已确认
HCA Healthcare: files with medical resident data copied
On August 12, 2026, an unauthorised party accessed systems and obtained copies of files containing medical residents’ personal information.
企业数据泄露与未经授权访问事件列表
按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
已确认
Fragomen: account compromise led to file copying
As part of a social-engineering campaign, a single user account was remotely accessed and a subset of files was accessed and copied.
调查中
City of Foster City: files may have been viewed or acquired
Between February 28 and March 25, 2026, an unauthorised third party accessed certain City systems and may have viewed or acquired files.
调查中
Lennar Mortgage: sensitive data may have been affected after social-engineering intrusion
Between May 26 and June 1, 2026, an unauthorised party used social-engineering tactics to access some systems; certain individuals’ sensitive personal information may have been affected.
调查中
CareCloud: actor claimed exfiltration from EHR AWS environment; PHI may be affected
Between March 10 and 16, 2026, an unauthorised third party accessed one of CareCloud Health’s AWS environments and claimed to have exfiltrated database data; protected health information may be affected.
调查中
Station Casinos: personal information may have been accessed
Suspicious network activity was identified on March 5, 2026; on July 10 the investigation determined some personal information may have been accessed by an unauthorised individual.
已确认
Catalyst Brands: personal data obtained via HR/payroll vendor servers
Unauthorised access to servers managed by a third party supporting HR and payroll led to names, SSNs, passport numbers and other data being obtained.
已确认
DentaQuest: personal and dental/vision health data accessed
On May 20, 2026, DentaQuest discovered unauthorised individuals had accessed data on its network, including personal identification and dental or vision health information; the incident ran May 17–20.
已确认
Mercor: data downloaded after malicious LiteLLM versions enabled access
Malware inserted into certain LiteLLM versions enabled an unauthorised actor to access some Mercor systems between March 24 and 30, 2026 and download data.
调查中
Lennar: sensitive data may have been affected after social-engineering intrusion (March)
Between March 24 and 30, 2026, an unauthorised party used social-engineering tactics to access some systems; sensitive personal information of certain individuals may have been affected.
已确认
Advantest America: data extracted from servers
An unauthorised third party accessed systems and extracted data from servers, including personal information of notified individuals.
已确认
ETS: California student assessment data accessed and copied via SFTP
Unauthorised activity on an SFTP site used to exchange California statewide assessment data with CDE led to student information, including all students enrolled in the prior three school years, being accessed and copied.
已确认
AdaptHealth: data incl. patient information taken after social-engineering attack
On June 5, 2026, an unauthorised third party accessed systems through a social-engineering attack on a single user account and took data including patient information.
已确认
Seyfarth Shaw: documents emailed to unauthorised recipient
On August 18, 2026, the firm identified that a small number of documents containing names and SSNs were sent by email to, and acquired by, an unauthorised recipient.
已确认
See’s Candies: files taken in ransomware attack and posted on dark web
Unauthorised access between April 11 and 13, 2026 led to files on some servers being encrypted; the actor acquired certain files beforehand and at least some were made available on the dark web.
调查中
Revolve reports possible card-data acquisition
On September 11, 2026, an unauthorised actor accessed the shopping platform and may have acquired names, addresses, card numbers and expiry dates.
已确认
Fox Rothschild: files copied and taken after vishing attack
On May 21, 2026, an employee was targeted by a voice-based social-engineering (“vishing”) attack and certain files were copied and taken.
调查中
Virta Health: files in legacy repository may have been accessed
Unauthorised activity was found in a data repository separate from the production platform; files were potentially accessed between March 19 and 22, 2026, and personal information may have been exposed.
调查中
City of San José: employee data on lost USB drive may have been exposed
Possible data leak: On January 12, 2026, the city learned a workforce member had lost a USB drive on January 9, 2026 containing information on current and former employees, possibly including names and SSNs.
已确认
Quantum Health: files with insurance and health data acquired
Between May 29 and June 1, 2026, an unauthorised party accessed and acquired files including health-insurance and other information.