Confirmé
Eisen: file sent to actor impersonating State Controller
On December 12, 2025, an employee provided a file of unclaimed property compliance records to a threat actor impersonating the California State Controller’s Office.
Fuites de données et incidents de sécurité des entreprises
Recherchez par entreprise, pays, secteur, année et méthode d’attaque. Consultez les données concernées, la portée, la vérification, les réponses et les sources.
En cours d’enquête
Japan Auction Association: 523 customer records may have been viewed after mailbox intrusion
After a June 12, 2026 provider alert, investigation found mailbox intrusion on the Rakuraku Assessment account may have exposed 523 customer/partner mail records; disclosed June 24.
Confirmé
Ibaraki SME Global: 297 support-company emails leaked via CC blast
On June 16, 2026 a contracted coordinator CC’d 297 support companies instead of BCC; disclosed June 24.
Confirmé
AgelessRx: help-desk tickets accessed
Between April 17 and 22, 2026, an unauthorised actor accessed certain help-desk tickets that contained users’ information.
Confirmé
J:COM: email addresses of J:COM NET and partner cable users leaked via KDDI mail platform breach
J:COM announced the intrusion on June 23 and reported the scope on July 6 (updated July 21). Unauthorised access affecting J:COM began on May 16, 2026.
Confirmé
BIGLOBE: email addresses of 5,016,432 people leaked via KDDI mail platform breach
BIGLOBE announced on June 23 the intrusion into the KDDI mail system behind BIGLOBE Mail, and fixed the leaked count on July 6.
Confirmé
Osaka Kyoiku University: 1,529 student/staff records leaked via wrong email attachment
A staff email with the wrong attachment sent 1,529 personal-data rows externally; disclosed June 23, 2026 (distinct from the earlier student BCC incident).
En cours d’enquête
Glendale Community College: student records may have been copied
Notified of a potential cyber incident on June 16, 2026, the college determined data related to student educational records was potentially copied without authorisation.
Confirmé
First Advantage: employee inbox downloaded after phishing
A Drug & Occupational Health Screening Unit employee’s account was compromised by sophisticated phishing around November 13, 2025, and the inbox contents were downloaded.
Confirmé
Tengai Foundation: 1,834 Morita Akio Juku registrants leaked via Meruhaikun
After Meruhaikun intrusion, Tengai disclosed June 23, 2026; final report confirmed 1,834 registrants’ email/name etc. Vendor root to be linked later.
Confirmé
KDDI: intrusion into mail platform for six ISPs leaked email addresses of 12,231,954 people
On June 17, 2026, KDDI found unauthorised access to the mail platform it provides to six ISPs and announced it on June 23. A vulnerability in third-party software used by the platform was exploited.
Confirmé
Chubu Telecommunications commufa mail: 727,176 people affected via KDDI mail platform breach
Chubu Telecommunications announced on June 23 the intrusion into the KDDI system behind commufa mail and fixed the leaked count on July 6.
Confirmé
KDDI Web Communications CPI mail: email addresses of 1,250,543 people leaked via KDDI platform breach
KDDI Web Communications announced on June 23 the intrusion into the KDDI system behind CPI rental-server mail; access affecting it began on June 8, 2026.
Confirmé
STNet Pikara mail: addresses and passwords of 397,152 people leaked via KDDI platform breach
Through the intrusion into the KDDI system behind Pikara mail, STNet customer mail data leaked between June 14 and 17. STNet announced it on June 23 and fixed the count on July 6.
En cours d’enquête
Unirita: mail-magazine contacts may have leaked via Meruhaikun intrusion
After Meruhaikun intrusion notice, Unirita disclosed June 22, 2026 that company name, person name and email may be in scope. Count under investigation. Vendor root to be linked later.
En cours d’enquête
ANDMAMACO: registrant data may have leaked via Meruhaikun intrusion
Possible data leak: After Meruhaikun intrusion reports, ANDMAMACO disclosed June 22, 2026. No public count. Vendor root to be linked later.
En cours d’enquête
Hands Holdings: investigating possible personal-data leak after suspected malware
Possible data leak: Suspected malware on some internal systems detected June 19, 2026 and isolated. Exfiltration not confirmed but under investigation; disclosed June 22.
En cours d’enquête
Fujikura Composites: data may have leaked after suspected Exchange Online mailbox intrusion
Suspected third-party activity on Exchange Online mailboxes may have exposed information; disclosed June 22, 2026 with PPC report. Detail PDF unreachable; HTML notice used as source.
Confirmé
JSEG: 1,644 newslist emails/names leaked via Meruhaikun
After Meruhaikun intrusion, JSEG posted June 22, 2026; later confirmed leakage; Aug 17 final report fixed 1,644 subscribers’ email and name. Vendor-wide totals belong on the vendor root and are not summed here.
En cours d’enquête
e-Clinic: newsletter data may have leaked via Meruhaikun intrusion
Possible data leak: After Meruhaikun intrusion affecting its newsletter, e-Clinic disclosed June 20, 2026. Count still under investigation. Vendor root to be linked later.