Priorité aux sources · Ces chiffres concernent cette base, pas le total mondial.
Raksul confirmed unauthorized access using compromised credentials and said personal information within print and related data may have leaked.
SEGA said 2,196,044 email-address records used for some SEGA and SEGA FAVE newsletters were exposed at mail-service contractor Arara.
Travolution disclosed on November 9 that unauthorized reservation viewing on November 6 and 8 leaked some Seoul PASS customer information.
Waseda disclosed on November 9 that unauthorized access on August 31 obtained 3,342 records containing names, campus emails and encrypted password information among other fields.
Unauthorised access at Prestige Core Solution may have exposed some roadside-assistance customers’ personal information. The count and precise fields remain under investigation.
Shiseido confirmed 2,515 exposed records including names, email addresses, questionnaire data and skin-analysis results following unauthorized access to its FCA system.
SmartNews disclosed on November 6 that unauthorized access on October 31 may have exposed publisher and advertiser contacts and some internal user IDs.
M1 identified a customer-data breach on October 30 and disclosed it on November 6. Impacted data includes names, NRIC/FIN numbers, birth dates, mobile numbers, email and addresses.
NTT DOCOMO confirmed customer-data exposure after unauthorized access to the two services, describing the scale as at most approximately 300,000 records.
Dentsu reported potential exposure following an incident at its service provider.
An unauthorised person may have gained access to a support tool usable to obtain patient information; diagnosis and treatment details were not included.
Investigation of suspicious activity on October 8, 2026 found files may have been accessed without authorisation.
Unauthorised access to the Kikan Navi investor-relations service led to downloaded data including about 2,000 investor/analyst records and about 250 former-employee records.
On July 27, 2026, an employee inadvertently provided California’s EDD with a file containing names and SSNs of current and other personnel.
An attack on email-service provider Arara exposed 15,821,184 Asoview member records. This is a record count and must not be added to the provider-wide total as a separate population.
The incident affected CBcloud’s PickGo delivery service.
An intruder downloaded files containing personal information.
During a CottonWorks.com hosting migration, a user-database export was made public and downloaded four times by unknown parties between September 18 and October 15, 2026.
Customer names, contacts, vehicle, incident/breakdown details and some bank-account information were removed from a roadside-assistance operations system. The figure is up to about 5.5 million records including duplicates.
On September 22, 2026, a file with plan-member information was sent to an incorrect email address; it may include names, addresses, dates of birth and SSNs.