Confirmado
Hokuto City: 586 Hokuto Fan Club member emails leaked via misaddressed mail
On February 13, 2026 a contractor sent fan-club event mail with To instead of Bcc so all member addresses were visible; the city disclosed this on February 14.
Filtraciones de datos e incidentes de empresas
Busca por empresa, país, sector, año y método de ataque. Consulta datos afectados, alcance, estado de verificación, respuestas y fuentes.
En investigación
Komae City: voter-roll data of 69,244 people may have leaked after election SD-card loss
Possible data leak: Five SD cards used for voter-roll checks in the 8 Feb 2026 general election were found missing on February 10 and the city disclosed the loss.
Confirmado
Figure: customer data obtained via unauthorised queries on loan databases
Figure discovered unauthorised activity on its systems and found evidence that on January 28, 2026 data containing personal information was obtained through queries on company databases storing loan and loan inquiry data. It found no evidence of unauthorised access to customer accounts or funds.
En investigación
Sekaimon reports possible leak of member and business-related information
Malware accompanied unauthorised access, with possible exposure of personal information in databases. The final investigation did not establish confirmed exfiltration.
Confirmado
Sofinter confirms credential-enabled intrusion and corporate data exfiltration
Sofinter confirmed that an intrusion during January 20–24, 2026 encrypted virtual infrastructure and copied data from corporate servers.
En investigación
TENGA USA: customer names and email contents may have been viewed via compromised employee account
Possible data leak: On February 13, 2026, TENGA USA discovered an unauthorised party had accessed one employee’s work email account; between 12am and 1am PT that day the party used it to send spam to contacts in the account history.
Confirmado
Tulsa airport operator reports acquisition of files containing personal information
Tulsa Airports Improvement Trust said an unauthorized party accessed its systems and acquired files between January 17 and 20, 2026.
Confirmado
Gehry Partners: data accessed and acquired
Data was accessed and acquired from the network by an unauthorised actor between June 6 and 9, 2025.
Confirmado
Nassau OOGP Vision Group: contact lens order files acquired after network intrusion
An unauthorised third party accessed the company’s network and acquired certain files in January 2024; review found they included information related to orders from a business customer (data owner name templated).
En investigación
GALA Yuzawa: customer data of up to 1,518 people may have leaked after server ransomware
GALA Yuzawa announced on February 12 that ransomware on some servers may have allowed customer personal data to leak externally.
En investigación
AltaMed: employee and patient information may have been accessed in cyber incident
On December 14, 2025, AltaMed experienced a cybersecurity incident that limited access to certain systems while care continued; its investigation found employees’ names, addresses, SSNs and compensation information may have been accessed.
En investigación
Mynavi: user, partner and employee data may have leaked via cloud-service intrusion
After detecting an anomaly on a used cloud service on 5 Dec 2025 and confirming possible personal-data exposure on 16 Jan 2026, Mynavi issued a first notice on 12 Feb and later updates with category counts.
Confirmado
Fishman, Larsen & Callister: data acquired without authorisation before network disruption
The firm experienced a network disruption on June 9, 2025; the investigation found an unknown actor acquired certain data without authorisation on or about June 8, 2025.
Confirmado
Progress Foundation: employee W-2s disclosed to unauthorised actor
On February 2, 2026, employee W-2 forms were inadvertently disclosed to an unauthorised actor.
Confirmado
Jeff Anderson & Associates: data copied after intrusion via firewall technology
In September 2025, the firm detected suspicious activity on certain systems; the investigation found an unauthorised party accessed parts of its environment on September 18, 2025 and copied data. The firm says the same event affected thousands of organisations using the same firewall technology.
En investigación
Nittai Kogyo N-Trading: 3,887 member records may have leaked after site intrusion
Possible data leak: After finding a malicious file on the hosting server on January 8, 2026, Nittai disclosed on February 9 that its N-Trading shop had been tampered with; a follow-up listed 3,887 members.
En investigación
Saison Technology: 1,214 support renewal forms may have been publicly readable due to cloud-storage misconfiguration
A cloud-security tool found support-renewal forms on cloud storage that may have been publicly readable; Saison Technology disclosed this on February 9.
Confirmado
Fukuda Lifetec Tokyo: patient data of 550 people leaked via misdirected delivery notes
On February 5, 2026, delivery-note PDFs meant for individual recipients were sent to multiple partners; after recall, 10 partners still received them. Parent Fukuda Denshi disclosed on February 9.
Confirmado
Cottage Hospital: files taken in network intrusion
An unauthorised party accessed the network October 14–21, 2025 and took files.
En investigación
Beauty Garage: card and customer data may have leaked after EC-site intrusion concern
After card-brand alerts of possible card-data exposure on its EC site, Beauty Garage stopped card payments and issued a first notice on February 6, 2026, with later updates still reporting ongoing investigation.