확인됨
Strategic Education: copies of files taken from servers
An unauthorised actor accessed servers between February 23 and 25, 2026 and took copies of files containing names with SSNs, driver’s licence or passport numbers.
기업 개인정보 유출·무단 접근 사건 목록
기업명, 국가, 업종, 발생 연도, 공격 방식으로 사건을 검색하고 유출 정보, 피해 규모, 확인 상태, 기업 대응과 출처를 확인하세요.
확인됨
Cushman & Wakefield: personal data exfiltrated by third party
On April 29, 2026, the firm became aware of unauthorised access by a third party that exfiltrated certain files; review confirmed notified individuals’ data was accessed and exfiltrated.
확인됨
Markel: personal data obtained after employees were socially engineered
Between March 17 and 18, 2026, an unauthorised actor deceived two employees via social engineering to access part of Markel’s systems; analysis completed June 29 found personal information was obtained without authorisation.
확인됨
Fishbrain: user data incl. password hashes accessed
An unauthorised person accessed an environment hosting user data, including names, email addresses, phone numbers, usernames, country, password hashes with salts and dates of birth; some hashes may be susceptible to decoding.
확인됨
Amgen: files with patient personal and health data acquired from cloud environments
Unauthorised access affected Amgen systems and data in third-party-hosted cloud environments; on July 18, 2026, Amgen identified acquisition of files with patients’ names, email, postal address, dates of birth, government ID numbers, medical and insurance information.
조사 중
Medtronic: personal information may have been affected by corporate IT intrusion
An unauthorised actor accessed certain corporate IT systems between April 13 and 19, 2026; personal information may have been affected and was reviewed.
확인됨
Del Monte Foods: files acquired in network incident
Files were acquired without authorisation in a February 2026 incident.
확인됨
Ameriprise Financial: unauthorised access to stored data and files
An unauthorised individual gained access to certain stored Ameriprise data and files, which was blocked upon discovery on March 18, 2026; no unauthorised transactions or fund movements occurred, per the notice.
확인됨
WilmerHale: staff member gave information to impersonator
On May 8, 2026, a staff member mistakenly provided information to an unauthorised third party who misrepresented their identity; the firm says the party did not directly access its systems.
확인됨
BAYADA: data copied from company systems
An unauthorised actor accessed certain BAYADA systems and copied data between February 18 and March 2, 2026.
조사 중
Meta: Instagram account-recovery bug may have enabled account access
Between April 17 and May 31, 2026, a bug in the account recovery system may have enabled an unauthorised party to reset passwords and access Instagram accounts, including contact details, date of birth and posts.
확인됨
Blank Rome: attorney tricked into uploading files to external drive
On May 21, 2026, a third party posing as IT called an attorney and misled them into uploading files to an external Google Drive account.
조사 중
Kubota North America: HR files accessed; employee data may have been included
Network systems were accessed without authorisation between March 16 and April 20, 2026; on April 30 HR files were found to have been accessed and may have contained employee information.
조사 중
Apollo reports possible data impact from social-engineering incident
A social-engineering incident potentially impacted personal information including names.
확인됨
Turner Construction: files with employee personal data accessed
On July 27, 2026, Turner confirmed unauthorised access to files containing names, SSNs (US), SINs (Canada), dates of birth, salary, direct-deposit bank details, home addresses and, for some, passport numbers.
확인됨
Frontline Education: personal data obtained via third-party software flaw
A vulnerability in third-party software allowed unauthorised access to part of the environment from August 14, 2026, and personal data was obtained.
확인됨
UMMC network intrusion affected patient information
An unauthorised party accessed UMMC’s network in February 2026, affecting patient names and health-related information.
확인됨
Upbound Group: files obtained from cloud applications
Between July 3 and 6, 2026, an unauthorised third party accessed and obtained files in cloud applications containing personal information.
확인됨
SM Energy: files with personal data obtained
In a cybersecurity incident around May 15, 2026, an unauthorised third party accessed systems and obtained files containing names, postal and email addresses, phone numbers and SSNs/TINs.
조사 중
ASOS: accounts accessed with externally obtained credentials; data may have been affected
On July 28, 2026, unusual account activity was detected; on July 29 ASOS confirmed a third party may have accessed accounts with credentials obtained outside ASOS. Names, email, addresses, phone and partial card details may have been affected.