Datenlecks

Suchen Sie nach Unternehmen, Land, Branche, Jahr und Angriffsmethode. Prüfen Sie betroffene Daten, Umfang, Bestätigungsstatus, Maßnahmen und Quellen.

1169 Ergebnisse
Bestätigt

Sefas Innovation: Frost Bank customer files downloaded from SFTP server

Unauthorised access to the SFTP server used for Frost Bank software support led to intermittent file downloads between December 2025 and April 2026, including tax forms and bill-pay check images with names, addresses, SSNs/TINs, account and loan numbers and dates of birth.

Bestätigt

Boston Capital: files accessed and copied

A sophisticated actor used other legitimate companies’ cloud systems to gain access and accessed and copied files between January 16 and 22, 2026.

Bestätigt

City of Port Hueneme: city data acquired without authorisation

On March 3, 2026, an actor contacted city staff claiming to have accessed city files; the investigation found certain data was acquired without authorisation around February 23, 2026.

Bestätigt

Fluke: third-party application vulnerability exploited to access network

On September 29, 2025, Fluke learned a criminal actor exploited a vulnerability in a third-party application to access a limited segment of its network between August 10 and October 7, 2025; affected data included SSNs, dates of birth and a disability self-identification indicator.

Bestätigt

US Tiger Securities: back-office files encrypted and copied

On July 10, 2025, the firm found files encrypted in the virtual back-office environment shared with TradeUP; some files had been copied by an unauthorised party on July 8–9, 2025.

In Untersuchung

Lumexa Imaging: patient documents may have been taken from vendor network

A vendor investigated suspicious activity in the part of its network dedicated to Lumexa’s affiliated practices; documents with patient information were taken between March 31 and April 9, 2026 and may have been viewed or copied.

Bestätigt

Cresset: client personal information accessed

Suspicious activity was identified on April 6, 2026; names, contact details, dates of birth, SSNs, licence and passport numbers and financial account information were among the data accessed.

Bestätigt

Tulane University: HR files acquired via Oracle E-Business Suite zero-day

A zero-day vulnerability in Oracle E-Business Suite, used for HR information, allowed unauthorised parties to access and acquire files on August 10, 2025; on March 12, 2026 Tulane determined files contained names, SSNs and direct-deposit/banking information.

Bestätigt

MemberSource Credit Union: data taken from branch networks

On June 3, 2025, MSCU learned of a disruption to certain branch computer networks and confirmed data was taken; unencrypted files contained names, SSNs, driver’s licence/state ID numbers and financial account information.