The data breaches at those five companies affected millions of people, according to news reports. In nearly every instance, their email addresses were exposed; however, a breach at the Health Share of Oregon also exposed protected health information, insurance account numbers, Social Security numbers and more.

According to news reports, those five data breaches led to millions of people having personal information like their email addresses exposed.

"COVID-19 has created an enormous amount of uncertainty and chaos at a scale we've not seen before. People are scared, anxious and desperate for anything that might help them through this troubling time," Van Dyke said in the release. "That makes them incredibly vulnerable."

Van Dyke also identified smaller data breaches at the U.S. Small Business Administration and the Arkansas Division of Workforce Services that posed a "particularly concentrated risk to victims" because the breaches occurred in COVID-19 assistance programs.

Breach Clarity's algorithm "simulates the cybercriminal mindset," Al Pascual, the company's COO, said.

"It considers the newly available, formerly private, data and calculates the attacks, tricks and traps that are most likely to be deployed with that intelligence," Pascual said.