已確認
Industrial Acceptance Corporation: files taken from network
IAC became aware of unauthorised activity on February 24, 2025 and took systems offline; around March 4, 2025 it learned files were taken by an unauthorised actor.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
調查中
Johnson-Peltier Electric: files may have been copied after network intrusion
On March 10, 2026, an unauthorised actor accessed the network and potentially copied a limited number of files that may have contained names, SSNs and direct-deposit account information.
調查中
Texas Capital Bank: customer information may have been involved in security incident
Possible data leak: A security incident on April 26–27, 2026 (per the CA filing) involved customer names and other templated data elements; the bank says it has no evidence the data was targeted or misused.
已確認
Ampex Data Systems: network encrypted and data accessed by threat group
On March 21, 2026, a threat actor group accessed and encrypted the network at one office; forensics confirmed access to network data, which may have included contractors’, employees’ and dependents’ names, addresses, SSNs and dates of birth.
已確認
Nickey Kehoe: customer data exported via compromised Klaviyo access
On March 29, 2026, an unauthorised email sent via email provider Klaviyo and an export of stored customer information were identified; names, emails, phone numbers and postal addresses were included.
調查中
Interstate Management: personal data may have been taken from hotel systems
On April 23, 2026, the company confirmed personal information may have been accessed or taken from certain hotel systems between November 19 and 22, 2025.
調查中
ERMI: files may have been accessed via employee email accounts
Around July 25, 2025, ERMI learned an unauthorised individual may have accessed some employee email accounts; files may have been accessed or removed between about February 15 and August 14, 2025, and around April 17, 2026 they were found to contain personal information.
已確認
Sacramento County: employee forwarded client data to personal email
A County employee improperly forwarded work emails to a personal email account; some contained client names, case numbers, dates of birth, addresses and SSNs.
已確認
VacPartsWarehouse.com: payment card data may have been acquired from online store
An unauthorised actor accessed the online shopping platform and may have acquired payment transaction data from October 31 to December 12, 2025, including names, addresses, card numbers, expiration dates and security codes.
已確認
Cardinal Services: two intrusions exposed SSNs, medical and biometric data
Cardinal learned of unauthorised access around June 30, 2025 and again on August 8, 2025; on May 12, 2026 it found that systems accessed on June 25–26 and around August 8, 2025 contained names, dates of birth, SSNs, driver’s licence/state ID numbers, financial account, medical and health insurance information, digital signatures and biometric information.
已確認
Sefas Innovation: Frost Bank customer files downloaded from SFTP server
Unauthorised access to the SFTP server used for Frost Bank software support led to intermittent file downloads between December 2025 and April 2026, including tax forms and bill-pay check images with names, addresses, SSNs/TINs, account and loan numbers and dates of birth.
已確認
Beacon Mutual: copies of files acquired after network intrusion
An unauthorised person accessed some systems between January 7 and 14, 2026 and acquired copies of certain files.
調查中
Lusamerica Foods: files with personal data may have been accessed or acquired
A data security incident occurred around February 1, 2026; on April 22 the company found files containing personal information may have been subject to unauthorised access or acquisition.
已確認
Boston Capital: files accessed and copied
A sophisticated actor used other legitimate companies’ cloud systems to gain access and accessed and copied files between January 16 and 22, 2026.
已確認
City of Port Hueneme: city data acquired without authorisation
On March 3, 2026, an actor contacted city staff claiming to have accessed city files; the investigation found certain data was acquired without authorisation around February 23, 2026.
已確認
Fluke: third-party application vulnerability exploited to access network
On September 29, 2025, Fluke learned a criminal actor exploited a vulnerability in a third-party application to access a limited segment of its network between August 10 and October 7, 2025; affected data included SSNs, dates of birth and a disability self-identification indicator.
已確認
US Tiger Securities: back-office files encrypted and copied
On July 10, 2025, the firm found files encrypted in the virtual back-office environment shared with TradeUP; some files had been copied by an unauthorised party on July 8–9, 2025.
調查中
Lumexa Imaging: patient documents may have been taken from vendor network
A vendor investigated suspicious activity in the part of its network dedicated to Lumexa’s affiliated practices; documents with patient information were taken between March 31 and April 9, 2026 and may have been viewed or copied.
已確認
Cresset: client personal information accessed
Suspicious activity was identified on April 6, 2026; names, contact details, dates of birth, SSNs, licence and passport numbers and financial account information were among the data accessed.
已確認
Tulane University: HR files acquired via Oracle E-Business Suite zero-day
A zero-day vulnerability in Oracle E-Business Suite, used for HR information, allowed unauthorised parties to access and acquire files on August 10, 2025; on March 12, 2026 Tulane determined files contained names, SSNs and direct-deposit/banking information.