Possible data leak: Unauthorized access to an external cloud share folder confirmed July 15, 2026; first notice July 22. Second notice found credential misuse (acquisition path unknown).
On May 22, 2026 a staff member lost a personal USB holding patient data on the way back from a seconded hospital. Transit staff recovered it May 23 and returned it May 27. No leak/misuse found and external exposure is assessed as low, but the hospital disclosed July 17.
On July 9, 2026 Nishi Ward staff emailed nursery enrollment/fee files and mis-attached other nurseries’ data to two nurseries; noticed July 10 with deletion confirmed; disclosed July 16.
Possible data leak: Delightful Meruhaikun used for alumni mailers was intruded on June 16, 2026; on June 22 the vendor reported a high likelihood of leakage; disclosed July 16. Vendor root to be linked later.
Possible data leak: Card brands raised concerns Dec 9, 2025; card payments stopped Dec 10 and an investigation began. A vulnerability-driven intrusion had tampered with the payment app, possibly exposing some customers from 2025-04-08 to 2025-12-10. The firm delayed public notice until after investigation results and first published in July 2026 (page id 2026-07-15). No earlier 2025 public disclosure found.
On June 13, 2026 a contracted auditor followed a support-scam fake alert at home and the loaned PC was remotely controlled. Possible exposure of customer data on that PC was disclosed. Device was not on the corporate network.
Unauthorized access to the SMS system confirmed June 24, 2026. An account-management list file from the admin console was exfiltrated. Parent Fabrica HD disclosed July 14; Media4u posted details the same day. 280 illicit SMS sends also confirmed.
Police alerted the firm on July 9, 2026 to a possible leak; external access was cut July 10. First notice July 14 cited about 60k under review. Investigation report confirmed 78,763 leaked records and no card leakage.
Possible ransomware infection found July 8, 2026 with immediate server shutdown; first notice July 14. September 8 follow-up disclosed possible personal-data exfiltration and began individual notices.
System outage and server cyberattack confirmed July 13, 2026 (first notice), affecting cold warehouses and frozen-food shipping. Seventh notice (Sep 18) confirmed personal-data leakage. disclosedOn stays the first notice date.
Possible data leak: First notice Jul 13, 2026 reported ransomware on some servers. Second notice (Sep 30) details Jul 8 intrusion / Jul 10 encryption of files including current/former students, applicants, guardians, staff and retirees. No clear exfiltration traces, but log deletion prevents fully ruling out leakage. No count. First disclosure remains Jul 13.
Possible data leak: Nippon TeleNet, which handled fax sending in 2014, was attacked on March 9, 2026; on June 19 it told Lind that 2014-provided customer data remained in the hit environment. Disclosed July 13. Vendor investigation has not confirmed exfiltration.
On April 14, 2026 Osaka Prefectural Kogei HS (full-time) found a CD of FY2025 student ID-photo data missing; it was not recovered. Checkout log rules had not been followed. Prefecture press release July 10.
Possible data leak: Vendor Nostrum’s SMART SPI server was intruded, encrypted and backdoored on April 17, 2026; outage noticed April 19. No direct theft evidence, but a leak-site posting threat means exposure cannot be ruled out; disclosed July 9.
On July 2, 2026 the moving CRM database was deleted after unauthorized access. Attackers demanded crypto and claimed they would publish data; technical confirmation of exfiltration was not possible; disclosed July 9. PPC and police notified July 8.
Possible data leak: Third-party intrusion into the official online shop was found; fearing partial personal-data exposure, card payments were paused and an external investigation begun. Details still unknown; a later update also paused direct sales.
Around 15:00 on July 1, 2026 a vendor mis-sent emails to some GR Yaris special-edition lottery applicants containing another waitlisted person’s name and related fields; disclosed July 8. Winners’ data out of scope.
Possible data leak: On June 26, 2026 a faculty member clicked a scam site while working at home and allowed remote access. The PC held names/addresses of students, faculty and society members; disclosed July 8. Forensics planned; no harm confirmed yet.
On June 18, 2026 staff mis-attached a file with non-shareable personal data to a customer-opinion email for agencies. After a recipient report and follow-up checks, three agencies were affected; disclosed July 7. Deletion at recipients confirmed.
July 7, 2026 first notice said the firm was investigating press reports. September 14 follow-up confirmed a Tama-branch ex-agent had taken customer forms while employed and lost them after leaving in March 2026; discovered via a June finder report. Forms recovered.