Confirmed
EMC Water: files obtained via Oracle EBS flaw
A previously unknown Oracle EBS vulnerability was used to obtain files from the company’s EBS application.
Company Data Breaches and Security Incidents
Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Investigating
Wisner Baum: files with SSNs and medical data may have been obtained
On October 9, 2025, Wisner Baum detected unusual network activity; the investigation found an unauthorised third party accessed the network between October 8 and 9, 2025 and may have obtained certain files.
Confirmed
CHP 11-99 Foundation: staff email account compromised by phishing
Around September 16, 2025, a staff member forwarded a suspicious email to the external provider’s help desk, was told the link was clean, and opened it, leading to compromise; the attacker had full access to the email account, including all folders and attached documents.
Investigating
Itasca Consulting Group reports possible data exposure
Around December 12, 2025, a third party attempted to infiltrate the network and personal information may have been accessed.
Confirmed
MACT Health Board: files with patient SSNs and medical data accessed in disruptive incident
MACT experienced an incident that disrupted its IT systems; the investigation found an unauthorised party accessed some files on its systems between November 12 and 20, 2025.
Investigating
Clawson Honda of Fresno: files may have been accessed or copied
On February 27, 2025, Clawson became aware of suspicious network activity; the investigation found certain files may have been accessed or copied without authorisation between February 27 and 28, 2025.
Investigating
Diversified Benefit Services: SSNs and medical data may have been downloaded from email system
Around August 7, 2025, DBS identified suspicious activity in its email environment; the investigation found an unauthorised actor accessed the email system and potentially downloaded certain emails and files.
Investigating
Chatham Asset Management reports possible personal-data compromise
Possible data leak: A network compromise identified on December 8, 2025 could have compromised personal information.
Investigating
Insurance Office of America: data may have been accessed after phishing-led intrusion
On June 30, 2025, IOA discovered certain internal systems had been affected by a security incident; the investigation found an unauthorised party gained access through a phishing email and data may have been accessed or acquired between June 25 and 30, 2025.
Investigating
Topstep reports possible account access in credential stuffing
A December 14, 2025 credential-stuffing attack may have accessed user accounts.
Investigating
KMS Solutions reports possible unauthorised access or acquisition
Information in systems was subject to unauthorised access or acquisition beginning November 27, 2025; personal data may have been affected.
Investigating
DSS (Next Street) reports possible unauthorised access
Possible data leak: Investigation of unusual activity around August 19, 2025 found information suggesting an unknown actor accessed the network.
Investigating
SPCorp Services: personal information may have been accessed or acquired
Around September 26, 2025, SPCorp experienced unauthorised access to its network; after investigation and document review it determined on January 7, 2026 that personal information may have been accessed and/or acquired.
Confirmed
Memberclose: personal data downloaded from cloud application
On October 29, 2025, a limited amount of data, including names and dates of birth, was downloaded from a cloud application.
Investigating
Goodwin reports possible data access in network intrusion
The network was accessed from about August 28 to September 12, 2025; personal data may have been accessed or acquired.
Confirmed
Monroe University: files with personal data copied after systems intrusion
An unauthorised party accessed certain Monroe University systems between December 9 and 23, 2024 and acquired copies of some network files; on September 30, 2025 the university determined they contained personal information.
Confirmed
SAFE Credit Union: member information unintentionally disclosed
On December 12, 2025, SAFE Credit Union experienced an incident that led to the unintended disclosure of certain member information.
Investigating
Chapman & Associates: personal information may have been accessed in network incident
The firm experienced a network security incident on January 31, 2025; forensic investigation found an unauthorised third party may have accessed certain personal information.
Confirmed
GSPlatformCo: unauthorised access to data in customer information system
GSPlatformCo detected unauthorised access to data hosted on one of the systems it used to store customer information; the data was a snapshot from April 2025, and the company says its current environment is secure.
Investigating
Gym Management Service: network files may have been accessed
On August 16, 2025, the company observed unusual network activity; the investigation found certain files were potentially accessed without authorisation between July 25 and August 26, 2025.