[{"name":"Academic records","description":"School or university records including grades, transcripts, enrolment history, and course information tied to an individual student."},{"name":"Account balances","description":"The current monetary balance held in a user's financial or platform account, such as a bank balance, wallet balance, or store credit."},{"name":"Address book contacts","description":"The names, phone numbers, and emails of people stored in a user's personal contact list typically harvested from a device or app."},{"name":"Age groups","description":"A broad age bracket (e.g. 18–24, 35–44) rather than an exact age. Used for demographic categorisation."},{"name":"Ages","description":"The user's exact age in years at the time of the breach, as distinct from a full date of birth."},{"name":"AI prompts","description":"The text instructions or queries a user submitted to an AI system, which may reveal intentions, interests, or other sensitive content."},{"name":"Appointments","description":"Scheduled meetings or bookings such as dental, medical, or professional appointments linked to the individual."},{"name":"Apps installed on devices","description":"A list of software applications installed on a user's phone or computer, which can reveal habits, preferences, and sensitive tool use."},{"name":"Astrological signs","description":"The user's star sign, typically derived from their birth date a low-sensitivity field often collected by dating or lifestyle platforms."},{"name":"Audio recordings","description":"Captured voice or sound recordings made on or from a user's device, often collected covertly by spyware or monitoring software."},{"name":"Auth tokens","description":"Cryptographic credentials (e.g. session tokens, OAuth tokens) used to authenticate a user without a password possession grants account access."},{"name":"Avatars","description":"An image chosen by the user to represent themselves on a platform may be an illustration, icon, or photo, not necessarily their likeness."},{"name":"Bank account numbers","description":"The full or partial account number associated with a user's bank account, enabling potential financial fraud or direct debit abuse."},{"name":"Beauty ratings","description":"A numerical or categorical assessment of physical appearance, typically assigned by or within a dating platform."},{"name":"Biometric data","description":"Unique physical identifiers such as fingerprints, iris scans, or facial recognition data used to verify a person's identity."},{"name":"Bios","description":"A short free-text self-description written by a user for their profile, often disclosing interests, profession, or personal details."},{"name":"Browser user agent details","description":"The technical string a browser sends to websites identifying its type and version can be used to fingerprint a specific user's device."},{"name":"Browsing histories","description":"A record of websites visited by a user, typically collected covertly by spyware or monitoring software installed on their device."},{"name":"Buying preferences","description":"Stated or inferred consumer preferences what kinds of products a person likes to buy typically compiled by data brokers."},{"name":"Car ownership statuses","description":"Whether the user owns a car, often collected by dating or lifestyle services as a proxy for socioeconomic status."},{"name":"Career levels","description":"The user's seniority level in their profession (e.g. entry-level, mid-level, executive), typically from a job site or professional network."},{"name":"Cellular network names","description":"The name of the mobile carrier a user's SIM is registered with (e.g. Verizon, Vodafone), extracted from device metadata."},{"name":"Charitable donations","description":"Records of donations made to charitable causes, including amounts and organisations, which may reveal political or religious affiliations."},{"name":"Chat logs","description":"Transcripts of real-time conversations held on a platform or messaging app, potentially containing highly personal or private exchanges."},{"name":"Citizenship statuses","description":"Whether someone holds citizenship of a particular country, including dual citizenship or residency status."},{"name":"Clothing sizes","description":"A user's garment measurements (e.g. shirt or dress size), collected at point of purchase or from a profile."},{"name":"Comments","description":"Public or semi-public text notes posted by users on a platform such as replies to content or product reviews."},{"name":"Company names","description":"The name of the organisation a person works for or represents, often from a business directory or professional profile."},{"name":"Credit card CVV","description":"The 3 or 4 digit security code on the back of a credit card when combined with card number and expiry, enables fraudulent card-not-present transactions."},{"name":"Credit cards","description":"Full payment card details including card number, expiry date, and cardholder name sufficient to conduct fraudulent transactions."},{"name":"Credit scores","description":"A numerical rating of a person's creditworthiness, based on their borrowing and repayment history, from a credit bureau."},{"name":"Credit status information","description":"Qualitative or categorical information about a person's credit standing such as whether they are in default, have arrears, or are creditworthy."},{"name":"Cryptocurrency wallet addresses","description":"The public blockchain addresses used to send or receive cryptocurrency can be used to trace transaction history on the blockchain."},{"name":"Customer feedback","description":"Comments, ratings, or survey responses submitted by customers about a product or service may include personal opinions or grievances."},{"name":"Customer interactions","description":"Logged contact between a customer and a business including calls, chat sessions, or in-person visits often held in a CRM system."},{"name":"Customer service records","description":"Detailed records of support interactions including complaint history, case notes, and resolutions may contain sensitive account or personal information."},{"name":"Dates of birth","description":"A person's full birth date (day, month, year), one of the most commonly exposed fields and widely used to verify identity."},{"name":"Deceased date","description":"The recorded date of death for a deceased individual, typically held in government or utility databases alongside living residents."},{"name":"Deceased statuses","description":"A flag indicating whether the individual is deceased, typically found in government, property, or population registry databases."},{"name":"Delivery instructions","description":"Specific notes attached to a delivery order (e.g. \"leave at back door\"), revealing home access information or routines."},{"name":"Device information","description":"Metadata about a user's hardware, including device model, operating system version, and manufacturer used to identify and fingerprint a device."},{"name":"Device serial numbers","description":"The unique manufacturer-assigned identifier for a specific hardware device, enabling it to be tracked across services or linked to a person."},{"name":"Device usage tracking data","description":"Records of how and when a user interacts with their device app usage, screen time, or activity logs typically from monitoring software."},{"name":"Disabilities","description":"Information about physical or mental health impairments disclosed by or recorded about a user, often from healthcare or university records."},{"name":"Display names","description":"The publicly visible name a user chose to show on a platform, which may differ from their legal name."},{"name":"Drinking habits","description":"Information about a person's alcohol consumption such as whether they drink, how often, and how much typically from dating profiles."},{"name":"Driver's licenses","description":"A government-issued driving credential containing name, address, date of birth, and licence number a key identity document."},{"name":"Drug habits","description":"Information about a person's use of recreational or prescription drugs, typically self-disclosed on a dating or lifestyle platform."},{"name":"Earnings","description":"The amount of money a user earned through a specific platform (e.g. an influencer earnings platform), as distinct from general income or salary."},{"name":"Eating habits","description":"Dietary patterns or preferences (e.g. vegetarian, calorie tracking), typically self-reported on diet, fitness, or dating platforms."},{"name":"Education levels","description":"The highest level of schooling a person has completed (e.g. high school, bachelor's degree, postgraduate), often from a profile or job application."},{"name":"Email addresses","description":"The primary digital contact identifier present in nearly every breach and used to send phishing, spam, and credential stuffing attacks."},{"name":"Email messages","description":"The actual content of emails sent or received highly sensitive, potentially containing private correspondence, documents, or credentials."},{"name":"Employers","description":"The name of the organisation where a person works, sourced from a job site, social network, or HR record."},{"name":"Employment statuses","description":"Whether a person is currently employed, unemployed, self-employed, or retired, typically from a financial or dating service."},{"name":"Encrypted keys","description":"Cryptographic private keys stored in protected form if the encryption is weak, these can be cracked to gain access to wallets or accounts."},{"name":"Ethnicities","description":"Self-identified or recorded ethnic background of a person, a sensitive category under most privacy regulations."},{"name":"Family members' names","description":"The names of a person's relatives children, parents, siblings which may have been collected from a profile, court record, or CRM."},{"name":"Family plans","description":"Whether a person has or wants children, or their plans regarding starting a family typically from dating platforms."},{"name":"Family structure","description":"Details about a person's household composition whether they live with a partner, have dependants, or are a single parent."},{"name":"Financial investments","description":"Information about stocks, funds, or other investment holdings held by a person, typically from a financial or data enrichment source."},{"name":"Financial transactions","description":"A record of money exchange to or from the owner's account not just purchases, but withdrawals, transfers, and cashout histories."},{"name":"Fitness levels","description":"Self-reported or measured physical fitness information, typically from a dating or health platform (e.g. \"athletic\", \"average\")."},{"name":"Flights taken","description":"A history of air travel taken by a person, including routes and dates, typically from a travel booking or loyalty service."},{"name":"Forum posts","description":"The text of messages a user has posted on a public or private online discussion board, potentially revealing opinions, identity, or affiliations."},{"name":"Genders","description":"The user's self-identified or recorded gender one of the most commonly exposed demographic fields across all breach types."},{"name":"Geographic locations","description":"A non-precise location indicator such as city, region, or country used when no street-level physical address is available."},{"name":"Government issued IDs","description":"Full national identity documents such as passport numbers, national ID card numbers, or Social Security equivalents."},{"name":"Health insurance information","description":"Details of a person's health insurance provider, plan, policy number, or coverage sensitive medical-adjacent data."},{"name":"Historical passwords","description":"Previously used passwords that have since been changed still valuable for credential stuffing if reused on other services."},{"name":"HIV statuses","description":"A person's HIV-positive or negative status among the most sensitive health data due to the profound privacy and discrimination risks."},{"name":"Home ownership statuses","description":"Whether a person owns or rents their home, typically sourced from property, credit, or data enrichment records."},{"name":"Homepage URLs","description":"A personal or portfolio website URL associated with a user's account, as distinct from a general social media profile link."},{"name":"IMEI numbers","description":"The unique 15-digit hardware identifier for a mobile handset can be used to track or block a specific phone."},{"name":"IMSI numbers","description":"The unique identifier stored on a SIM card that links it to a mobile network subscriber used for network-level tracking and carrier identification."},{"name":"Income levels","description":"A person's approximate annual income range, typically self-reported on a dating site, financial platform, or collected by a data broker."},{"name":"Instant messenger identities","description":"Usernames or IDs for real-time messaging platforms (e.g. Skype, WhatsApp, Telegram) enables direct contact outside the breached service."},{"name":"IP addresses","description":"The network address from which a user connected can be used to approximate location and is a persistent identifier in many services."},{"name":"IQ levels","description":"A self-reported or claimed intelligence quotient score, typically collected on niche dating or personality-focused platforms."},{"name":"Job applications","description":"The content of applications submitted by a person for employment including cover letters, CVs, and personal statements."},{"name":"Job titles","description":"The specific role or position a person holds in their organisation (e.g. \"Senior Engineer\", \"Marketing Manager\"), from a profile or HR record."},{"name":"Language preferences","description":"The user's preferred language for content or communications, typically stored in a CRM or app account setting."},{"name":"Latitude and longitude pairs","description":"Precise GPS coordinates identifying an exact geographic position more specific than a city-level location and tied to a point on a map."},{"name":"Licence plates","description":"The registration plate number of a vehicle owned or used by a person can link a person to a vehicle and its movements."},{"name":"Living costs","description":"Information about a person's monthly expenses or cost of living, typically from a financial or credit service."},{"name":"Loan information","description":"Details of loans held by a person including loan type, amount, lender, and repayment status."},{"name":"Login histories","description":"A timestamped log of when and from where a user has previously logged into a service."},{"name":"Loyalty program details","description":"Membership information for reward or points programs including membership number, tier, and sometimes transaction history."},{"name":"MAC addresses","description":"The hardware identifier for a network interface card can be used to identify and track a specific device on a network."},{"name":"Marital statuses","description":"Whether a person is single, married, divorced, widowed, or in a domestic partnership often collected by dating or financial services."},{"name":"Military service","description":"Information about a person's history of service in the armed forces, including branch, rank, or service period."},{"name":"Mnemonic phrases","description":"A sequence of words (seed phrase) used to back up and recover a cryptocurrency wallet exposing this gives complete access to the associated funds."},{"name":"Mothers maiden names","description":"The family surname of a person's mother before marriage commonly used as a security question answer, making it a credential risk."},{"name":"Names","description":"A person's first and/or last name among the most commonly exposed fields in data breaches, enabling identity attribution."},{"name":"Nationalities","description":"The country or countries of which a person holds citizenship, typically from a government, travel, or financial record."},{"name":"Net worths","description":"An estimate of a person's total financial assets minus liabilities, typically from data brokers or financial profiling services."},{"name":"Nicknames","description":"Informal or shortened names used by a person in place of or alongside their legal name, often from dating or social platforms."},{"name":"Occupations","description":"A person's general type of work or profession (e.g. \"teacher\", \"nurse\"), which may be distinct from a specific job title."},{"name":"Parenting plans","description":"Details about custody arrangements or co-parenting agreements, typically self-reported on a dating platform to indicate childcare obligations."},{"name":"Partial credit card data","description":"Masked card details such as the last 4 digits or card type insufficient to transact, but confirms a payment relationship exists."},{"name":"Partial dates of birth","description":"An incomplete birth date such as birth year or month and year that narrows identity without revealing the full date."},{"name":"Partial government issued IDs","description":"A truncated form of a national ID such as the last 4 digits of a Social Security number insufficient on its own but useful in combination."},{"name":"Partial phone numbers","description":"A masked phone number (e.g. last 4 digits) that confirms a phone is associated with an account without exposing the full number."},{"name":"Passport numbers","description":"The unique identifier on a person's travel passport a high-value identity document used for international travel and verification."},{"name":"Password hints","description":"A plaintext clue associated with a password (e.g. \"my dog's name\") that can directly reveal or narrow down the actual password."},{"name":"Password strengths","description":"A rating of how strong a user's password was (e.g. \"weak\", \"strong\") can indicate ease of cracking even without revealing the password itself."},{"name":"Passwords","description":"The actual authentication secret for an account plain text or hashed the most direct enabler of account takeover."},{"name":"Payment histories","description":"A log of past transactions showing what was paid, when, and to whom similar to a bank statement for a specific platform."},{"name":"Payment methods","description":"The type of payment instrument used (e.g. credit card, PayPal, bank transfer) without necessarily disclosing full payment details."},{"name":"Personal descriptions","description":"Free-text self-descriptions beyond a short bio may include physical appearance, personality traits, or lifestyle details, typically from dating sites."},{"name":"Personal health data","description":"Medical information about a person including diagnoses, conditions, medications, or health history among the most sensitive data categories."},{"name":"Personal interests","description":"Hobbies, leisure activities, or topics a person is interested in, typically self-reported on a dating, social, or lifestyle platform."},{"name":"Phone numbers","description":"A person's mobile or landline contact number enables direct contact, SIM swapping attacks, and identity verification bypass."},{"name":"Photos","description":"Images uploaded by or taken of the user from spyware captures these may be private device photos rather than profile pictures."},{"name":"Physical addresses","description":"A person's residential or mailing address including street, city, and postcode one of the most invasive fields due to enabling real-world contact."},{"name":"Physical attributes","description":"Measurable body characteristics such as height, weight, build, or eye colour typically collected by dating or government databases."},{"name":"PINs","description":"Numeric personal identification numbers used to authenticate access to accounts, cards, or devices equivalent in risk to a password."},{"name":"Places of birth","description":"The city, region, or country where a person was born used in identity verification and sometimes as a security question answer."},{"name":"Political donations","description":"Records of financial contributions made to political parties or candidates sensitive data that reveals political affiliations."},{"name":"Political views","description":"A person's stated or inferred political beliefs or party affiliations, typically self-disclosed on a dating or survey platform."},{"name":"Private messages","description":"Direct messages sent between users on a platform highly sensitive personal communications not intended to be public."},{"name":"Professional skills","description":"The specific technical or professional competencies listed on a profile (e.g. \"Python\", \"project management\"), typically from a job site."},{"name":"Profile photos","description":"An image used to represent a person on a platform whether stored as a file or a link to a file, it enables anyone with the data to see the person's likeness."},{"name":"Profile statistics","description":"Public engagement or activity metrics associated with an account (e.g. follower counts, play counts, post totals) typically not sensitive in isolation."},{"name":"Purchases","description":"Records of specific items or services bought through a platform, including product names, quantities, and order details."},{"name":"Purchasing habits","description":"Patterns of buying behaviour inferred from transaction history what categories of products someone typically buys, and how often."},{"name":"Races","description":"A person's self-identified or recorded racial classification, a sensitive demographic category often collected by dating or government services."},{"name":"Recovery email addresses","description":"A secondary email address designated for account recovery can be used to intercept account reset flows."},{"name":"Relationship statuses","description":"Whether a person is single, in a relationship, engaged, married, or separated typically from a dating or social profile."},{"name":"Religions","description":"A person's stated religious beliefs or affiliation a sensitive category under most privacy frameworks, self-reported on dating or community platforms."},{"name":"Reward program balances","description":"The points, miles, or credits accumulated in a loyalty rewards scheme financial value that could be targeted for fraud."},{"name":"Salutations","description":"A formal title prefix (e.g. Mr, Mrs, Dr, Prof) associated with a person's name may indirectly reveal gender or professional status."},{"name":"School grades (class levels)","description":"A student's academic grade level or year group (e.g. Grade 9, Year 11) typically from an educational platform for minors."},{"name":"Security questions and answers","description":"Secret question-and-answer pairs used as a secondary authentication mechanism the answers are often plain text and reusable across services."},{"name":"Sexual fetishes","description":"Self-disclosed sexual interests and kinks, typically from adult dating platforms among the most sensitive personal data due to discrimination and blackmail risks."},{"name":"Sexual orientations","description":"A person's self-identified sexual identity (e.g. gay, bisexual, straight) highly sensitive data that may expose individuals to discrimination or harm."},{"name":"Shipment tracking numbers","description":"The carrier-assigned tracking identifiers for parcels sent to or by a person links names and addresses to delivery events."},{"name":"Smoking habits","description":"Whether and how much a person smokes, typically self-reported on dating, health, or insurance platforms."},{"name":"SMS messages","description":"The text content of SMS messages sent or received on a person's device, typically captured by spyware or telco-side data."},{"name":"Social connections","description":"A record of who a person is connected to or friends with on a platform reveals relationships and social network structure."},{"name":"Social media profiles","description":"Links or identifiers for a person's accounts on social networks (e.g. Twitter, Facebook, Instagram) enables cross-platform attribution."},{"name":"Social security numbers","description":"The US government-issued 9-digit identifier used for tax, employment, and benefits one of the most sensitive identity fields in US breaches."},{"name":"Socioeconomic levels","description":"A categorisation of a person's economic class or social standing (e.g. low/middle/high income tier), typically from a financial or enrichment dataset."},{"name":"Spoken languages","description":"The languages a person speaks or indicates proficiency in, typically from a profile, CRM, or language-learning platform."},{"name":"Spouses names","description":"The name of a person's husband, wife, or domestic partner, often collected by financial, hotel, or government record systems."},{"name":"Support tickets","description":"Records of help requests submitted by a user, which may contain account details, complaints, and sensitive personal context."},{"name":"Survey results","description":"Responses given by a person to survey questions may contain opinions, health data, or other sensitive self-reported information."},{"name":"Tattoo status","description":"Whether a person has tattoos typically self-reported on a dating platform as a physical attribute or lifestyle indicator."},{"name":"Taxation records","description":"Official tax filings or records held by a government revenue authority, containing income, deductions, and financial details."},{"name":"Telecommunications carrier","description":"The name of the mobile or internet service provider a person subscribes to can be used to facilitate SIM-swap attacks."},{"name":"Time zones","description":"The time zone a user's account is set to a minor piece of location metadata that can narrow geographic region."},{"name":"Travel habits","description":"General patterns of how frequently and where a person travels, typically self-disclosed on dating or lifestyle platforms."},{"name":"Travel plans","description":"Specific future travel itineraries including destinations and dates, typically from a booking or hotel management platform."},{"name":"User statuses","description":"A platform-assigned or self-set status indicator for an account (e.g. active/inactive, online/offline, verified/banned)."},{"name":"User website URLs","description":"A personal or business website URL linked from a user's profile may reveal identity, profession, or other online presence."},{"name":"Usernames","description":"The handle or login name chosen by a user for a platform enables cross-platform attribution when the same name is reused."},{"name":"Utility bills","description":"Records of electricity, water, gas, or other utility accounts and payment history, typically from a municipal or government system."},{"name":"Vehicle details","description":"General information about vehicles associated with a person, including make, model, year, and colour."},{"name":"Vehicle identification numbers (VINs)","description":"The unique 17-character code permanently assigned to a vehicle can be used to trace ownership history and service records."},{"name":"Vehicle registration plates","description":"The alphanumeric licence plate assigned to a vehicle by a government authority can be used to trace a vehicle to its registered owner."},{"name":"VIP statuses","description":"An indicator that a customer or guest holds premium, high-value, or VIP status with a service often held in CRM or hotel systems."},{"name":"Warranty claims","description":"Records of product warranty requests submitted by a customer, including device details, fault descriptions, and contact information."},{"name":"Website activity","description":"Logs of what a user did on a website pages visited, searches made, time spent used for analytics but revealing of habits and interests."},{"name":"Work habits","description":"Patterns of professional behaviour or working style, typically self-disclosed on a dating platform as a lifestyle indicator."},{"name":"Years of professional experience","description":"The number of years of relevant work experience a person claims, typically from a job site or professional profile."}]