Investigating
Catalyst RCM reports possible exposure of lab patient data
Possible data leak: Suspicious activity in a secure file-management system used for billing services to Vikor Scientific and other labs may have affected patient information.
Data breaches
Search incidents by company, country, industry, year and attack method. Review affected data, impact, verification status, company responses and sources.
Confirmed
UA Sprinkler Fitters Local 669 JATC: files copied from computer systems
Around May 23, 2024, the JATC became aware of suspicious activity on certain systems; the investigation found an unauthorised actor copied files between May 17 and 23, 2024.
Investigating
At Home reports possible leak from moving-estimate management system
Unauthorised access may have exposed 408 customer records and information about partners and member firms. Category counts are not added and disclosure is not treated as confirmed.
Investigating
Barnhart Group reports possible personal-data exposure
Possible data leak: Information on the network was subject to unauthorised access in an August 29, 2025 disruption; personal information may have been affected.
Confirmed
Gravity Payments: files accessed via vendor CRM vulnerability
A vulnerability in a service provider’s software let an unknown actor access some Gravity files stored in its CRM.
Confirmed
Edelman Financial Engines: personal and planning data accessed
On January 7, 2026, an unauthorised third party accessed names, dates of birth, addresses, phones, emails and financial-planning information.
Investigating
Gain FCU: member information may have been exposed via compromised email account
Possible data leak: On October 20, 2025, Gain FCU became aware of unusual activity in one user’s email account; it found an unauthorised party had accessed the account and cut off the access.
Investigating
Anabuki Kosan: customer, candidate and employee personal data may have leaked after ransomware
Possible data leak: After confirming ransomware on February 3, 2026 and issuing a first notice on February 4, later investigation found some personal data on a leak site.
Investigating
CyberAgent Dotmoney: other-account data may have been shown due to a settings error (up to 18,936)
Possible data leak: Dotmoney showed other accounts’ data between 15:03 and 16:49 on February 4, 2026; the official blog reported recovery and details. Not a cyber-attack.
Investigating
Bayou Media: Parkwest Bicycle Casino customer data may have been exposed via web-hosting access
On September 29, 2025, Bayou Media learned of potentially unauthorised access to a web-hosting service it uses to store product data; the data had been received from Parkwest Bicycle Casino (PBC).
Investigating
Powerhouse Retail Services reports possible data exposure
Possible data leak: An unauthorised individual accessed the network and may have viewed limited data, likely around September 20, 2023.
Confirmed
Anabuki Housing Service: personal data of 207,773 people leaked after ransomware
After confirming ransomware on February 3, 2026 and issuing a first notice, later investigation confirmed external personal-data leakage; the May 21 sixth report fixed the count at 207,773.
Confirmed
Osaka Kyoiku University: 2,376 student email addresses leaked via misaddressed bulk mail
On January 14 and 21, 2026, bulk student emails used To instead of Bcc so addresses were visible to others; the university disclosed this on February 2.
Investigating
Integral: contact-form personal data may have leaked after website intrusion
After finding malicious redirects on January 23, Integral closed sites and on January 30 reported a possible leak of contact-form data; a April 17 final report found no successful-exfiltration record but could not fully rule it out.
Investigating
Daniel H. Cook Associates reports possible data exposure
Possible data leak: Files may have been accessed and/or acquired in an October 17, 2025 network disruption.
Confirmed
Thornton Plumbing and Heating: data taken in network incident
A network disruption was detected November 12, 2025 and on November 20 data was confirmed taken without authorisation.
Investigating
Ancora reports possible exposure via email access
Possible data leak: Investigation of suspicious email activity on October 9, 2025 found an unauthorised individual may have accessed emails containing personal information.
Confirmed
Anywhere Real Estate: Oracle EBS zero-day used to export data
A then-unknown Oracle EBS zero-day was exploited to download and export information including data about franchisees and brokers.
Confirmed
Fried Frank: files copied from shared drive via compromised account
A single user account was compromised and used to copy files from a shared network drive.
Investigating
BAYADA reports possible client-data exposure at vendor Doctor Alliance
Possible data leak: Vendor Doctor Alliance’s systems were accessed in October–November 2025 and home-health certification and plan-of-care forms for some BAYADA clients may have been accessed or copied.