Home / Monthly reports / May 2025
Outages & Breaches: May 2025 in numbers
2 significant outages (0 critical) and 7 data breaches (3 critical) were logged in May 2025. The largest breach by records was Co-op (UK) (6.5M). The most common outage cause was cyberattack (1 of 2). 3 of the incidents mainly affected the UK.
Outages2▼ 7 vs April
Critical outages0wide impact
Breaches7▼ 2 vs April
Critical breaches3sensitive data at scale
Records exposed7.3Mconfirmed or company-reported
Further claimed2.1Mattacker claims, unverified
Outage causes
Named attackers
Most significant incidents
- 19 May 2025Legal Aid Agency hack exposes applicants' criminal recordsLegal Aid Agency · breach · Unknown · 2.1M claimed
- 13 May 2025M&S confirms customer data taken in crippling cyberattackMarks & Spencer · breach · DragonForce / Scattered Spider
- 2 May 2025Co-op member data stolen in DragonForce attackCo-op (UK) · breach · DragonForce / Scattered Spider · 6.5M records
- 28 May 2025Victoria's Secret takes US website down after security incidentVictoria's Secret · outage · Cyberattack
- 28 May 2025LexisNexis Risk Solutions discloses December breachLexisNexis Risk Solutions · breach · Unknown · 364K records
- 22 May 2025Data centre fire knocks parts of X offline for daysX · outage · Power / fire
- 14 May 2025Bribed insiders leak Coinbase customer dataCoinbase · breach · Unknown
- 2 May 2025Dating app Raw exposes street-level user locationsRaw (dating app) · breach · None (exposure)
All 2 outages
- 28 May 2025Victoria's Secret takes US website down after security incidentVictoria's Secret · outage · Cyberattack
- 22 May 2025Data centre fire knocks parts of X offline for daysX · outage · Power / fire
All 7 data breaches
- 28 May 2025LexisNexis Risk Solutions discloses December breachLexisNexis Risk Solutions · breach · Unknown · 364K records
- 19 May 2025Legal Aid Agency hack exposes applicants' criminal recordsLegal Aid Agency · breach · Unknown · 2.1M claimed
- 14 May 2025Bribed insiders leak Coinbase customer dataCoinbase · breach · Unknown
- 13 May 2025M&S confirms customer data taken in crippling cyberattackMarks & Spencer · breach · DragonForce / Scattered Spider
- 2 May 2025Dating app Raw exposes street-level user locationsRaw (dating app) · breach · None (exposure)
- 2 May 2025Co-op member data stolen in DragonForce attackCo-op (UK) · breach · DragonForce / Scattered Spider · 6.5M records
- 1 May 2025Ascension patient data exposed via former partnerAscension · breach · Unknown · 430K records
2025 year to date
Incidents YTD63January to May 2025
Outages YTD27significant outages
Breaches YTD36data breaches
Critical YTD9outages and breaches
Records exposed YTD40.5Mconfirmed or company-reported
| Month | Outages | Breaches | Critical | Running total |
|---|---|---|---|---|
| Jan | 5 | 9 | 0 | 14 |
| Feb | 6 | 6 | 2 | 26 |
| Mar | 5 | 5 | 1 | 36 |
| Apr | 9 | 9 | 3 | 54 |
| May | 2 | 7 | 3 | 63 |
| Total | 27 | 36 | 9 | 63 |
Cite this
Nuffield Consulting, “Outages & Breaches: May 2025 in numbers”, The Daily Tech Wire,published May 2025. https://techwire.nuffieldconsulting.com/reports/2025-05/ (retrieved 15 Nov 2026).
The underlying data for every month is in the CSV download.