Yes—if you use any of the companies below, your details may be in recent data breaches; check the incidents, then update passwords, turn on two-step login, and watch your accounts.
Browsers like Microsoft Edge now flag leaked passwords for a reason. Data leaks happen every day and can be expensive and stressful for victims—think identity theft or drained bank accounts. Attackers inject form-jacking code into about 4,800 websites a month, so it’s no surprise we keep hearing about big brands losing customer data.
One problem: you’re not always told right away. Take CafePress. The custom-print retailer was breached in February 2019, exposing millions of names, addresses, security questions, and more—some social security numbers weren’t even encrypted. Many shoppers didn’t hear about it until late summer. The FTC later took action over the company’s lax security practices.
Bottom line: months—or longer—can pass before you learn your data was taken. Browser warnings help with passwords, but other personal details can be exposed too. Here are several recent incidents. If you’ve done business with any of these organizations, take steps to reduce the risk.
Recent Data Breaches That Could Affect You
Microsoft customer data exposure (October 19, 2022)
Microsoft announced a breach tied to a misconfigured server. Certain business transaction details were exposed, potentially impacting more than 65,000 organizations worldwide.
Student loan breach hits 2.5 million borrowers
If you had a student loan with EdFinancial or the Oklahoma Student Loan Authority (OSLA), you may have received a letter in July 2022. The incident put at risk:
- Social security numbers
- Email addresses
- Home addresses
- Phone numbers
In all, over 2.5 million records were exposed.
U-Haul rental contracts exposed for 2.2 million people
Rental giant U-Haul notified customers in August 2022 that some contracts created between November 5, 2021, and April 5, 2022, were compromised. Exposed data included names, driver’s license numbers, and state ID numbers—affecting more than 2.2 million renters.
Neopets incident may involve 69 million accounts
The popular Neopets platform reported a serious breach. An estimated 69 million accounts may have had emails and passwords leaked. The attackers offered the full database and a copy of the site’s source code for sale at about $94,500.
Marriott hit again—one compromised employee computer
In July 2022, Marriott disclosed another breach linked to a single unsecured employee device. Data for roughly 300–400 people leaked, including credit card details and other sensitive information. The chain has shown a pattern of weak cybersecurity, with three separate breaches in four years—enough to make some travelers consider paying by cash or a prepaid card.
Shield Health Care Group: up to 2 million records
In March 2022, Massachusetts-based Shield Health Care Group detected a breach affecting up to 2 million records. Exposed data may include medical information, social security numbers, and other sensitive personal details.
Flagstar Bank: long delay identifying affected customers
Flagstar Bank was breached in December 2021, but it took about 6 months to identify who was impacted. Approximately 1.5 million customers had information exposed, including social security numbers.
Block (formerly Square): 8.2 million affected
In April 2022, Block disclosed it was breached the prior December. A former employee accessed customer names and brokerage account numbers; some accounts also saw other stock-trading details accessed. About 8.2 million current and former customers were affected.
Crypto.com hack topped $30 million
In January 2022, more than 483 users had their Crypto.com wallets compromised. Attackers even got past two-step login (multi-factor authentication), stealing roughly $18 million in bitcoin and $15 million in Ethereum and other cryptocurrencies.
What to do if your information is in a breach
- Change your password on the affected service, and anywhere else you used the same one. Use a strong, unique password for every account.
- Turn on two-step login wherever it’s offered.
- Watch bank, card, and loan accounts for unusual activity. Set up alerts.
- Update security questions and answers, especially if they were part of the leak.
- If driver’s license or social security numbers were exposed, consider extra monitoring or other protective steps.
For offices around Panama City, this is also a reminder to review how staff handle passwords and customer data. A managed IT provider can help you tighten access, improve training, and spot risks sooner.
Frequently asked questions
Should I change my password if a company says only my name or email leaked?
Yes. It’s smart to update your password and turn on two-step login. Attackers often combine data from multiple leaks to break into accounts.
Do browser breach alerts cover everything?
No. They’re great at flagging known leaked passwords, but they won’t catch exposure of things like addresses or ID numbers. Always read the company’s notice to see what was involved.
What if I don’t get a letter or email?
You might still be affected. Watch your accounts, and check the company’s website for public notices about incidents during the time you were a customer.
How strong are your passwords?
Good password habits and two-step login go a long way. If you want help improving how your team manages logins—and reducing risk from future breaches—we’re here to help.
Want guidance tailored to your business in Bay County? Let’s talk—get in touch with Flux Labs.
