Confirmado
Advantage Media Services: data copied from server environment
In September 2025, suspicious activity was identified; an unauthorised actor briefly accessed the server environment and copied certain data.
Filtraciones de datos
Busca por empresa, país, sector, año y método de ataque. Consulta datos afectados, alcance, estado de verificación, respuestas y fuentes.
Confirmado
illumifin: files with insurer clients’ data copied
On November 4, 2025, illumifin identified unusual network activity; an unauthorised person accessed the network and acquired copies of files, which on November 10 were found to possibly contain information received from or on behalf of its clients.
Confirmado
Mercer Advisors confirms third party obtained client data
Unauthorised access around January 22, 2026 resulted in a third party obtaining names, contacts, SSNs, government IDs, dates of birth, account numbers and, for some, login credentials.
En investigación
Elephants Food Group reports possible data copying in network intrusion
Possible data leak: Activity from January 25 to February 11, 2026 may have resulted in personal information being copied.
En investigación
Advantage Gold reports possible customer-data exposure via firewall flaw
A third-party firewall vulnerability was exploited; names, addresses, contacts, some SSNs and account numbers may have been exposed (unauthorised access confirmed).
Confirmado
Oklahoma Tax Commission: unauthorised access to W-2 and 1099 files in OkTAP
In December 2025, the OTC learned of suspicious activity in the OkTAP taxpayer portal; certain W-2 and 1099 files were accessed without authorisation between July 5, 2024 and December 20, 2025, containing names and SSNs.
Confirmado
Mobilelink: data acquired without authorisation in network incident
Investigation of a November 9, 2025 network disruption found data acquired without authorisation that potentially contained notified individuals’ information.
En investigación
WEG Electric reports possible exposure from insider access to employee records
Possible data leak: A now-terminated employee accessed employee records without a legitimate reason; SSNs and payroll information may have been accessible.
Confirmado
STRATeBEN phishing-related breach accessed health-plan member data
Unauthorised access to an employee Microsoft 365 account resulted in access to group health-plan members’ names, SSNs and dates of birth.
Confirmado
California Online Public Schools: student personal data in posted board packets
Around November 14, 2025, CalOPS learned that Board agenda packets posted on its website included personal information and removed them; packets for meetings from July 2023 to November 2025 included student and parent names, contact details, disability classifications and provider notes.
Confirmado
MXB Battery Operations: stored information accessed during network disruption
Around November 15, 2025, a network disruption occurred; certain information on the network was accessed without authorisation between November 11 and 15, 2025.
En investigación
AILCO reports possible loan-applicant data exposure at vendor Kaaj
Credit-analysis vendor Kaaj suffered unauthorised access on January 13, 2026 and some data was copied; applicants’ names, addresses and SSNs may have been exposed.
Confirmado
Alliance Industrial Refrigeration: names and SSNs acquired
Suspicious network activity was discovered on December 25, 2025; data was accessed and acquired between December 25 and 26, 2025, including names and SSNs.
En investigación
Nephrology Associates Medical Group: information may have been accessed via employee email
Around May 20, 2025, suspicious activity in the email system was discovered; an unauthorised individual may have accessed information in an employee account.
En investigación
Cetera reports possible exposure via compromised email account
Possible data leak: An employee email account was accessed between July 7 and August 21, 2025 and personal information may have been involved.
Confirmado
Hightower: files downloaded via compromised user account
Through a compromised user account, files in the company’s environment were downloaded without authorisation on January 8–9, 2026.
Confirmado
Telecharge accounts accessed in brute-force attack
On January 19, 2026, a brute-force attack accessed some accounts on the Telecharge ticketing site; names and usernames/passwords could have been subject to access.
En investigación
Stockton Cardiology: patient files may have been accessed and removed
On December 15, 2025, suspicious emails sent to several employees were identified; on January 17, 2026, the group found that business and patient-care files may have been accessed and removed, potentially including names, mailing and email addresses and billing records with limited medical information.
En investigación
Check City: files may have been accessed or removed during network disruption
Around April 3, 2025, Check City observed a network disruption caused by unauthorised access; the investigation found some files may have been accessed and/or removed around March 21, 2025, and on February 17, 2026 it determined the files may have contained personal information.
Confirmado
Senior Aerospace Jet Products/Ketema: attacker accessed files with personal data in attempted ransomware incident
In late December 2025, Senior identified and responded to an attempted ransomware incident affecting the Senior Aerospace Jet Products/Ketema environment. It was initially believed to have been blocked with no evidence of data compromise, but forensic analysis completed in late February 2026 found the attacker was able to access files containing personal information.