Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
The network was accessed without authorisation between June 5 and 9, 2026, and files containing dates of birth, SSNs, financial-account and/or payment-card information were acquired.
Possible data leak: An unauthorised party accessed the network for two days in late May 2025; the hospital believes files were acquired from part of the network but found no definitive proof that files with personal or health information were taken.
Certain files were accessed and acquired without authorisation on April 4, 2026.
Possible data leak: Unusual network activity on June 5, 2026 means employee personal information could have been accessed or downloaded.
Unauthorised access to information on the network occurred between February 3 and 6, 2026; review of the potentially affected data is ongoing.
Unauthorised activity was found on April 16, 2026; a person accessed and downloaded some TriWest information, which may have included names, DoD benefits numbers, ZIP codes and authorisation request types.
A single system was accessed without authorisation and personal information uploaded by users was downloaded around May 1, 2026.
Certain files on the network were accessed and exfiltrated without permission on March 27, 2025; most of the information relates to former employees.
An unknown unauthorised actor accessed certain systems between January 23 and February 20, 2025 and accessed and/or acquired files.
Certain information in its systems was subject to unauthorised access or acquisition around February 3, 2026, which may have included personal data.
Employee W-2s were emailed to two former student workers and were subject to unauthorised access from April 13 to May 21, 2026.
On December 12, 2025, an employee provided a file of unclaimed property compliance records to a threat actor impersonating the California State Controller’s Office.
Between April 17 and 22, 2026, an unauthorised actor accessed certain help-desk tickets that contained users’ information.
Notified of a potential cyber incident on June 16, 2026, the college determined data related to student educational records was potentially copied without authorisation.
A Drug & Occupational Health Screening Unit employee’s account was compromised by sophisticated phishing around November 13, 2025, and the inbox contents were downloaded.
Vendor Xsolis became aware on January 22, 2026 of unauthorised activity from a targeted phishing attack; patient information may have been accessed.
An unauthorised actor accessed certain systems and copied files between August 22 and November 7, 2024.
Malicious activity targeting an employee on March 16, 2026 let an unauthorised third party access IT systems and copy a number of data files.
After unusual activity in February 2025, Alcott found an unauthorised user accessed systems storing personal data; a review completed March 2026 found names, SSNs and dates of birth may have been accessed.
Possible data leak: An unauthorised actor accessed systems from around March 21 to April 6, 2025 and possibly viewed and/or obtained files.