Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
An unauthorised actor transferred files from Eurail’s network on December 26, 2025. The California notice lists names and passport numbers; the company’s public statement said names, dates of birth, gender, email, home address, phone numbers and passport/ID numbers may be involved.
In early December 2025, Money Mart learned an unauthorised third party had accessed certain files in a third-party application; while the investigation continues, it believes personal information was accessed and acquired.
An unauthorised party obtained images of government IDs that customers provided to verification vendor Veriff, possibly with addresses and dates of birth.
An unauthorised third party accessed some systems and acquired files on October 24, 2025.
A production error at print vendor HC3 may have included account information in another customer’s printed statement.
Around December 24, 2025, the firm identified suspicious activity in its systems; the investigation found an unauthorised third party may have accessed or acquired stored data.
Files may have been accessed or acquired in an August 19, 2025 network disruption.
Systems were accessed and files taken from the network beginning October 11, 2025.
A September 17, 2025 phishing attack let a third party reach servers holding personal data and deploy encrypting malware; personal information may have been accessed.
FFSLA identified a data security incident affecting its network; after document review, on December 5, 2025 it found personal data had been accessed or acquired without authorisation between February 9 and 10, 2025.
Possible data leak: Network data could have been accessed or acquired after unusual activity in early August 2025.
In connection with the Oracle E-Business Suite incident, an unauthorised party temporarily accessed and copied records on an Informa Oracle system, including historical employment information, between August 11 and 18, 2025 (before Oracle disclosed the vulnerability); Informa identified this in November 2025.
On March 27, 2026, an unauthorised third party gained read-only access to an internal analytics system; affected data included contact and account details, order and transaction history and some fitness data.
On May 12, 2026, an unauthorised third party acquired names, contact details, SSNs and brief self-reported health descriptions from the Salesforce instance.
A vulnerability in the web-based File Manager server was exploited to access users’ FTP/SFTP usernames and passwords.
An unauthorised third party accessed parts of the network and stored data between June 11 and 17, 2026; a review of what may have been involved was completed around July 30 and potentially affected people were notified.
An unauthorised individual used phishing to access agent spreadsheets containing names, agency names, licence numbers, FEIN or SSN and roles.
On September 10, 2026, Citizens identified an issue that allowed some data to be accessed by an unauthorised third party; names, SSNs, dates of birth, phones and emails may be involved.
A cyber incident involving Oracle PeopleSoft, used for employee records and payroll, involved unlawful access to data on Nissan’s systems; employee contact, banking, SSN/SIN and other data may have been exposed.
An unauthorised third party acquired certain files from the network starting around February 5, 2026.