Bestätigt
Seyfarth Shaw: documents emailed to unauthorised recipient
On August 18, 2026, the firm identified that a small number of documents containing names and SSNs were sent by email to, and acquired by, an unauthorised recipient.
Datenlecks und Sicherheitsvorfälle bei Unternehmen
Suchen Sie nach Unternehmen, Land, Branche, Jahr und Angriffsmethode. Prüfen Sie betroffene Daten, Umfang, Bestätigungsstatus, Maßnahmen und Quellen.
Bestätigt
See’s Candies: files taken in ransomware attack and posted on dark web
Unauthorised access between April 11 and 13, 2026 led to files on some servers being encrypted; the actor acquired certain files beforehand and at least some were made available on the dark web.
In Untersuchung
Revolve reports possible card-data acquisition
On September 11, 2026, an unauthorised actor accessed the shopping platform and may have acquired names, addresses, card numbers and expiry dates.
Bestätigt
Fox Rothschild: files copied and taken after vishing attack
On May 21, 2026, an employee was targeted by a voice-based social-engineering (“vishing”) attack and certain files were copied and taken.
In Untersuchung
Virta Health: files in legacy repository may have been accessed
Unauthorised activity was found in a data repository separate from the production platform; files were potentially accessed between March 19 and 22, 2026, and personal information may have been exposed.
In Untersuchung
City of San José: employee data on lost USB drive may have been exposed
Possible data leak: On January 12, 2026, the city learned a workforce member had lost a USB drive on January 9, 2026 containing information on current and former employees, possibly including names and SSNs.
Bestätigt
Quantum Health: files with insurance and health data acquired
Between May 29 and June 1, 2026, an unauthorised party accessed and acquired files including health-insurance and other information.
Bestätigt
Strategic Education: copies of files taken from servers
An unauthorised actor accessed servers between February 23 and 25, 2026 and took copies of files containing names with SSNs, driver’s licence or passport numbers.
Bestätigt
Cushman & Wakefield: personal data exfiltrated by third party
On April 29, 2026, the firm became aware of unauthorised access by a third party that exfiltrated certain files; review confirmed notified individuals’ data was accessed and exfiltrated.
Bestätigt
Markel: personal data obtained after employees were socially engineered
Between March 17 and 18, 2026, an unauthorised actor deceived two employees via social engineering to access part of Markel’s systems; analysis completed June 29 found personal information was obtained without authorisation.
Bestätigt
Fishbrain: user data incl. password hashes accessed
An unauthorised person accessed an environment hosting user data, including names, email addresses, phone numbers, usernames, country, password hashes with salts and dates of birth; some hashes may be susceptible to decoding.
Bestätigt
Amgen: files with patient personal and health data acquired from cloud environments
Unauthorised access affected Amgen systems and data in third-party-hosted cloud environments; on July 18, 2026, Amgen identified acquisition of files with patients’ names, email, postal address, dates of birth, government ID numbers, medical and insurance information.
In Untersuchung
Medtronic: personal information may have been affected by corporate IT intrusion
An unauthorised actor accessed certain corporate IT systems between April 13 and 19, 2026; personal information may have been affected and was reviewed.
Bestätigt
Del Monte Foods: files acquired in network incident
Files were acquired without authorisation in a February 2026 incident.
Bestätigt
Ameriprise Financial: unauthorised access to stored data and files
An unauthorised individual gained access to certain stored Ameriprise data and files, which was blocked upon discovery on March 18, 2026; no unauthorised transactions or fund movements occurred, per the notice.
Bestätigt
WilmerHale: staff member gave information to impersonator
On May 8, 2026, a staff member mistakenly provided information to an unauthorised third party who misrepresented their identity; the firm says the party did not directly access its systems.
Bestätigt
BAYADA: data copied from company systems
An unauthorised actor accessed certain BAYADA systems and copied data between February 18 and March 2, 2026.
In Untersuchung
Meta: Instagram account-recovery bug may have enabled account access
Between April 17 and May 31, 2026, a bug in the account recovery system may have enabled an unauthorised party to reset passwords and access Instagram accounts, including contact details, date of birth and posts.
Bestätigt
Blank Rome: attorney tricked into uploading files to external drive
On May 21, 2026, a third party posing as IT called an attorney and misled them into uploading files to an external Google Drive account.
In Untersuchung
Kubota North America: HR files accessed; employee data may have been included
Network systems were accessed without authorisation between March 16 and April 20, 2026; on April 30 HR files were found to have been accessed and may have contained employee information.