调查中
RevSpring reports possible patient-data access via support tool
An unauthorised person may have gained access to a support tool usable to obtain patient information; diagnosis and treatment details were not included.
企业数据泄露与未经授权访问事件列表
按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
调查中
Hoag Hospital reports possible file access
Investigation of suspicious activity on October 8, 2026 found files may have been accessed without authorisation.
已确认
Center Theatre Group: file with SSNs mistakenly sent to state agency
On July 27, 2026, an employee inadvertently provided California’s EDD with a file containing names and SSNs of current and other personnel.
已确认
Cotton Incorporated: user database export exposed and downloaded
During a CottonWorks.com hosting migration, a user-database export was made public and downloaded four times by unknown parties between September 18 and October 15, 2026.
已确认
EyeMed sends member file to wrong email address
On September 22, 2026, a file with plan-member information was sent to an incorrect email address; it may include names, addresses, dates of birth and SSNs.
已确认
Nueva School: files accessed and copied
Files on the network were accessed and copied without authorisation between June 13 and 22, 2026.
调查中
NCH Corporation reports possible file theft
On March 9, 2026, NCH learned an unauthorised actor may have taken files containing names, SSNs, taxpayer IDs and driver’s licence numbers.
已确认
Baanx US: Crypto Life user data accessed
Between about September 23 and 28 and around October 17, 2026, unknown parties accessed personal information of some US Crypto Life users, including via a third-party service provider.
已确认
El Camino Health: documents copied from Microsoft 365 accounts
Four employees’ Microsoft 365 accounts were intermittently accessed August 26–September 2, 2026 and documents were copied or downloaded.
已确认
Central Ohio Primary Care: vishing attack accessed PHI files
A voice-phishing attack let a criminal actor access files containing protected health information.
已确认
Marathon Health: personal data obtained via employee account
After an alert on August 24, 2026 about an employee account, Marathon Health validated on September 9 that personal information was obtained by an unauthorised person.
调查中
Photon Health reports possible data acquisition via Metabase zero-day
A zero-day in self-hosted Metabase was exploited and data may have been acquired on August 9–10, 2026.
已确认
Hitec Group USA: online-store customer data accessed via third-party app
Between September 13 and 17, 2026, online-store data was accessed through a third-party application, including names, emails, addresses, phones and order history.
调查中
Sarku Japan reports possible employee-data exposure
On September 7, 2026, parts of systems became inaccessible in a cybersecurity incident; employment-related personal data may have been affected.
已确认
Navigate360: data copied from system
An unauthorised third party accessed a system and obtained copies of data between November 21, 2025 and March 5, 2026.
调查中
Lexitas reports possible exposure from misconfigured DepositionNet server
Possible data leak: A server configuration error made OnDemand (DepositionNet) files accessible without authentication since around September 2019; they may contain names with SSNs or driver’s licence numbers.
调查中
BASS Medical Group reports possible PHI access
Personal and/or protected health information may have been accessed or acquired without authorisation.
已确认
Dorsata: Metabase flaw allowed database access
A Metabase vulnerability allowed unauthorised access to the database platform from August 10 to 12, 2026; affected data contained patients’ PHI but not SSNs.
已确认
Toyo Tire Holdings of Americas: files taken in intrusion
Files were taken in a network intrusion and contained names and other data; the listing gives January 6 and February 4, 2026 as breach dates.
调查中
Alma Family Services reports possible data access
Possible unauthorised network access was identified July 10, 2026; investigators could not determine whether specific materials were accessed.