已確認
EMC Water: files obtained via Oracle EBS flaw
A previously unknown Oracle EBS vulnerability was used to obtain files from the company’s EBS application.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
調查中
Wisner Baum: files with SSNs and medical data may have been obtained
On October 9, 2025, Wisner Baum detected unusual network activity; the investigation found an unauthorised third party accessed the network between October 8 and 9, 2025 and may have obtained certain files.
已確認
CHP 11-99 Foundation: staff email account compromised by phishing
Around September 16, 2025, a staff member forwarded a suspicious email to the external provider’s help desk, was told the link was clean, and opened it, leading to compromise; the attacker had full access to the email account, including all folders and attached documents.
調查中
Itasca Consulting Group reports possible data exposure
Around December 12, 2025, a third party attempted to infiltrate the network and personal information may have been accessed.
已確認
MACT Health Board: files with patient SSNs and medical data accessed in disruptive incident
MACT experienced an incident that disrupted its IT systems; the investigation found an unauthorised party accessed some files on its systems between November 12 and 20, 2025.
調查中
Clawson Honda of Fresno: files may have been accessed or copied
On February 27, 2025, Clawson became aware of suspicious network activity; the investigation found certain files may have been accessed or copied without authorisation between February 27 and 28, 2025.
調查中
Diversified Benefit Services: SSNs and medical data may have been downloaded from email system
Around August 7, 2025, DBS identified suspicious activity in its email environment; the investigation found an unauthorised actor accessed the email system and potentially downloaded certain emails and files.
調查中
Chatham Asset Management reports possible personal-data compromise
Possible data leak: A network compromise identified on December 8, 2025 could have compromised personal information.
調查中
Insurance Office of America: data may have been accessed after phishing-led intrusion
On June 30, 2025, IOA discovered certain internal systems had been affected by a security incident; the investigation found an unauthorised party gained access through a phishing email and data may have been accessed or acquired between June 25 and 30, 2025.
調查中
Topstep reports possible account access in credential stuffing
A December 14, 2025 credential-stuffing attack may have accessed user accounts.
調查中
KMS Solutions reports possible unauthorised access or acquisition
Information in systems was subject to unauthorised access or acquisition beginning November 27, 2025; personal data may have been affected.
調查中
DSS (Next Street) reports possible unauthorised access
Possible data leak: Investigation of unusual activity around August 19, 2025 found information suggesting an unknown actor accessed the network.
調查中
SPCorp Services: personal information may have been accessed or acquired
Around September 26, 2025, SPCorp experienced unauthorised access to its network; after investigation and document review it determined on January 7, 2026 that personal information may have been accessed and/or acquired.
已確認
Memberclose: personal data downloaded from cloud application
On October 29, 2025, a limited amount of data, including names and dates of birth, was downloaded from a cloud application.
調查中
Goodwin reports possible data access in network intrusion
The network was accessed from about August 28 to September 12, 2025; personal data may have been accessed or acquired.
已確認
Monroe University: files with personal data copied after systems intrusion
An unauthorised party accessed certain Monroe University systems between December 9 and 23, 2024 and acquired copies of some network files; on September 30, 2025 the university determined they contained personal information.
已確認
SAFE Credit Union: member information unintentionally disclosed
On December 12, 2025, SAFE Credit Union experienced an incident that led to the unintended disclosure of certain member information.
調查中
Chapman & Associates: personal information may have been accessed in network incident
The firm experienced a network security incident on January 31, 2025; forensic investigation found an unauthorised third party may have accessed certain personal information.
已確認
GSPlatformCo: unauthorised access to data in customer information system
GSPlatformCo detected unauthorised access to data hosted on one of the systems it used to store customer information; the data was a snapshot from April 2025, and the company says its current environment is secure.
調查中
Gym Management Service: network files may have been accessed
On August 16, 2025, the company observed unusual network activity; the investigation found certain files were potentially accessed without authorisation between July 25 and August 26, 2025.