

TECHNOLOGYSame type

Top 10 Best VPN Services 2026

10 items

TECHNOLOGYSame type

Top 10 Worst Tech Predictions That Failed

10 items

TECHNOLOGYSame type

Top 10 Best Programming Languages to Learn in 2026

10 items

TECHNOLOGYSame type

Top 10 Turkish Tech Startups in 2026

10 items

TECHNOLOGYSame type

Top 10 Most Overhyped Tech Products That Flopped

10 items

More in Technology

See all

Top 10 Hacker News — Top Stories — August 12, 2026

10 items · 81 views

Top 10 Ars Technica — Latest — May 6, 2026

10 items · 81 views

Top 10 Ars Technica — Latest — March 28, 2026

10 items · 82 views

Top 10 Ars Technica — Latest — August 5, 2026

10 items · 82 views

Current Rankings

Yahoo (2013-2014)

National Public Data (2024)

Equifax (2017)

Marriott International (2018)

Facebook/Cambridge Analytica (2018)

LinkedIn (2021)

MOVEit (2023)

SolarWinds (2020)

Target (2013)

Sony PlayStation Network (2011)

Current Rankings

Tags

Get the weekly technology rundown

Readers Also Ranked

More Lists Like This

Top 10 Cloud Storage Services in 2026

Top 10 Indonesian Tech Startups in 2026

Top 10 Swedish Technology Companies 2026

Discussion

More Technology Rankings

More Apps & Software Rankings

Lists like this

Top 10 Biggest Cybersecurity Breaches of All Time

Top 10 Best Cybersecurity and Privacy Tools of 2025

Top 10 Southeast Asian Startups of 2025

Top 10 Indonesian Startups of 2025

Top 10 Hacker News — Top Stories — May 7, 2026

Top 10 Hacker News Stories for April 7, 2026: AI Trust, Claude Code, Rice Farmer & More

You might also want to rank…

People Also Explore

You might also like

More in Technology

Current Rankings

Yahoo (2013-2014)

National Public Data (2024)

Equifax (2017)

Marriott International (2018)

Facebook/Cambridge Analytica (2018)

LinkedIn (2021)

MOVEit (2023)

SolarWinds (2020)

Target (2013)

Sony PlayStation Network (2011)

Lists like this

Top 10 Biggest Cybersecurity Breaches of All Time

Top 10 Best Cybersecurity and Privacy Tools of 2025

Top 10 Southeast Asian Startups of 2025

Top 10 Indonesian Startups of 2025

Top 10 Hacker News — Top Stories — May 7, 2026

Top 10 Hacker News Stories for April 7, 2026: AI Trust, Claude Code, Rice Farmer & More