已确认
Hokuto City: 586 Hokuto Fan Club member emails leaked via misaddressed mail
On February 13, 2026 a contractor sent fan-club event mail with To instead of Bcc so all member addresses were visible; the city disclosed this on February 14.
企业数据泄露与未经授权访问事件列表
按企业、国家、行业、发生年份和攻击方式查询事件，了解泄露数据、影响范围、核实状态、企业应对及来源。
调查中
Komae City: voter-roll data of 69,244 people may have leaked after election SD-card loss
Possible data leak: Five SD cards used for voter-roll checks in the 8 Feb 2026 general election were found missing on February 10 and the city disclosed the loss.
已确认
Figure: customer data obtained via unauthorised queries on loan databases
Figure discovered unauthorised activity on its systems and found evidence that on January 28, 2026 data containing personal information was obtained through queries on company databases storing loan and loan inquiry data. It found no evidence of unauthorised access to customer accounts or funds.
调查中
Sekaimon reports possible leak of member and business-related information
Malware accompanied unauthorised access, with possible exposure of personal information in databases. The final investigation did not establish confirmed exfiltration.
已确认
Sofinter confirms credential-enabled intrusion and corporate data exfiltration
Sofinter confirmed that an intrusion during January 20–24, 2026 encrypted virtual infrastructure and copied data from corporate servers.
调查中
TENGA USA: customer names and email contents may have been viewed via compromised employee account
Possible data leak: On February 13, 2026, TENGA USA discovered an unauthorised party had accessed one employee’s work email account; between 12am and 1am PT that day the party used it to send spam to contacts in the account history.
已确认
Tulsa airport operator reports acquisition of files containing personal information
Tulsa Airports Improvement Trust said an unauthorized party accessed its systems and acquired files between January 17 and 20, 2026.
已确认
Gehry Partners: data accessed and acquired
Data was accessed and acquired from the network by an unauthorised actor between June 6 and 9, 2025.
已确认
Nassau OOGP Vision Group: contact lens order files acquired after network intrusion
An unauthorised third party accessed the company’s network and acquired certain files in January 2024; review found they included information related to orders from a business customer (data owner name templated).
调查中
GALA Yuzawa: customer data of up to 1,518 people may have leaked after server ransomware
GALA Yuzawa announced on February 12 that ransomware on some servers may have allowed customer personal data to leak externally.
调查中
AltaMed: employee and patient information may have been accessed in cyber incident
On December 14, 2025, AltaMed experienced a cybersecurity incident that limited access to certain systems while care continued; its investigation found employees’ names, addresses, SSNs and compensation information may have been accessed.
调查中
Mynavi: user, partner and employee data may have leaked via cloud-service intrusion
After detecting an anomaly on a used cloud service on 5 Dec 2025 and confirming possible personal-data exposure on 16 Jan 2026, Mynavi issued a first notice on 12 Feb and later updates with category counts.
已确认
Fishman, Larsen & Callister: data acquired without authorisation before network disruption
The firm experienced a network disruption on June 9, 2025; the investigation found an unknown actor acquired certain data without authorisation on or about June 8, 2025.
已确认
Progress Foundation: employee W-2s disclosed to unauthorised actor
On February 2, 2026, employee W-2 forms were inadvertently disclosed to an unauthorised actor.
已确认
Jeff Anderson & Associates: data copied after intrusion via firewall technology
In September 2025, the firm detected suspicious activity on certain systems; the investigation found an unauthorised party accessed parts of its environment on September 18, 2025 and copied data. The firm says the same event affected thousands of organisations using the same firewall technology.
调查中
Nittai Kogyo N-Trading: 3,887 member records may have leaked after site intrusion
Possible data leak: After finding a malicious file on the hosting server on January 8, 2026, Nittai disclosed on February 9 that its N-Trading shop had been tampered with; a follow-up listed 3,887 members.
调查中
Saison Technology: 1,214 support renewal forms may have been publicly readable due to cloud-storage misconfiguration
A cloud-security tool found support-renewal forms on cloud storage that may have been publicly readable; Saison Technology disclosed this on February 9.
已确认
Fukuda Lifetec Tokyo: patient data of 550 people leaked via misdirected delivery notes
On February 5, 2026, delivery-note PDFs meant for individual recipients were sent to multiple partners; after recall, 10 partners still received them. Parent Fukuda Denshi disclosed on February 9.
已确认
Cottage Hospital: files taken in network intrusion
An unauthorised party accessed the network October 14–21, 2025 and took files.
调查中
Beauty Garage: card and customer data may have leaked after EC-site intrusion concern
After card-brand alerts of possible card-data exposure on its EC site, Beauty Garage stopped card payments and issued a first notice on February 6, 2026, with later updates still reporting ongoing investigation.