ClaimScan helps you scan read-only email for possible class-action settlement matches, breach notices, receipts, and suspicious sender patterns. Breached still tracks every US data breach from official sources in plain English.
Every breach links back to the official report — SEC filings, state attorneys general, news, and security researchers.
ClaimScan looks for possible settlement matches, source records, deadlines, and evidence without treating a scan as legal advice.
Suspicious settlement emails, sender domains, and claim links can be checked against verified notices before you act.
TechCrunch reported that hackers stole student data during a breach at education technology company Instructure, which is widely known for its Canvas platform.
Houston City College suffered a data breach in June 2026 when ShinyHunters extorted the college and later published data on approximately 832,000 current students and alumni.
Hackers obtained and publicly released data from gig economy platform Paidwork in March 2026, exposing over 23 million accounts including banking information, passwords, and broad personal profile data.
A November 2025 Suno security incident was followed by reports of a dataset containing more than 55 million unique email addresses and a smaller set of purchase records.
Fluke Corporation had data on over 821,000 accounts exposed after the ShinyHunters group published more than 100GB of allegedly stolen data in July 2026.
Goose Creek Candle Company suffered a data breach in June 2026 that exposed the personal and purchase information of approximately 6.6 million customers.
Glendale Community College suffered a data breach in June 2026 affecting nearly 794,000 individuals, exposing names, email addresses, Social Security numbers, and student enrollment records.
Moody Bible Institute suffered a data breach in June 2026 in which over 2.3 million accounts had personal information including names, addresses, phone numbers, and dates of birth publicly exposed following a ShinyHunters extortion campaign.
Sysco, a food distribution company, had data on approximately 2.7 million staff and customers exposed after a ShinyHunters extortion campaign resulted in the publication of corporate contact information.
American Tower had data on over 216,000 employees, contractors, customers, and leads exposed after a ShinyHunters extortion campaign in June 2026.
Mercor reported that compromised LiteLLM versions enabled unauthorized access to some Mercor systems between March 24 and March 30, 2026.
Madison Square Garden Sports had data on nearly 10 million accounts exposed after the ShinyHunters group carried out a pay-or-leak extortion campaign and published the stolen data online.
JCPenney suffered a data breach in June 2026 when ShinyHunters exploited a zero-day vulnerability in Oracle PeopleSoft, exposing personal and HR data for approximately 368,000 current and former employees.