已確認
Advantage Media Services: data copied from server environment
In September 2025, suspicious activity was identified; an unauthorised actor briefly accessed the server environment and copied certain data.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
已確認
illumifin: files with insurer clients’ data copied
On November 4, 2025, illumifin identified unusual network activity; an unauthorised person accessed the network and acquired copies of files, which on November 10 were found to possibly contain information received from or on behalf of its clients.
已確認
Mercer Advisors confirms third party obtained client data
Unauthorised access around January 22, 2026 resulted in a third party obtaining names, contacts, SSNs, government IDs, dates of birth, account numbers and, for some, login credentials.
調查中
Elephants Food Group reports possible data copying in network intrusion
Possible data leak: Activity from January 25 to February 11, 2026 may have resulted in personal information being copied.
調查中
Advantage Gold reports possible customer-data exposure via firewall flaw
A third-party firewall vulnerability was exploited; names, addresses, contacts, some SSNs and account numbers may have been exposed (unauthorised access confirmed).
已確認
Oklahoma Tax Commission: unauthorised access to W-2 and 1099 files in OkTAP
In December 2025, the OTC learned of suspicious activity in the OkTAP taxpayer portal; certain W-2 and 1099 files were accessed without authorisation between July 5, 2024 and December 20, 2025, containing names and SSNs.
已確認
Mobilelink: data acquired without authorisation in network incident
Investigation of a November 9, 2025 network disruption found data acquired without authorisation that potentially contained notified individuals’ information.
調查中
WEG Electric reports possible exposure from insider access to employee records
Possible data leak: A now-terminated employee accessed employee records without a legitimate reason; SSNs and payroll information may have been accessible.
已確認
STRATeBEN phishing-related breach accessed health-plan member data
Unauthorised access to an employee Microsoft 365 account resulted in access to group health-plan members’ names, SSNs and dates of birth.
已確認
California Online Public Schools: student personal data in posted board packets
Around November 14, 2025, CalOPS learned that Board agenda packets posted on its website included personal information and removed them; packets for meetings from July 2023 to November 2025 included student and parent names, contact details, disability classifications and provider notes.
已確認
MXB Battery Operations: stored information accessed during network disruption
Around November 15, 2025, a network disruption occurred; certain information on the network was accessed without authorisation between November 11 and 15, 2025.
調查中
AILCO reports possible loan-applicant data exposure at vendor Kaaj
Credit-analysis vendor Kaaj suffered unauthorised access on January 13, 2026 and some data was copied; applicants’ names, addresses and SSNs may have been exposed.
已確認
Alliance Industrial Refrigeration: names and SSNs acquired
Suspicious network activity was discovered on December 25, 2025; data was accessed and acquired between December 25 and 26, 2025, including names and SSNs.
調查中
Nephrology Associates Medical Group: information may have been accessed via employee email
Around May 20, 2025, suspicious activity in the email system was discovered; an unauthorised individual may have accessed information in an employee account.
調查中
Cetera reports possible exposure via compromised email account
Possible data leak: An employee email account was accessed between July 7 and August 21, 2025 and personal information may have been involved.
已確認
Hightower: files downloaded via compromised user account
Through a compromised user account, files in the company’s environment were downloaded without authorisation on January 8–9, 2026.
已確認
Telecharge accounts accessed in brute-force attack
On January 19, 2026, a brute-force attack accessed some accounts on the Telecharge ticketing site; names and usernames/passwords could have been subject to access.
調查中
Stockton Cardiology: patient files may have been accessed and removed
On December 15, 2025, suspicious emails sent to several employees were identified; on January 17, 2026, the group found that business and patient-care files may have been accessed and removed, potentially including names, mailing and email addresses and billing records with limited medical information.
調查中
Check City: files may have been accessed or removed during network disruption
Around April 3, 2025, Check City observed a network disruption caused by unauthorised access; the investigation found some files may have been accessed and/or removed around March 21, 2025, and on February 17, 2026 it determined the files may have contained personal information.
已確認
Senior Aerospace Jet Products/Ketema: attacker accessed files with personal data in attempted ransomware incident
In late December 2025, Senior identified and responded to an attempted ransomware incident affecting the Senior Aerospace Jet Products/Ketema environment. It was initially believed to have been blocked with no evidence of data compromise, but forensic analysis completed in late February 2026 found the attacker was able to access files containing personal information.