Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
In July 2025, a threat actor compromised the internal network, executed ransomware and accessed files containing names, dates of birth and Social Security information.
On June 3, 2025, MSCU learned of a disruption to certain branch computer networks and confirmed data was taken; unencrypted files contained names, SSNs, driver’s licence/state ID numbers and financial account information.
Around November 29, 2025, Hogan became aware of unusual activity; the network was accessed without authorisation at various times between October 25 and November 29, 2025 and certain files were accessed or copied.
On October 6, 2025, Alliance experienced a network disruption; an unknown actor gained access and potentially acquired data including names, SSNs and driver’s licence numbers.
Possible data leak: Around April 7, 2026, unauthorised activity involving one user account was identified; on April 16 a limited amount of PHI was found to have possibly been accessed.
On January 9, 2026, an unauthorised actor gained access to a limited portion of file shares through social engineering and copied certain files.
An employee email account was accessed without authorisation; on April 6, 2026 the firm learned the account, accessed around February 6, 2025, contained limited personal information that may have been accessed or acquired.
Unauthorised activity in Canvas was detected on April 29, 2026. The actor abused a Free-for-Teacher account and vulnerabilities; usernames, email addresses, course names, enrolment information and messages were exfiltrated. A second intrusion on May 7 via another vulnerability accessed no further data, the company says.
In an incident around February 18, 2026, names, addresses, SSNs, driver’s licence numbers and dates of birth may have been accessed or acquired by unauthorised actors.
Certain files stored on the network were viewed and copied by an unauthorised actor on January 19, 2026.
On April 3, 2026, a service provider notified Frontwave that non-public information including members’ names and SSNs was inadvertently disclosed to another credit union.
Around January 30, 2026, a manual error mismatched member IDs and names, so some members received Health Risk Assessment mailers showing another individual’s name, health plan name and programme name.
Around March 24, 2025, GrayRobinson detected unauthorised network access; some files may have been accessed or removed between March 5 and 24, 2025, and on April 13, 2026 they were found to contain personal information.
Unauthorised activity was identified around March 2, 2026; files were copied from the internal network on March 1, 2026.
Certain information may have been accessed by an unauthorised individual on March 6–7, 2026.
Possible data leak: Around April 8, 2026, the firm discovered an unauthorised individual had accessed its tax software system; tax returns were not directly affected, but exposure of personal information could not be ruled out.
On October 29, 2025, the company learned an unauthorised actor had temporary access to a limited portion of its Help Center; email addresses, IP addresses from activity between April 17 and October 29, 2025 and linked public social media information may have been accessed.
Around March 5, 2026, the credit union’s third-party IT provider had a cybersecurity incident that allowed unauthorised actors to use its system to access AAGCU systems; files may have been accessed and copied.
An unauthorised third party gained access to certain systems; information may have been viewed or taken between October 6 and 7, 2025.
On March 20, 2024, Impac identified signs of unauthorised access; an unknown actor may have accessed files and folders with protected information between February 21 and March 20, 2024, including names and Social Security numbers.