확인됨
Marimo Holdings: group employee data leaked after officer-impersonation phishing
On December 18, 2025 a phishing mail impersonating a group officer led to unauthorised acquisition of some employee data including leavers; disclosed March 6, 2026.
기업 개인정보 유출·무단 접근 사건 목록
기업명, 국가, 업종, 발생 연도, 공격 방식으로 사건을 검색하고 유출 정보, 피해 규모, 확인 상태, 기업 대응과 출처를 확인하세요.
확인됨
EP Wealth Advisors: client data copied using compromised employee credentials
On February 2, 2026, EP Wealth discovered unauthorised activity on its network involving one employee’s compromised credentials and terminated it within hours; the unauthorised party obtained copies of data, including from client relationship tools.
조사 중
Nihon University Sangenjaya: staff mailbox personal data may have been viewed after phishing takeover
On February 9, 2026 one staff mailbox was taken over via phishing and sent 321 suspicious messages; the campus disclosed on March 6 that mailbox personal data may have been viewed.
조사 중
Reisz Siderman Eisenberg: client information may have been at risk after network access
On August 23, 2025, the firm was advised of possible unauthorised access to its network; the investigation confirmed unauthorised access to a portion of the network on that day, followed by a review of the files there.
조사 중
Tieu Dental: patient information may have been accessed or acquired
Tieu Dental became aware of unauthorised access to its network; the forensic investigation found the actor accessed the network between July 28 and 29, 2025, and personal and/or health information may have been accessed or acquired.
조사 중
Service Lighting reports possible card-data theft from site skimmer
Possible data leak: Malicious code on the e-commerce site potentially captured card numbers, expiry dates and CVV codes for purchases from about March 12 to September 16, 2025.
확인됨
Williams Accountancy: files acquired after network intrusion
On December 30, 2025, the firm discovered an unauthorised third party had accessed its network; the investigation found files were acquired from certain systems on December 25 and 26, 2025.
확인됨
California FAIR Plan: broker personal data inadvertently disclosed to third party
On December 12, 2025, CFPA learned that certain personal information had been inadvertently disclosed to an unknown third party that day; only individual broker information was affected, not policyholder data (except brokers who are also policyholders).
확인됨
Cloud Imperium Games: user data accessed via backup systems
On January 21, 2026, an attack resulted in unauthorised read-only access to some backup systems, including limited access to users’ basic account details (metadata, contact details, usernames, dates of birth and names).
조사 중
Tokyu Sekkei: third parties may have viewed related personal data after improper device use on public transport
Possible data leak: After a third-party report that a staff device screen was visible on public transport on February 27, 2026, the firm investigated and disclosed on March 3.
확인됨
AMED: 459 email addresses (279 personally identifiable) leaked via misaddressed bulk mail
A bulk admin email used To instead of Bcc so addresses were visible among recipients; AMED disclosed this on March 3, 2026.
확인됨
Children’s Council of San Francisco: data accessed and acquired
Investigation of an August 3, 2025 network disruption found an unknown actor accessed and acquired data.
조사 중
Kanehara Rinken Kokushi Online: 160 registrants’ emails and nicknames may have been publicly reachable
Possible data leak: On February 17, 2026 a leftover test file on production was found and closed the same day; disclosed March 3, with an April 17 update reporting no further intrusion traces.
확인됨
M&Y Personal Injury Lawyers: files downloaded from archive server
On November 25, 2025, M&Y identified suspicious activity on a server used for historical record keeping; the investigation found an unknown actor viewed and downloaded files on or about November 23, 2025.
확인됨
CorVel discloses claim document sent to another claimant
A document was intermixed with another claimant’s information and emailed to that claimant, disclosing name, Social Security number and work-injury medical information.
확인됨
Maritz confirms files taken from Oracle EBS environment
Exploitation of a then-unknown Oracle E-Business Suite vulnerability allowed a third party to access and obtain files from Maritz’s finance environment on August 10–13, 2025.
조사 중
Miz Mooz reports possible customer-data exposure from website
Possible data leak: Activity in the website environment from January 25 to 28, 2026 may have involved personal information.
확인됨
Idera: personal data affected via third-party file-hosting system
On October 31, 2025, an unauthorised party accessed a third-party file-hosting system, affecting names, contact details and other fields.
확인됨
MSG Entertainment: Oracle EBS data accessed including names and SSNs
An unauthorised person accessed data from the vendor-hosted Oracle E-Business Suite in August 2025; hiring and payment records included names and SSNs.
조사 중
Jiho group reports possible exposure of up to 890 email addresses
A compromised cloud-mail account may have allowed viewing or acquisition of address-book email addresses. Sending suspicious phishing emails is confirmed; data acquisition is not.