Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Around May 23, 2024, the JATC became aware of suspicious activity on certain systems; the investigation found an unauthorised actor copied files between May 17 and 23, 2024.
Possible data leak: Information on the network was subject to unauthorised access in an August 29, 2025 disruption; personal information may have been affected.
A vulnerability in a service provider’s software let an unknown actor access some Gravity files stored in its CRM.
On January 7, 2026, an unauthorised third party accessed names, dates of birth, addresses, phones, emails and financial-planning information.
Possible data leak: On October 20, 2025, Gain FCU became aware of unusual activity in one user’s email account; it found an unauthorised party had accessed the account and cut off the access.
On September 29, 2025, Bayou Media learned of potentially unauthorised access to a web-hosting service it uses to store product data; the data had been received from Parkwest Bicycle Casino (PBC).
Possible data leak: An unauthorised individual accessed the network and may have viewed limited data, likely around September 20, 2023.
Possible data leak: Files may have been accessed and/or acquired in an October 17, 2025 network disruption.
A network disruption was detected November 12, 2025 and on November 20 data was confirmed taken without authorisation.
Possible data leak: Investigation of suspicious email activity on October 9, 2025 found an unauthorised individual may have accessed emails containing personal information.
A then-unknown Oracle EBS zero-day was exploited to download and export information including data about franchisees and brokers.
A single user account was compromised and used to copy files from a shared network drive.
Possible data leak: Vendor Doctor Alliance’s systems were accessed in October–November 2025 and home-health certification and plan-of-care forms for some BAYADA clients may have been accessed or copied.
On November 26, 2025, some network data was accessed and acquired by an unauthorised actor.
The network was accessed October 27–November 11, 2025 and files were copied without permission.
On August 20, 2025, the city identified unauthorised activity on its network; the investigation found an unauthorised person accessed some systems between August 19 and 20, 2025 and acquired copies of some server files.
Unauthorised access to employee email accounts may have exposed names with financial or other information.
In September 2025, an unauthorised person entered the network using a new, unknown flaw in a vendor’s software; files on a few servers may have been viewed or copied between September 17 and 23, 2025, including names, dates of birth, gender and health plan information.
Around March 27, 2025, DH Smith learned an unauthorised actor had gained access to its systems; the investigation found certain network files may have been acquired that day.
Possible data leak: On the morning of January 25, 2026, Take One Systems found an internal server at its Gardena office had been encrypted by ransomware and disconnected the network.