Top companies breached in 2024

The year 2024 was yet another reminder that no organisation, regardless of size or industry, is immune to cyberattacks. From healthcare giants to tech companies and public data repositories, cybercriminals left their mark across the globe, exposing millions of people’s sensitive information and costing companies billions. Let’s take a closer look at some of the most significant breaches of the year and the lessons they bring to the table.

1. Synnovis: A Blow to the NHS

In a devastating ransomware attack, Synnovis, a laboratory services provider for the NHS, became a high-profile target. The attack disrupted vital healthcare services in London, causing thousands of operations and appointments to be cancelled or delayed. Worse yet, the Russian-speaking Qilin group leaked 400GB of patient data, costing Synnovis a jaw-dropping £32.7 million—far outstripping their profits from the previous year. This breach not only highlighted vulnerabilities in healthcare IT systems but also reminded us of the far-reaching consequences of such attacks on human lives.

2. Snowflake’s Customer Nightmare

Snowflake, a popular cloud data platform, faced a breach that sent shockwaves through its client base. Hackers exploited stolen credentials to access accounts without two-factor authentication, compromising data from big names like Live Nation, Santander Bank, and Neiman Marcus. Alarmingly, the attackers even managed to steal records spanning months for some organisations, affecting over 165 clients. The incident underscored the importance of multi-factor authentication as a baseline security measure for all businesses.

3. National Public Data’s Massive Leak

In what is now considered one of the largest breaches in history, National Public Data (NPD) found itself at the centre of a storm. The data of 1.3 billion individuals—including names, addresses, Social Security numbers, and more—was stolen and eventually leaked. The fallout? NPD’s parent company, Jerico Pictures, faced lawsuits and eventually filed for bankruptcy. This incident serves as a stark warning to companies handling massive datasets: strong defences and swift responses are non-negotiable.

4. Espionage at the Heart of U.S. Telecoms

Salt Typhoon, a Chinese-linked espionage group, made headlines when they breached nine U.S. telecommunications companies, including Verizon and AT&T. Their target? Metadata from over a million users, including high-profile individuals like political campaign staffers and public figures. This breach highlighted the evolving tactics of nation-state actors and the critical need for organisations to protect not just customer data but national interests as well.

5. MediSecure’s Prescription for Disaster

In Australia, MediSecure became a cautionary tale when hackers stole the data of nearly 12.9 million people, exposing their names, phone numbers, Medicare details, and even their prescribed medications. The breach was so complex that the company struggled to identify specific victims. The fallout showed just how damaging a lack of incident preparedness can be, particularly in industries like healthcare, where privacy is paramount.

What Can We Learn?

The breaches of 2024 all share a common thread: they serve as lessons for businesses worldwide. Here’s what we can take away:

• Multi-Factor Authentication Is a Must: Weak login credentials remain an open door for hackers.
• Regular Security Audits Are Critical: Vulnerabilities can lurk in unexpected places.
• Data Minimisation Reduces Risk: Retaining less data can mean less exposure.
• Nation-State Threats Are Real: Every company must prepare for the possibility of advanced attacks.
• Incident Response Saves Lives: Especially in healthcare, swift responses to breaches are crucial.

As we move further into 2025, it’s clear that cybersecurity can no longer be an afterthought. Organisations must invest in robust systems, train their employees, and stay informed about emerging threats. The cost of inaction is simply too high—both in pounds and in trust.