Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
A network disruption in November 2025 was confirmed as a cyber incident; certain files may have been viewed or taken between November 13 and 18, 2025, including data relating to customers’ members.
On April 29, 2026, an Excel file Lockton sent to three RFP participants on behalf of Dexcom inadvertently included additional employee personal information.
Between January 2024 and May 2025, a County employee accessed personal information in electronic systems without a legitimate business reason, including names, case and CIN numbers, dates of birth, SSNs and public assistance benefit information.
Unauthorised access on April 9, 2026 resulted in files containing patient information being acquired. The notice posted June 11 (St. Mary’s patients) states acquisition; the notices posted July 29 say files may have been taken.
An unauthorised actor accessed systems and servers between May 14 and 18, 2025 and removed stored information.
Suspicious activity was found around March 27, 2026; on May 1 the investigation found an unauthorised individual briefly accessed the network and may have accessed files.
Possible data leak: An actor gained access via credential compromise around February 12, 2025; systems held names, addresses, dates of birth, SSNs and licence details. The college says there is no evidence data was removed.
Around February 17, 2026, one employee’s computer was accessed without authorisation; names, addresses, SSNs, dates of birth and licence or ID numbers may have been obtained.
An unauthorised party accessed and copied certain files after unauthorised activity beginning around April 24, 2026.
Files containing personal information may have been acquired by an unauthorised individual who accessed the network around December 25–26, 2025.
Suspicious activity in users’ cloud applications was detected on November 24, 2025; a criminal third party accessed the accounts and downloaded files containing names, account numbers, dates of birth and SSNs or other ID numbers.
Certain files in the network environment were or may have been accessed between June 2 and 4, 2025; names with SSNs or taxpayer IDs may be involved.
A security incident involving infrastructure managed by a third-party technology provider may have exposed personal information.
Certain files were accessed and acquired without authorisation on March 19, 2026.
On December 15, 2025, an unauthorised individual accessed one employee email account for a limited period; certain emails may have been accessed or removed.
Between March 1 and 3, 2026, an unauthorised actor obtained data stored in one of the RXNT solutions used by some customers.
An unauthorised actor accessed a legacy file server managed by a third party between December 8 and 16, 2025 and acquired certain files.
The environment was accessed without authorisation from February 16 to 18, 2026, and certain files were accessed.
On or about March 5, 2026, an unknown actor accessed and acquired data in the email environment, including names with SSNs, dates of birth, medical and health insurance information.
Possible data leak: Systems were accessed without authorisation around October 13, 2025; on May 11, 2026 files subject to unauthorised access or acquisition were found to contain personal information.