Elixir Medical reports possible exposure of HR data
An unauthorised party accessed the network on July 20–21, 2026; files with employees’ names, SSNs and other HR data may have been involved.
Busca por empresa, país, sector, año y método de ataque. Consulta datos afectados, alcance, estado de verificación, respuestas y fuentes.
An unauthorised party accessed the network on July 20–21, 2026; files with employees’ names, SSNs and other HR data may have been involved.
Suspicious network activity was identified around March 18, 2026; certain files may have been accessed and/or acquired without authorisation.
Around May 25, 2026, a security incident in its AWS environment occurred; files containing personal information may have been subject to unauthorised access or acquisition.
Suspicious network activity was identified around March 27, 2026; certain files may have been downloaded without authorisation.
Possible data leak: A network disruption occurred around November 15, 2025; information on the network was subject to unauthorised access between October 27 and November 15, 2025.
Suspicious automated access tied to one account on a third-party e-signature cloud platform led to files being downloaded from a single ISC workspace between June 8 and 11, 2026.
On May 7, 2026, Indico determined a cybersecurity incident may have involved unauthorised access to online repositories with customer information; names, SSNs, account numbers and institution names may have been present.
Possible data leak: LACMA detected suspicious activity on July 11, 2025; an unauthorised third party accessed part of the network from July 7 to 11, 2025, and impacted files contained personal information.
Files on management company Genesis’s network holding Kern Psychiatric Health and Wellness Center data were accessed without authorisation; names, SSNs, ID numbers, dates of birth and diagnoses may have been impacted.
An unknown actor accessed certain systems before March 26, 2025 and again between June 8 and 11, 2025, and accessed and/or copied information.
Around May 20, 2025, the credit union learned a former employee potentially accessed and/or exfiltrated a limited number of documents without authorisation.
Around July 24, 2026, SIU found files containing personal information in its Oracle E-Business Suite environment may have been subject to unauthorised access or acquisition between July 10 and August 16, 2025.
Data including personal and health information received by SSMC was acquired without authorisation from a third-party vendor’s systems between November 27 and 30, 2025.
An unknown actor accessed certain servers between April 8 and 9, 2026 and accessed or acquired files; information provided during employment may have been present.
Possible data leak: Unauthorised network activity was identified on August 12, 2025; files subject to the activity could have included names with dates of birth, SSNs and some health-related information.
Around May 5, 2026, the firm learned a limited number of fraudulent tax returns were filed; the investigation found an unauthorised actor may have had access to personal information.
Between December 22 and 30, 2025, an unauthorised individual viewed and obtained certain files on the network.
Suspicious activity was detected on June 21, 2026; files were acquired without authorisation at that time and may have included names and SSNs.
After being contacted by an actor claiming access, the practice found its network was accessed from January 16, 2025 and data acquired, potentially including patient chart information, licence numbers and contact details.
An unauthorised actor accessed a third-party hosted database between August 10 and 25, 2025 and copied and took certain files.