Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Possible data leak: Unauthorized access via a vulnerability in website software. First notice July 24, 2026; investigation results August 7. External exfiltration not confirmed.
An unauthorised actor had access to part of the environment between January 16 and 19, 2026, and may have accessed personal information.
A regional farm plan PDF updated March 30, 2026 left farm-operator names readable. Staff noticed July 17, replaced the file, and disclosed July 23.
An unauthorised actor accessed certain systems from November 6 to 9, 2025 and copied files that could include names, dates of birth, SSNs, medical and health insurance information.
On the morning of July 16, 2026 staff mis-changed admin settings on the web application form so that until just after 13:00 all applicants could view others’ data; a junior high reported it, settings were fixed, and the prefecture disclosed July 22.
Files on part of the corporate network may have been accessed without authorisation between March 20 and 22, 2026.
Certain information may have been accessed and copied without authorisation between April 23 and 28, 2026.
Possible data leak: Unauthorized access to an external cloud share folder confirmed July 15, 2026; first notice July 22. Second notice found credential misuse (acquisition path unknown).
On May 28, 2026, Quontic Bank learned two former employees had retained certain customer records after leaving.
An unauthorised actor accessed or copied certain ZenPatient data between December 5, 2025 and February 12, 2026; personal data may have been included.
On May 22, 2026 a staff member lost a personal USB holding patient data on the way back from a seconded hospital. Transit staff recovered it May 23 and returned it May 27. No leak/misuse found and external exposure is assessed as low, but the hospital disclosed July 17.
In connection with a vulnerability in the Oracle E-Business Suite used for HR, Estée Lauder determined on June 19, 2026 that an unauthorised third party accessed the system around August 9, 2025 and obtained personal information.
Unusual activity was detected on October 9, 2025; the investigation found that certain files were accessed without authorisation between October 1 and 9, 2025, and on June 22, 2026 the company determined personal information was involved.
On July 9, 2026 Nishi Ward staff emailed nursery enrollment/fee files and mis-attached other nurseries’ data to two nurseries; noticed July 10 with deletion confirmed; disclosed July 16.
Possible data leak: Delightful Meruhaikun used for alumni mailers was intruded on June 16, 2026; on June 22 the vendor reported a high likelihood of leakage; disclosed July 16. Vendor root to be linked later.
Possible data leak: Card brands raised concerns Dec 9, 2025; card payments stopped Dec 10 and an investigation began. A vulnerability-driven intrusion had tampered with the payment app, possibly exposing some customers from 2025-04-08 to 2025-12-10. The firm delayed public notice until after investigation results and first published in July 2026 (page id 2026-07-15). No earlier 2025 public disclosure found.
The network was accessed without authorisation between June 5 and 9, 2026, and files containing dates of birth, SSNs, financial-account and/or payment-card information were acquired.
On June 13, 2026 a contracted auditor followed a support-scam fake alert at home and the loaned PC was remotely controlled. Possible exposure of customer data on that PC was disclosed. Device was not on the corporate network.
Unauthorized access to the SMS system confirmed June 24, 2026. An account-management list file from the admin console was exfiltrated. Parent Fabrica HD disclosed July 14; Media4u posted details the same day. 280 illicit SMS sends also confirmed.
Police alerted the firm on July 9, 2026 to a possible leak; external access was cut July 10. First notice July 14 cited about 60k under review. Investigation report confirmed 78,763 leaked records and no card leakage.