En investigación
J.M. Forbes reports possible client-data exposure in email compromise
An employee email account was accessed through social engineering and may have contained names, addresses, SSNs and account numbers.
Filtraciones de datos e incidentes de empresas
Busca por empresa, país, sector, año y método de ataque. Consulta datos afectados, alcance, estado de verificación, respuestas y fuentes.
En investigación
Murata Manufacturing: employee and partner personal data may have been taken after IT-environment intrusion
After an IT-environment intrusion, Murata’s April 6 second and April 27 third notices said about 73k employee-related and about 15k external-contact records may have been taken.
Confirmado
Resonus Face Clinic Tokyo: personal data of 369 patients taken after ransomware
After detecting a cloud-server outage on March 11, 2026 and confirming ransomware-style intrusion, the clinic disclosed on April 6 that personal data of 369 patients had been taken.
Confirmado
Option Care Health: employee email accessed, exposing health information
An employee email account was accessed without authorisation between February 6 and 9, 2026; on February 26 the company found protected health information was accessed, which may include names, dates of birth, medical record numbers and treatment information.
En investigación
YCC Information Systems: entrusted partner data may have leaked after file-server ransomware
Ransomware on the file server was confirmed early on April 2, 2026 (first notice April 3). The April 14 fourth notice said entrusted partner data may have leaked; the May 20 fifth notice found no clear outbound traces but did not fully rule out access.
Confirmado
Tokyu Resorts & Stay: guest data of 95,986 people leaked via misaddressed mail
On March 25, 2026 an internal mail with a guest CSV was wrongly sent to one contractor employee; deletion was confirmed the same day and disclosed April 3.
Confirmado
GMO Aozora Net Bank: 1,820 customer records leaked via contractor SocioFuture file sent to another bank
From 28 Nov 2024 contractor SocioFuture sent ostensibly cleared templates to another bank with customer data left in hidden sheets; discovered March 27, 2026 after the other bank noticed and disclosed April 3.
Confirmado
Awa Bank: 27,745 customer-related records (with duplicates) leaked from OA test environment
After an external tip on March 24, 2026, Awa Bank found its OA test environment had been accessed and customer-related data leaked; disclosed April 3. Separate from live banking systems.
Confirmado
DocketWise: repositories cloned with valid credentials
An unauthorised actor used valid credentials to clone third-party partner repositories containing law-firm customers’ client data, including names, addresses, SSNs, government IDs and passport numbers.
Confirmado
Wynn Resorts confirms HR records accessed and obtained
An unauthorised party accessed human-resources systems in October 2025 and accessed and obtained records about employees and service providers.
Confirmado
Hims & Hers: customer-service tickets accessed on third-party platform
Between February 4 and 7, 2026, support tickets on a third-party customer-service platform were accessed or acquired without authorisation; they included names and medical information.
Confirmado
IPPC pharmacy network intrusion: files with medical data copied
The network was accessed September 18–19, 2025; files were copied and potentially viewed, including names, SSNs, medical and health-insurance information.
En investigación
Whitepages: accounts may have been accessed in credential stuffing attack
On March 24, 2026, a spike in login attempts was detected as a credential stuffing attack using credentials stolen from other sites; accounts reusing the same credentials may have been accessed, exposing names, email addresses, lookup and order history and partial card details (last four digits, card type).
Confirmado
Advantage Media Services: data copied from server environment
In September 2025, suspicious activity was identified; an unauthorised actor briefly accessed the server environment and copied certain data.
Confirmado
illumifin: files with insurer clients’ data copied
On November 4, 2025, illumifin identified unusual network activity; an unauthorised person accessed the network and acquired copies of files, which on November 10 were found to possibly contain information received from or on behalf of its clients.
Confirmado
Mercer Advisors confirms third party obtained client data
Unauthorised access around January 22, 2026 resulted in a third party obtaining names, contacts, SSNs, government IDs, dates of birth, account numbers and, for some, login credentials.
En investigación
Elephants Food Group reports possible data copying in network intrusion
Possible data leak: Activity from January 25 to February 11, 2026 may have resulted in personal information being copied.
En investigación
Advantage Gold reports possible customer-data exposure via firewall flaw
A third-party firewall vulnerability was exploited; names, addresses, contacts, some SSNs and account numbers may have been exposed (unauthorised access confirmed).
Confirmado
Fukuoka Bank: insurance-contract data of 1,052 individuals leaked via MetLife-seconded staff
A MetLife-seconded worker had improperly given the bank’s life-insurance contract data to MetLife; disclosed March 27, 2026 after MetLife’s report.
Confirmado
Oklahoma Tax Commission: unauthorised access to W-2 and 1099 files in OkTAP
In December 2025, the OTC learned of suspicious activity in the OkTAP taxpayer portal; certain W-2 and 1099 files were accessed without authorisation between July 5, 2024 and December 20, 2025, containing names and SSNs.