Confirmé
EMC Water: files obtained via Oracle EBS flaw
A previously unknown Oracle EBS vulnerability was used to obtain files from the company’s EBS application.
Fuites de données et incidents de sécurité des entreprises
Recherchez par entreprise, pays, secteur, année et méthode d’attaque. Consultez les données concernées, la portée, la vérification, les réponses et les sources.
En cours d’enquête
Wisner Baum: files with SSNs and medical data may have been obtained
On October 9, 2025, Wisner Baum detected unusual network activity; the investigation found an unauthorised third party accessed the network between October 8 and 9, 2025 and may have obtained certain files.
Confirmé
CHP 11-99 Foundation: staff email account compromised by phishing
Around September 16, 2025, a staff member forwarded a suspicious email to the external provider’s help desk, was told the link was clean, and opened it, leading to compromise; the attacker had full access to the email account, including all folders and attached documents.
En cours d’enquête
Itasca Consulting Group reports possible data exposure
Around December 12, 2025, a third party attempted to infiltrate the network and personal information may have been accessed.
Confirmé
MACT Health Board: files with patient SSNs and medical data accessed in disruptive incident
MACT experienced an incident that disrupted its IT systems; the investigation found an unauthorised party accessed some files on its systems between November 12 and 20, 2025.
En cours d’enquête
Clawson Honda of Fresno: files may have been accessed or copied
On February 27, 2025, Clawson became aware of suspicious network activity; the investigation found certain files may have been accessed or copied without authorisation between February 27 and 28, 2025.
En cours d’enquête
Diversified Benefit Services: SSNs and medical data may have been downloaded from email system
Around August 7, 2025, DBS identified suspicious activity in its email environment; the investigation found an unauthorised actor accessed the email system and potentially downloaded certain emails and files.
En cours d’enquête
Chatham Asset Management reports possible personal-data compromise
Possible data leak: A network compromise identified on December 8, 2025 could have compromised personal information.
En cours d’enquête
Insurance Office of America: data may have been accessed after phishing-led intrusion
On June 30, 2025, IOA discovered certain internal systems had been affected by a security incident; the investigation found an unauthorised party gained access through a phishing email and data may have been accessed or acquired between June 25 and 30, 2025.
En cours d’enquête
Topstep reports possible account access in credential stuffing
A December 14, 2025 credential-stuffing attack may have accessed user accounts.
En cours d’enquête
KMS Solutions reports possible unauthorised access or acquisition
Information in systems was subject to unauthorised access or acquisition beginning November 27, 2025; personal data may have been affected.
En cours d’enquête
DSS (Next Street) reports possible unauthorised access
Possible data leak: Investigation of unusual activity around August 19, 2025 found information suggesting an unknown actor accessed the network.
En cours d’enquête
SPCorp Services: personal information may have been accessed or acquired
Around September 26, 2025, SPCorp experienced unauthorised access to its network; after investigation and document review it determined on January 7, 2026 that personal information may have been accessed and/or acquired.
Confirmé
Memberclose: personal data downloaded from cloud application
On October 29, 2025, a limited amount of data, including names and dates of birth, was downloaded from a cloud application.
En cours d’enquête
Goodwin reports possible data access in network intrusion
The network was accessed from about August 28 to September 12, 2025; personal data may have been accessed or acquired.
Confirmé
Monroe University: files with personal data copied after systems intrusion
An unauthorised party accessed certain Monroe University systems between December 9 and 23, 2024 and acquired copies of some network files; on September 30, 2025 the university determined they contained personal information.
Confirmé
SAFE Credit Union: member information unintentionally disclosed
On December 12, 2025, SAFE Credit Union experienced an incident that led to the unintended disclosure of certain member information.
En cours d’enquête
Chapman & Associates: personal information may have been accessed in network incident
The firm experienced a network security incident on January 31, 2025; forensic investigation found an unauthorised third party may have accessed certain personal information.
Confirmé
GSPlatformCo: unauthorised access to data in customer information system
GSPlatformCo detected unauthorised access to data hosted on one of the systems it used to store customer information; the data was a snapshot from April 2025, and the company says its current environment is secure.
En cours d’enquête
Gym Management Service: network files may have been accessed
On August 16, 2025, the company observed unusual network activity; the investigation found certain files were potentially accessed without authorisation between July 25 and August 26, 2025.