已确认
Eisen: file sent to actor impersonating State Controller
On December 12, 2025, an employee provided a file of unclaimed property compliance records to a threat actor impersonating the California State Controller’s Office.
企业数据泄露与未经授权访问事件列表
按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
调查中
Japan Auction Association: 523 customer records may have been viewed after mailbox intrusion
After a June 12, 2026 provider alert, investigation found mailbox intrusion on the Rakuraku Assessment account may have exposed 523 customer/partner mail records; disclosed June 24.
已确认
Ibaraki SME Global: 297 support-company emails leaked via CC blast
On June 16, 2026 a contracted coordinator CC’d 297 support companies instead of BCC; disclosed June 24.
已确认
AgelessRx: help-desk tickets accessed
Between April 17 and 22, 2026, an unauthorised actor accessed certain help-desk tickets that contained users’ information.
已确认
J:COM: email addresses of J:COM NET and partner cable users leaked via KDDI mail platform breach
J:COM announced the intrusion on June 23 and reported the scope on July 6 (updated July 21). Unauthorised access affecting J:COM began on May 16, 2026.
已确认
BIGLOBE: email addresses of 5,016,432 people leaked via KDDI mail platform breach
BIGLOBE announced on June 23 the intrusion into the KDDI mail system behind BIGLOBE Mail, and fixed the leaked count on July 6.
已确认
Osaka Kyoiku University: 1,529 student/staff records leaked via wrong email attachment
A staff email with the wrong attachment sent 1,529 personal-data rows externally; disclosed June 23, 2026 (distinct from the earlier student BCC incident).
调查中
Glendale Community College: student records may have been copied
Notified of a potential cyber incident on June 16, 2026, the college determined data related to student educational records was potentially copied without authorisation.
已确认
First Advantage: employee inbox downloaded after phishing
A Drug & Occupational Health Screening Unit employee’s account was compromised by sophisticated phishing around November 13, 2025, and the inbox contents were downloaded.
已确认
Tengai Foundation: 1,834 Morita Akio Juku registrants leaked via Meruhaikun
After Meruhaikun intrusion, Tengai disclosed June 23, 2026; final report confirmed 1,834 registrants’ email/name etc. Vendor root to be linked later.
已确认
KDDI: intrusion into mail platform for six ISPs leaked email addresses of 12,231,954 people
On June 17, 2026, KDDI found unauthorised access to the mail platform it provides to six ISPs and announced it on June 23. A vulnerability in third-party software used by the platform was exploited.
已确认
Chubu Telecommunications commufa mail: 727,176 people affected via KDDI mail platform breach
Chubu Telecommunications announced on June 23 the intrusion into the KDDI system behind commufa mail and fixed the leaked count on July 6.
已确认
KDDI Web Communications CPI mail: email addresses of 1,250,543 people leaked via KDDI platform breach
KDDI Web Communications announced on June 23 the intrusion into the KDDI system behind CPI rental-server mail; access affecting it began on June 8, 2026.
已确认
STNet Pikara mail: addresses and passwords of 397,152 people leaked via KDDI platform breach
Through the intrusion into the KDDI system behind Pikara mail, STNet customer mail data leaked between June 14 and 17. STNet announced it on June 23 and fixed the count on July 6.
调查中
Unirita: mail-magazine contacts may have leaked via Meruhaikun intrusion
After Meruhaikun intrusion notice, Unirita disclosed June 22, 2026 that company name, person name and email may be in scope. Count under investigation. Vendor root to be linked later.
调查中
ANDMAMACO: registrant data may have leaked via Meruhaikun intrusion
Possible data leak: After Meruhaikun intrusion reports, ANDMAMACO disclosed June 22, 2026. No public count. Vendor root to be linked later.
调查中
Hands Holdings: investigating possible personal-data leak after suspected malware
Possible data leak: Suspected malware on some internal systems detected June 19, 2026 and isolated. Exfiltration not confirmed but under investigation; disclosed June 22.
调查中
Fujikura Composites: data may have leaked after suspected Exchange Online mailbox intrusion
Suspected third-party activity on Exchange Online mailboxes may have exposed information; disclosed June 22, 2026 with PPC report. Detail PDF unreachable; HTML notice used as source.
已确认
JSEG: 1,644 newslist emails/names leaked via Meruhaikun
After Meruhaikun intrusion, JSEG posted June 22, 2026; later confirmed leakage; Aug 17 final report fixed 1,644 subscribers’ email and name. Vendor-wide totals belong on the vendor root and are not summed here.
调查中
e-Clinic: newsletter data may have leaked via Meruhaikun intrusion
Possible data leak: After Meruhaikun intrusion affecting its newsletter, e-Clinic disclosed June 20, 2026. Count still under investigation. Vendor root to be linked later.