확인됨
DreamHost: File Manager flaw exposed FTP/SFTP credentials
A vulnerability in the web-based File Manager server was exploited to access users’ FTP/SFTP usernames and passwords.
기업 개인정보 유출·무단 접근 사건 목록
기업명, 국가, 업종, 발생 연도, 공격 방식으로 사건을 검색하고 유출 정보, 피해 규모, 확인 상태, 기업 대응과 출처를 확인하세요.
조사 중
Baylor Genetics: patient information may have been involved in network intrusion
An unauthorised third party accessed parts of the network and stored data between June 11 and 17, 2026; a review of what may have been involved was completed around July 30 and potentially affected people were notified.
확인됨
Covered California: agent data disclosed via phishing
An unauthorised individual used phishing to access agent spreadsheets containing names, agency names, licence numbers, FEIN or SSN and roles.
조사 중
Citizens Bank reports possible exposure from data-access issue
On September 10, 2026, Citizens identified an issue that allowed some data to be accessed by an unauthorised third party; names, SSNs, dates of birth, phones and emails may be involved.
조사 중
Nissan North America: employee data may have been exposed via PeopleSoft incident
A cyber incident involving Oracle PeopleSoft, used for employee records and payroll, involved unlawful access to data on Nissan’s systems; employee contact, banking, SSN/SIN and other data may have been exposed.
확인됨
HuntEx confirms ticket transaction data breach at payment subcontractor
RelyComply’s September 8 breach resulted in unauthorised access to some HuntEx ticket transaction information. The count and exact first public notice day are unknown.
확인됨
Monmouth University: files acquired from network
An unauthorised third party acquired certain files from the network starting around February 5, 2026.
확인됨
HCA Healthcare: files with medical resident data copied
On August 12, 2026, an unauthorised party accessed systems and obtained copies of files containing medical residents’ personal information.
확인됨
Fragomen: account compromise led to file copying
As part of a social-engineering campaign, a single user account was remotely accessed and a subset of files was accessed and copied.
조사 중
City of Foster City: files may have been viewed or acquired
Between February 28 and March 25, 2026, an unauthorised third party accessed certain City systems and may have viewed or acquired files.
조사 중
Lennar Mortgage: sensitive data may have been affected after social-engineering intrusion
Between May 26 and June 1, 2026, an unauthorised party used social-engineering tactics to access some systems; certain individuals’ sensitive personal information may have been affected.
조사 중
CareCloud: actor claimed exfiltration from EHR AWS environment; PHI may be affected
Between March 10 and 16, 2026, an unauthorised third party accessed one of CareCloud Health’s AWS environments and claimed to have exfiltrated database data; protected health information may be affected.
조사 중
Station Casinos: personal information may have been accessed
Suspicious network activity was identified on March 5, 2026; on July 10 the investigation determined some personal information may have been accessed by an unauthorised individual.
확인됨
Catalyst Brands: personal data obtained via HR/payroll vendor servers
Unauthorised access to servers managed by a third party supporting HR and payroll led to names, SSNs, passport numbers and other data being obtained.
확인됨
DentaQuest: personal and dental/vision health data accessed
On May 20, 2026, DentaQuest discovered unauthorised individuals had accessed data on its network, including personal identification and dental or vision health information; the incident ran May 17–20.
확인됨
Mercor: data downloaded after malicious LiteLLM versions enabled access
Malware inserted into certain LiteLLM versions enabled an unauthorised actor to access some Mercor systems between March 24 and 30, 2026 and download data.
조사 중
Lennar: sensitive data may have been affected after social-engineering intrusion (March)
Between March 24 and 30, 2026, an unauthorised party used social-engineering tactics to access some systems; sensitive personal information of certain individuals may have been affected.
확인됨
Advantest America: data extracted from servers
An unauthorised third party accessed systems and extracted data from servers, including personal information of notified individuals.
확인됨
ETS: California student assessment data accessed and copied via SFTP
Unauthorised activity on an SFTP site used to exchange California statewide assessment data with CDE led to student information, including all students enrolled in the prior three school years, being accessed and copied.
확인됨
AdaptHealth: data incl. patient information taken after social-engineering attack
On June 5, 2026, an unauthorised third party accessed systems through a social-engineering attack on a single user account and took data including patient information.