Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Possible data leak: An unauthorised individual accessed data within the network from June 8 to 12, 2026; the data may include names with SSNs and other elements.
An unknown actor accessed files within the network between August 8 and 27, 2025; on July 16, 2026 personal information was found in files that may have been accessed.
Investigation of a network disruption first learned of on November 11, 2025 found files may have been accessed or acquired; on June 8, 2026 patients’ or employees’ personal information was found in them.
On September 19, 2025, the firm discovered that an unauthorised user had accessed its network earlier that day; Social Security numbers, other government ID numbers, names and bank account information may have been accessed.
Unauthorised code on the website checkout/payment page may have captured details entered, including names and payment card information, at times between May 22 and June 10, 2026.
An unauthorised actor accessed the network environment; on July 2, 2026 the company found that systems accessed between December 3 and 11, 2025 contained personal information.
On June 2, 2026, the Department learned of anomalous unauthorised activity involving an employee and determined a data file with names, addresses, CIN or Medi-Cal numbers, phone numbers and IHSS case numbers was accessed on August 26, 2025.
On April 23, 2026, an unauthorised actor accessed the network and acquired certain files.
Unauthorised code placed on the Sports Affinity platform checkout captured payment card information entered from around May 8, 2026.
Suspicious activity was identified on March 26, 2026; on June 28 the investigation found an unauthorised individual may have accessed files and folders holding personal information.
Systems were accessed without authorisation on February 12, 2026, detected and contained on February 13; affected files were identified around March 17 and personal information may be involved.
On May 18, 2026, Bridgeway learned of a potential employee email compromise and system access; access occurred March 5 to May 19, and personal information may have been involved.
An unauthorised actor had access to part of the environment between January 16 and 19, 2026, and may have accessed personal information.
An unauthorised actor accessed certain systems from November 6 to 9, 2025 and copied files that could include names, dates of birth, SSNs, medical and health insurance information.
Files on part of the corporate network may have been accessed without authorisation between March 20 and 22, 2026.
Certain information may have been accessed and copied without authorisation between April 23 and 28, 2026.
On May 28, 2026, Quontic Bank learned two former employees had retained certain customer records after leaving.
An unauthorised actor accessed or copied certain ZenPatient data between December 5, 2025 and February 12, 2026; personal data may have been included.
In connection with a vulnerability in the Oracle E-Business Suite used for HR, Estée Lauder determined on June 19, 2026 that an unauthorised third party accessed the system around August 9, 2025 and obtained personal information.
Unusual activity was detected on October 9, 2025; the investigation found that certain files were accessed without authorisation between October 1 and 9, 2025, and on June 22, 2026 the company determined personal information was involved.