Kings United Way: sensitive data posted to sharing platform
Sensitive information including names, dates of birth and SSNs was inadvertently posted to a data-sharing platform.
按企业、国家、行业、发生年份和攻击方式查询事件,了解泄露数据、影响范围、核实状态、企业应对及来源。
Sensitive information including names, dates of birth and SSNs was inadvertently posted to a data-sharing platform.
On January 11, 2026, an unauthorised third party accessed some systems; personal information may be involved.
Files containing personal information may have been accessed and acquired without authorisation between November 6 and 29, 2025.
On May 7, 2026, an unauthorised actor accessed systems and acquired stored files.
An unknown actor accessed some systems and downloaded files between January 19 and 27, 2026.
A vulnerability in the vendor-built pharmacy website let an unknown party access it with elevated privileges; names, addresses, dates of birth, health, insurance, prescription and payment-card data may have been involved.
Suspicious activity was identified; the investigation found files were downloaded by an unauthorised actor, with notified individuals’ data downloaded on May 1, 2026.
A ransomware attack discovered October 27, 2025 involved an unauthorised party accessing the network and acquiring files.
An unauthorised actor used a compromised credential to acquire data from a file share used for civil-litigation discovery between December 28, 2025 and January 22, 2026.
An unauthorised actor accessed the network around June 22, 2026; the accessed systems contained personal information.
PCP selection forms and welcome packets mailed between May 13 and July 8, 2026 contained other members’ data; names, dates of birth and member IDs may have gone to unrelated members.
Protected health information may have been accessed or acquired during unauthorised network access between December 22, 2025 and January 3, 2026.
Certain servers were accessed without authorisation at various times between July 9 and September 9, 2025, and stored information was viewed or obtained.
Files on company systems may have been accessed or acquired without authorisation between April 24 and May 7, 2026, and contained personal information.
An unauthorised actor accessed one of Accela’s secure file transfer portals and acquired copies of files on December 11–12, 2025. Accela is notifying on behalf of government clients.
During unauthorised access to the local network between October 8 and 15, 2025, names, dates of birth, gender and Medi-Cal member IDs may have been accessed.
Certain information may have been copied from the network by an unauthorised third party during activity on January 20–21, 2026.
Exploitation of a security vulnerability let an unauthorised third party access Mercadien files from about September 17, 2025, including data received from clients such as credit unions.
Unauthorised access to certain files occurred on November 11–19, 2025; the files may have included information on client companies’ employees and vendors.
A zero-day in Oracle E-Business Suite allowed unauthorised parties to acquire stored files, including files with names and SSNs.