Investigating
Zetton’s forty three reports possible leak of 18,553 personal-data records
Unauthorised access to two legacy-mail accounts may have exposed 18,553 personal-data records. The two accounts are not a count of affected people.
Company Data Breaches and Security Incidents
Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Confirmed
Mobilelink: data acquired without authorisation in network incident
Investigation of a November 9, 2025 network disruption found data acquired without authorisation that potentially contained notified individuals’ information.
Investigating
WEG Electric reports possible exposure from insider access to employee records
Possible data leak: A now-terminated employee accessed employee records without a legitimate reason; SSNs and payroll information may have been accessible.
Confirmed
STRATeBEN phishing-related breach accessed health-plan member data
Unauthorised access to an employee Microsoft 365 account resulted in access to group health-plan members’ names, SSNs and dates of birth.
Confirmed
California Online Public Schools: student personal data in posted board packets
Around November 14, 2025, CalOPS learned that Board agenda packets posted on its website included personal information and removed them; packets for meetings from July 2023 to November 2025 included student and parent names, contact details, disability classifications and provider notes.
Investigating
Joyfull: data of 23,585 employees/applicants and relatives may have leaked via contractor Zynas cyber-attack
Contractor Zynas confirmed unauthorised access to a subcontractor hand-off server on January 29, 2026; its March 26 notice says Joyfull employee/applicant/relative data may be in scope (Joyfull’s own PDF returned HTTP404 at collection time, so the contractor official notice is cited).
Confirmed
MXB Battery Operations: stored information accessed during network disruption
Around November 15, 2025, a network disruption occurred; certain information on the network was accessed without authorisation between November 11 and 15, 2025.
Investigating
MoonStar: server intrusion may have exposed online-store customer data for up to about 593,000 people
Possible data leak: First notice Mar 26, 2026 reported suspected server intrusion (no confirmed theft then). Oct 2/15 follow-ups concluded name/address/phone/email/order data likely leaked May 14–19 for up to 593,000 online-store customers. Cards/passwords not stored. First disclosure remains Mar 26.
Investigating
AILCO reports possible loan-applicant data exposure at vendor Kaaj
Credit-analysis vendor Kaaj suffered unauthorised access on January 13, 2026 and some data was copied; applicants’ names, addresses and SSNs may have been exposed.
Investigating
Sato Kogyo: worker and emergency-contact data may have been viewed after jobsite NAS intrusion
Unauthorised access to one jobsite NAS was confirmed on November 5, 2025; Sato disclosed on March 26, 2026 that personal data may have been viewed.
Confirmed
Alliance Industrial Refrigeration: names and SSNs acquired
Suspicious network activity was discovered on December 25, 2025; data was accessed and acquired between December 25 and 26, 2025, including names and SSNs.
Investigating
Nephrology Associates Medical Group: information may have been accessed via employee email
Around May 20, 2025, suspicious activity in the email system was discovered; an unauthorised individual may have accessed information in an employee account.
Investigating
Niigata University Hospital: endocrine/metabolic patient data may have leaked after USB loss
Possible data leak: A USB used in an in-hospital meeting on November 5, 2025 was found missing on November 18; disclosed March 25, 2026.
Investigating
Cetera reports possible exposure via compromised email account
Possible data leak: An employee email account was accessed between July 7 and August 21, 2025 and personal information may have been involved.
Confirmed
Osaka Marathon Organising Committee: volunteer system auth disabled, exposing 4,101 registrants
Before shutdown work a contractor disabled personal authentication so other volunteers could view data from March 16–18, 2026; Osaka Prefecture and Osaka City disclosed on March 25.
Confirmed
Niigata University: student/guarantor roster of 1,478 people misattached to degree-check mail
The Graduate School of Science and Technology misattached an Excel sheet with roster data for 1,478 enrolled students to a degree-content check mail; disclosed March 24, 2026.
Confirmed
Fukushima University: faculty ages left reachable on the web via installation-plan reports
Faculty ages were left in installation-plan reports and pre-replacement CMS files remained searchable; disclosed March 24, 2026.
Confirmed
Hightower: files downloaded via compromised user account
Through a compromised user account, files in the company’s environment were downloaded without authorisation on January 8–9, 2026.
Confirmed
Telecharge accounts accessed in brute-force attack
On January 19, 2026, a brute-force attack accessed some accounts on the Telecharge ticketing site; names and usernames/passwords could have been subject to access.
Investigating
Stockton Cardiology: patient files may have been accessed and removed
On December 15, 2025, suspicious emails sent to several employees were identified; on January 17, 2026, the group found that business and patient-care files may have been accessed and removed, potentially including names, mailing and email addresses and billing records with limited medical information.