Confirmed
Kings United Way: sensitive data posted to sharing platform
Sensitive information including names, dates of birth and SSNs was inadvertently posted to a data-sharing platform.
Data breaches
Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Investigating
Gallagher Transport reports possible data exposure
On January 11, 2026, an unauthorised third party accessed some systems; personal information may be involved.
Investigating
NSE Insurance Agencies reports possible file access and acquisition
Files containing personal information may have been accessed and acquired without authorisation between November 6 and 29, 2025.
Confirmed
Peña & Bromberg: files acquired in intrusion
On May 7, 2026, an unauthorised actor accessed systems and acquired stored files.
Confirmed
Modoc Medical Center: files downloaded in intrusion
An unknown actor accessed some systems and downloaded files between January 19 and 27, 2026.
Investigating
Ridgeway Pharmacy: prescription and card data may have been exposed via website
A vulnerability in the vendor-built pharmacy website let an unknown party access it with elevated privileges; names, addresses, dates of birth, health, insurance, prescription and payment-card data may have been involved.
Confirmed
United Underwriters: files downloaded by intruder
Suspicious activity was identified; the investigation found files were downloaded by an unauthorised actor, with notified individuals’ data downloaded on May 1, 2026.
Confirmed
Fun For Less Tours: files taken in ransomware attack
A ransomware attack discovered October 27, 2025 involved an unauthorised party accessing the network and acquiring files.
Confirmed
LA City Attorney’s Office: data taken from file share via compromised credential
An unauthorised actor used a compromised credential to acquire data from a file share used for civil-litigation discovery between December 28, 2025 and January 22, 2026.
Confirmed
Opportune: intruder accessed systems containing personal data
An unauthorised actor accessed the network around June 22, 2026; the accessed systems contained personal information.
Investigating
Partnership HealthPlan: member data may have been sent to other members
PCP selection forms and welcome packets mailed between May 13 and July 8, 2026 contained other members’ data; names, dates of birth and member IDs may have gone to unrelated members.
Investigating
Call-on-Doc reports possible PHI access and acquisition
Protected health information may have been accessed or acquired during unauthorised network access between December 22, 2025 and January 3, 2026.
Confirmed
Tarter Krinsky & Drogin: information viewed or obtained from servers
Certain servers were accessed without authorisation at various times between July 9 and September 9, 2025, and stored information was viewed or obtained.
Investigating
Alliance Environmental Group reports possible file access or acquisition
Files on company systems may have been accessed or acquired without authorisation between April 24 and May 7, 2026, and contained personal information.
Confirmed
Accela: files copied from secure file transfer portal
An unauthorised actor accessed one of Accela’s secure file transfer portals and acquired copies of files on December 11–12, 2025. Accela is notifying on behalf of government clients.
Investigating
Paradigm Healthcare reports possible access to Medi-Cal member data
During unauthorised access to the local network between October 8 and 15, 2025, names, dates of birth, gender and Medi-Cal member IDs may have been accessed.
Investigating
zHealth: information may have been copied from network
Certain information may have been copied from the network by an unauthorised third party during activity on January 20–21, 2026.
Confirmed
Mercadien: files accessed via exploited vulnerability, affecting client data
Exploitation of a security vulnerability let an unauthorised third party access Mercadien files from about September 17, 2025, including data received from clients such as credit unions.
Investigating
Quatrro reports possible exposure of client employees’ data
Unauthorised access to certain files occurred on November 11–19, 2025; the files may have included information on client companies’ employees and vendors.
Confirmed
Bimbo Bakeries USA: files taken via Oracle EBS zero-day
A zero-day in Oracle E-Business Suite allowed unauthorised parties to acquire stored files, including files with names and SSNs.