Bestätigt
KCI Telecommunications: files copied in intrusion
Network segments were accessed on August 22, 2025 and files were copied and potentially viewed.
Datenlecks
Suchen Sie nach Unternehmen, Land, Branche, Jahr und Angriffsmethode. Prüfen Sie betroffene Daten, Umfang, Bestätigungsstatus, Maßnahmen und Quellen.
Bestätigt
Nacca & Capizzi: files copied in network intrusion
An individual accessed the network from November 26 to December 4, 2025 and took copies of files that may contain names, SSNs and driver’s licence numbers.
Bestätigt
FuturHealth: files viewed and copied
Files on the network were viewed and copied by an unauthorised actor between August 8 and 14, 2025.
In Untersuchung
Pyramid Global Hospitality: employee data may have been affected by network event
Possible data leak: Around August 14, 2025, Pyramid became aware of suspicious network activity, initially finding no indication data was affected; on September 30, 2025 it discovered data on its servers was impacted, and determined current and former employee data was likely affected.
In Untersuchung
Evergreen Healthcare Group: files on cloud healthcare platform may have been accessed
Around December 3, 2025, EHG became aware of unauthorised activity in its cloud-based healthcare platform; preliminary investigation found evidence certain files may have been accessed by an unauthorised party.
In Untersuchung
360training (MEC): card data may have been sent to attacker via malicious website script
Possible data leak: Around November 25, 2025, MEC discovered suspicious activity on its website; on November 26 it found an unauthorised party had added a script sending credit card data to a Google Analytics account it controlled.
Bestätigt
Hennessy Advisors: Hennessy Funds investor data accessed and released without authorisation
On March 30, 2025, Hennessy Advisors discovered suspicious activity affecting access to certain systems and data. In late December 2025 it learned that data including personal information of certain Hennessy Funds investors had been accessed and released without authorisation, and on February 5, 2026, after reviewing the released information, it confirmed unauthorised access to notified individuals’ information.
Bestätigt
QualDerm Partners: patient information removed after network intrusion
On December 24, 2025, QualDerm detected unauthorised activity on certain systems; the investigation found an unauthorised actor accessed a limited number of systems between December 23 and 24, 2025 and removed certain stored information.
Bestätigt
Cyrus D. Mehta & Partners: data removed in intrusion
An unauthorised third party accessed systems and removed data; address, date of birth, SSN and passport or other IDs may be involved.
Bestätigt
Beacon Pointe: social engineering led to file theft
Between January 30 and February 1, 2026, an unauthorised actor used social engineering to access part of the IT network and take files.
Bestätigt
Center for Advanced Eye Care: legacy system PHI accessed
Protected health information in legacy systems was subject to unauthorised access.
In Untersuchung
CSA Tax reports possible exposure of names and Social Security numbers
Unauthorised access on December 2, 2025 may have affected stored names and Social Security numbers.
Bestätigt
Too Lost: user data transferred from web application
Unauthorised access and data transfer involving a web application occurred between July 25 and September 2, 2025, including names and contact details such as address and email.
Bestätigt
Choice Hotels: franchisee records accessed via social engineering despite MFA
On January 14, 2026, social engineering gave access to an MFA-protected application with franchisee and applicant records, including names, contacts, SSNs and dates of birth.
Bestätigt
TAK Broadband: files acquired after systems intrusion
On August 11, 2025, TAK became aware of suspicious activity in its network; the investigation found an unauthorised third party accessed certain systems between August 2 and 12, 2025 and acquired certain files.
In Untersuchung
FABRIC TOKYO: other customers’ data may have been shown due to EC settings error
Possible data leak: From about 18:30 to 23:00 on February 18, 2026, a product-detail settings error could show the wrong customer data; disclosed on February 19. Not an intrusion.
Bestätigt
Alpine Lumber ransomware: files viewed and obtained
An unauthorised actor viewed and obtained files on a file server between December 14 and 22, 2025, and devices were encrypted with ransomware.
In Untersuchung
JR Sendai Hospital: patient data of 11,791 people may have leaked after device losses
Possible data leak: After finding missing devices on February 3, 2026, the hospital issued a first notice on February 18 and later updates expanding the affected set to 11,791 people as of the June 15 update.
Bestätigt
JOGMEC: names of 2,246 mining-right holders leaked after ex-staff removal of data
JOGMEC announced on February 17 that a former employee had taken outside personal data obtained while employed.
In Untersuchung
Miyazaki Prefecture: personal data of 102 people may have leaked after accounting documents went missing
Possible data leak: December accounting vouchers being returned to the Minaminaka agriculture office went missing and contain personal data of 102 people; disclosed on February 16.