Free · Official sources · Checked Oct 26, 2026
When a company you rely on gets hit, find out here first
Vendor History tracks security incidents at 112 payroll, accounting, payment, IT and software companies that small businesses depend on. Every entry comes from an official public source, and the source is linked next to it.
- 112 vendors tracked
- 59 breach notices and SEC filings
- 1,244 exploited flaws
- Accellion (Kiteworks) no notices found · 4 exploited flaws
- Acronis no notices found · 2 exploited flaws
- Adobe 1 notice or filing · 82 exploited flaws
- ADP 2 notices or filings
- Amazon (AWS) no notices found
- Apple no notices found · 95 exploited flaws
- athenahealth no notices found
- Atlassian (Jira, Confluence) no notices found · 14 exploited flaws
- BeyondTrust no notices found · 4 exploited flaws
- Box no notices found
- CDK Global no notices found
- Change Healthcare (UnitedHealth Group) 5 notices or filings
- Check Point no notices found · 5 exploited flaws
- Cisco 1 notice or filing · 101 exploited flaws
- Citrix 1 notice or filing · 27 exploited flaws
- Cleo (file transfer) no notices found · 2 exploited flaws
- Cloudflare no notices found
- Commvault no notices found · 2 exploited flaws
- Conduent 11 notices or filings
- ConnectWise no notices found · 4 exploited flaws
- CrowdStrike no notices found
- CrushFTP no notices found · 3 exploited flaws
- D-Link no notices found · 26 exploited flaws
- DocuSign no notices found
- Drake Software no notices found
- DrayTek no notices found · 5 exploited flaws
- Dropbox 1 notice or filing
- eClinicalWorks no notices found
- F5 1 notice or filing · 8 exploited flaws
- FIS (Fidelity National Information Services) 7 notices or filings
- Fiserv (Clover, First Data) 1 notice or filing
- Fortinet no notices found · 32 exploited flaws
- Fortra (GoAnywhere) no notices found · 4 exploited flaws
- FreshBooks no notices found
- Gladinet (CentreStack) no notices found · 4 exploited flaws
- Global Payments (Heartland) 1 notice or filing
- GoDaddy 4 notices or filings
- Google (Workspace, Chrome, Android) 2 notices or filings · 92 exploited flaws
- Gusto no notices found
- Heartland Payroll Solutions 1 notice or filing
- Henry Schein (Dentrix) 3 notices or filings
- HubSpot no notices found
- ICE Mortgage Technology (Encompass) no notices found
- Insperity no notices found
- Intuit (QuickBooks, TurboTax, Mailchimp) 1 notice or filing
- Ivanti no notices found · 36 exploited flaws
- Jack Henry no notices found
- Juniper Networks no notices found · 8 exploited flaws
- Justworks no notices found
- Kaseya (Datto) no notices found · 3 exploited flaws
- Microsoft (Microsoft 365, Windows) 2 notices or filings · 390 exploited flaws
- MikroTik no notices found · 5 exploited flaws
- Mitel no notices found · 7 exploited flaws
- N-able no notices found · 5 exploited flaws
- NETGEAR no notices found · 8 exploited flaws
- NextGen Healthcare 2 notices or filings
- NinjaOne no notices found
- Okta 1 notice or filing
- Oracle no notices found · 46 exploited flaws
- Oracle Health (Cerner) 2 notices or filings
- Paessler (PRTG) no notices found · 2 exploited flaws
- Palo Alto Networks no notices found · 16 exploited flaws
- PaperCut no notices found · 5 exploited flaws
- Paychex 1 notice or filing
- Paycom no notices found
- Paycor 1 notice or filing
- Paylocity 1 notice or filing
- PayPal 2 notices or filings
- Progress Software (MOVEit, WS_FTP) no notices found · 9 exploited flaws
- QNAP no notices found · 11 exploited flaws
- Quest (KACE) no notices found · 2 exploited flaws
- Reynolds and Reynolds no notices found
- RingCentral no notices found
- Rippling no notices found
- Roundcube Webmail no notices found · 11 exploited flaws
- Sage no notices found
- Salesforce (Slack) no notices found
- Sangoma (FreePBX) no notices found · 4 exploited flaws
- SentinelOne no notices found
- ServiceNow no notices found · 2 exploited flaws
- Shopify no notices found
- SimpleHelp no notices found · 4 exploited flaws
- SmarterTools (SmarterMail) no notices found · 3 exploited flaws
- Snowflake no notices found
- SolarWinds no notices found · 11 exploited flaws
- Solera (DealerSocket) 1 notice or filing
- SonicWall no notices found · 19 exploited flaws
- Sophos no notices found · 7 exploited flaws
- Square (Block) no notices found
- Squarespace no notices found
- Stripe no notices found
- SysAid no notices found · 3 exploited flaws
- TeamViewer no notices found
- Thomson Reuters no notices found
- Toast no notices found
- TP-Link no notices found · 6 exploited flaws
- Trend Micro no notices found · 12 exploited flaws
- TriNet no notices found
- Twilio no notices found
- Ubiquiti no notices found · 4 exploited flaws
- Veeam no notices found · 4 exploited flaws
- Veradigm (Allscripts) 3 notices or filings
- VMware (Broadcom) no notices found · 34 exploited flaws
- WatchGuard no notices found · 4 exploited flaws
- Wix no notices found
- WordPress no notices found · 6 exploited flaws
- Xero no notices found
- Zimbra (Synacor) no notices found · 19 exploited flaws
- Zoho (ManageEngine) no notices found · 9 exploited flaws
- Zoom no notices found
- Zscaler no notices found
- Zyxel no notices found · 13 exploited flaws
Latest breach notices and SEC filings
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 01/13/2025, 10/21/2024.
Source: California Attorney General
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024, 01/13/2025.
Source: California Attorney General
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024, 01/13/2025.
Source: California Attorney General
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024, 01/13/2025.
Source: California Attorney General
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024, 01/13/2025.
Source: California Attorney General
-
Veradigm LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 12/15/2024.
Source: California Attorney General
-
Veradigm LLC filed a data breach notice with the Washington Attorney General. Cause listed: Unauthorized Access. Washington residents affected: 845.
Source: Washington Attorney General (record) · all Washington notices
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024, 01/13/2025.
Source: California Attorney General
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024.
Source: California Attorney General
-
Conduent Business Services, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/21/2024, 01/13/2025.
Source: California Attorney General
Security flaws added to CISA's exploited list in the last 30 days
-
Fortinet Multiple Products Path Traversal Vulnerability (CVE-2025-61624). Added to CISA's list of security flaws known to be exploited by attackers.
-
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (CVE-2026-102764). Added to CISA's list of security flaws known to be exploited by attackers.
-
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589). Added to CISA's list of security flaws known to be exploited by attackers.
-
Palo Alto Networks PAN-OS Code Injection Vulnerability (CVE-2026-0322). Added to CISA's list of security flaws known to be exploited by attackers.
-
Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVE-2026-76519). Added to CISA's list of security flaws known to be exploited by attackers.
-
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935). Added to CISA's list of security flaws known to be exploited by attackers.
-
Microsoft Windows Command Injection Vulnerability (CVE-2026-96951). Added to CISA's list of security flaws known to be exploited by attackers.
-
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779). Added to CISA's list of security flaws known to be exploited by attackers.
-
Fortinet FortiMail Path Traversal Vulnerability (CVE-2026-104286). Added to CISA's list of security flaws known to be exploited by attackers.
-
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVE-2026-76504). Added to CISA's list of security flaws known to be exploited by attackers.
-
Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950). Added to CISA's list of security flaws known to be exploited by attackers.
-
Citrix NetScaler Improper Input Validation Vulnerability (CVE-2026-88771). Added to CISA's list of security flaws known to be exploited by attackers.
-
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88772). Added to CISA's list of security flaws known to be exploited by attackers.
Browse by category
- Payroll and HR
- Accounting and tax software
- Payments and point of sale
- IT management, remote access and backup
- Firewalls, VPNs and routers
- Email, files and business apps
- Websites, domains and hosting
- Business phones and messaging
- Medical and dental practice software
- Car dealer software
- Banking and back-office processing
Data checked Oct 26, 2026.