已确认
American Lending Center: ransomware attack accessed files with personal data
In July 2025, a threat actor compromised the internal network, executed ransomware and accessed files containing names, dates of birth and Social Security information.
数据泄露事件
按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
已确认
MemberSource Credit Union: data taken from branch networks
On June 3, 2025, MSCU learned of a disruption to certain branch computer networks and confirmed data was taken; unencrypted files contained names, SSNs, driver’s licence/state ID numbers and financial account information.
已确认
Hogan Transports: files accessed or copied in network intrusion
Around November 29, 2025, Hogan became aware of unusual activity; the network was accessed without authorisation at various times between October 25 and November 29, 2025 and certain files were accessed or copied.
调查中
Alliance Roofing: personal data potentially acquired after network disruption
On October 6, 2025, Alliance experienced a network disruption; an unknown actor gained access and potentially acquired data including names, SSNs and driver’s licence numbers.
调查中
Cornerstone Care Center: PHI may have been accessed via user account
Possible data leak: Around April 7, 2026, unauthorised activity involving one user account was identified; on April 16 a limited amount of PHI was found to have possibly been accessed.
已确认
Horizon Media: files copied after social engineering
On January 9, 2026, an unauthorised actor gained access to a limited portion of file shares through social engineering and copied certain files.
调查中
Berger & Williams: personal data may have been accessed via employee email account
An employee email account was accessed without authorisation; on April 6, 2026 the firm learned the account, accessed around February 6, 2025, contained limited personal information that may have been accessed or acquired.
已确认
Instructure (Canvas): user data exfiltrated in cyberattack
Unauthorised activity in Canvas was detected on April 29, 2026. The actor abused a Free-for-Teacher account and vulnerabilities; usernames, email addresses, course names, enrolment information and messages were exfiltrated. A second intrusion on May 7 via another vulnerability accessed no further data, the company says.
调查中
TransGlobal Insurance Agency: personal data may have been accessed or acquired
In an incident around February 18, 2026, names, addresses, SSNs, driver’s licence numbers and dates of birth may have been accessed or acquired by unauthorised actors.
已确认
JC Resorts: files viewed and copied
Certain files stored on the network were viewed and copied by an unauthorised actor on January 19, 2026.
已确认
Frontwave Credit Union: vendor inadvertently disclosed names and SSNs to another credit union
On April 3, 2026, a service provider notified Frontwave that non-public information including members’ names and SSNs was inadvertently disclosed to another credit union.
已确认
L.A. Care: Health Risk Assessment mailers showed other members’ names
Around January 30, 2026, a manual error mismatched member IDs and names, so some members received Health Risk Assessment mailers showing another individual’s name, health plan name and programme name.
调查中
GrayRobinson: files may have been accessed or removed
Around March 24, 2025, GrayRobinson detected unauthorised network access; some files may have been accessed or removed between March 5 and 24, 2025, and on April 13, 2026 they were found to contain personal information.
已确认
Heritage Bank: files copied from internal network
Unauthorised activity was identified around March 2, 2026; files were copied from the internal network on March 1, 2026.
调查中
Harbor Regional Center: information may have been accessed
Certain information may have been accessed by an unauthorised individual on March 6–7, 2026.
调查中
Solari Accountancy: personal data may have been exposed via tax software access
Possible data leak: Around April 8, 2026, the firm discovered an unauthorised individual had accessed its tax software system; tax returns were not directly affected, but exposure of personal information could not be ruled out.
调查中
Web Hosting Hub: email and IP addresses may have been accessed via Help Center
On October 29, 2025, the company learned an unauthorised actor had temporary access to a limited portion of its Help Center; email addresses, IP addresses from activity between April 17 and October 29, 2025 and linked public social media information may have been accessed.
调查中
Alaska Air Group FCU: files may have been copied via IT provider
Around March 5, 2026, the credit union’s third-party IT provider had a cybersecurity incident that allowed unauthorised actors to use its system to access AAGCU systems; files may have been accessed and copied.
调查中
Nobu: information may have been viewed or taken in network intrusion
An unauthorised third party gained access to certain systems; information may have been viewed or taken between October 6 and 7, 2025.
调查中
Impac Mortgage: protected information may have been accessed
On March 20, 2024, Impac identified signs of unauthorised access; an unknown actor may have accessed files and folders with protected information between February 21 and March 20, 2024, including names and Social Security numbers.