http://www.privacyrights.org/data-breach Maybe not a comprehensive list, but a good indication of how wide-spread these breaches have gone. TIA lives on...
http://www.aclu.org/technology-and-liberty/qa-pentagons-total-information-awareness-program516,992,106 RECORDS BREACHED
from 2,415 DATA BREACHES made public since 2005
Is the Chronology of Data Breaches a complete listing of all breaches?
No, it is not a complete listing of breaches. The list is a useful indication of the types of breaches that occur, the categories of entities that experience breaches, and the size of such breaches. But the list is not a comprehensive listing. Reported incidents affecting more than nine individuals from an identifiable entity are included. Breaches affecting nine or fewer individuals are included if there is a compelling reason to alert consumers. Most of the information is derived from the Open Security Foundation list-serve (see below) which is in turn derived from verifiable media stories, government web sites/pages, or blog posts with information pertinent to the breach in question. If a breached entity has failed to notify its customers or a government agency of a breach, then it is unlikely that the breach will be reported anywhere.