依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
An unknown third party accessed certain Columbia Bank applications and information between October 2 and December 22, 2025; on March 6, 2026 the bank found the data contained personal information.
On February 23, 2026, the firm discovered an unauthorised user had accessed its third-party tax filing software and filed fraudulent self-prepared returns on clients’ behalf; sensitive personal information was likely accessible to the actor.
Around February 17, 2026, suspicious network activity was found; an unauthorised individual may have obtained files with customer names, addresses, dates of birth, diagnosis codes, insurance information and identification numbers.
On March 30, 2026, City Health discovered unauthorised access to its server that occurred between March 2 and 11, 2026; names, insurer names and procedure codes were accessed, but not dates of birth, contact details or SSNs.
On November 25, 2024, Mindpath experienced a network disruption; limited information on its network may have been copied by an unauthorised actor between November 11 and 25, 2024.
On February 26, 2026, suspicious activity was detected on part of the network; certain files may have been accessed without authorisation on February 26–27, 2026.
Possible data leak: An unauthorised actor accessed systems between July 27 and August 15, 2025 and may have copied or viewed files.
Possible data leak: Unusual network activity beginning December 8, 2025 may have allowed personal information to be viewed or copied.
Unusual activity was identified on February 23, 2026; unauthorised access between February 17 and 23 resulted in copies of files being taken, which on March 13 were found to contain names and SSNs.
Unauthorised access to one employee email account from January 30 to March 12, 2026 may have exposed names, dates of birth, tax IDs, account numbers and other data.
In January and/or February 2026, patients’ protected health information was sent by email without encryption; discovered February 17, 2026. Emails may have included names, demographic details, limited clinical information (including diagnoses) and insurance information.
On March 4, 2026, TruView confirmed a cybercriminal may have accessed personal information in its environment between July 18 and August 15, 2024.
After suspicious activity in its systems, the agency determined that driver names, licence numbers and dates of birth may have been temporarily accessed by an unauthorised person. The CA filing lists February 22, 2026.
An employee email account was accessed through social engineering and may have contained names, addresses, SSNs and account numbers.
An employee email account was accessed without authorisation between February 6 and 9, 2026; on February 26 the company found protected health information was accessed, which may include names, dates of birth, medical record numbers and treatment information.
An unauthorised actor used valid credentials to clone third-party partner repositories containing law-firm customers’ client data, including names, addresses, SSNs, government IDs and passport numbers.
An unauthorised party accessed human-resources systems in October 2025 and accessed and obtained records about employees and service providers.
Between February 4 and 7, 2026, support tickets on a third-party customer-service platform were accessed or acquired without authorisation; they included names and medical information.
The network was accessed September 18–19, 2025; files were copied and potentially viewed, including names, SSNs, medical and health-insurance information.
On March 24, 2026, a spike in login attempts was detected as a credential stuffing attack using credentials stolen from other sites; accounts reusing the same credentials may have been accessed, exposing names, email addresses, lookup and order history and partial card details (last four digits, card type).