These are the worst hacks, cyberattacks, and data breaches of 2019 (so far)

2019 is already proving a fruitful year for hackers with millions of records stolen, medical data leaks, and credit card data theft.
By Charlie Osborne, Contributing Writer
1 of 12 Charlie Osborne/ZDNET

HIV sufferers

In January, Singapore's Ministry of Health (MOH) revealed a data breach involving 14,200 individuals. While the number may not seem all that serious, the nature of the incident certainly was -- given that these people were all diagnosed with HIV.

An unknown hacker managed to steal the information -- alongside 2,400 of their contacts -- and the records were published online. 

2 of 12 Charlie Osborne/ZDNET

Abused children at risk

A data blunder involving only two people, but no less serious, occurred in April due to a UK council. The council disclosed the personal information of a couple who adopted abused children to a birth mother, with a history of violence, forcing them to relocate to protect their adopted children's' safety. 

3 of 12 Charlie Osborne/ZDNET

540 million Facebook user records

Facebook is a constant source of data leaks and security failures these days -- and an incident in April was no exception.

Two AWS servers were found by researchers to store over 540 million records including account names, Facebook IDs, and user interaction data. The servers in question were owned by third parties and were not properly secured. 

Read on: Facebook's worst privacy scandals and data disasters

4 of 12 Charlie Osborne/ZDNET

Georgia Tech

Another data breach in April involved the Georgia Institute of Technology. Georgia Tech said a vulnerable web application provided access to a database which stored the personal data of current and former staff and students. In total, 1.3 million individuals are believed to have been affected. 

5 of 12 Charlie Osborne/ZDNET


Yet another data breach in April involved automaker Toyota. The company has recently faced with a barrage of intrusions across Australia, Thailand, Vietnam, and Japan, and in the last case, as many as 3.1 million customers & employees were impacted.

Reports suggest that eight Toyota subsidiaries and dealerships were attacked and hackers were able to access internal computer systems. Names, dates of birth, and employment information -- at the least -- were involved. 

6 of 12 Charlie Osborne/ZDNET

Treatment for addiction

The leak of information belonging to HIV sufferers is bad enough, and over in the US, a data leak involving individuals seeking out rehabilitation for addictions in April also proved to be a serious breach of trust.

An unsecured database stored 4.91 million records including patient names and the treatments they sought. Duplicate and multiple records were in play, however, and so the breach is believed to truly impact roughly 145,000 individuals. 

7 of 12 Charlie Osborne/ZDNET

10 million people impacted, but how?

A massive, but mysterious, data breach was revealed in a May report from the Office of the Australian Information Commissioner (OAIC) which documented the exposure of information belonging to 10 million individuals in a single incident.

OAIC did not say which organization disclosed the breach to the authority, beyond that the incident was reported between January 1, 2019, and March 31, 2019. 

8 of 12 Charlie Osborne/ZDNET


Another security incident on Australian shores was disclosed in May. Sydney startup Canva said that a hacker took off with information belonging to approximately 139 million users and this data -- including names, email addresses, and some physical location information -- was later put up for sale on the Dark Web as part of a larger stolen data dump.

9 of 12 Charlie Osborne/ZDNET

First American

First American, a real estate and insurance giant, said in April that a data breach of critical severity had revealed 885 million customer records. Dating back to 2003, these records included Social Security numbers, driver's license images, financial data, and transaction records.

What made matters worse is that the information was available on the firm's website for anyone to steal. 

10 of 12 Charlie Osborne/ZDNET

Hotel security audit logs

By the end of May, hotels and leisure resorts became the victims of data exposure caused by an unsecured server. Researchers found the database through Shodan and were able to access roughly 85.4GB in security audit logs belonging to up to 96 hotels. The source of the leak was Pyramid Hotel Group, a property management firm, which did not admit its ownership of the server -- although access was revoked at the same time as private disclosure. 

11 of 12 Charlie Osborne/ZDNET

Quest Diagnostics, AMCA

In June, it was disclosed that information belonging to up to 11.9 million Quest Diagnostics patients had been compromised.

AMCA, a billing collections partner, was at fault. A hacker managed to access the firm's systems, and it is possible that financial information, Social Security numbers, and medical information has been either exposed or stolen outright. 

12 of 12 Charlie Osborne/ZDNET

Australian National University

Another data breach to hit the wires in June involved the Australian National University. The university said that a "significant" number of staff and students -- potentially up to 200,000 people -- were impacted by a "sophisticated operator" able to steal data including names, addresses, dates of birth, phone numbers, email addresses, passport details, and academic records.

The data taken extends back to 19 years. 

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes
Holiday lights in Central Park background

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes

21 Photos
Winter backgrounds for your next virtual meeting
Wooden lodge in pine forest with heavy snow reflection on Lake O'hara at Yoho national park

Related Galleries

Winter backgrounds for your next virtual meeting

21 Photos
Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes
3D Rendering Christmas interior

Related Galleries

Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes

21 Photos
Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza

Related Galleries

Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza

26 Photos
A weekend with Google's Chrome OS Flex

Related Galleries

A weekend with Google's Chrome OS Flex

22 Photos
Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup

Related Galleries

Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup

8 Photos
Inside a fake $20 '16TB external M.2 SSD'
Full of promises!

Related Galleries

Inside a fake $20 '16TB external M.2 SSD'

8 Photos