依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
Unauthorised access to the SFTP server used for Frost Bank software support led to intermittent file downloads between December 2025 and April 2026, including tax forms and bill-pay check images with names, addresses, SSNs/TINs, account and loan numbers and dates of birth.
Possible data leak: Vulnerability abuse on an attachment-separation mail server was recognised May 14, 2026 and disclosed May 19; the final report still found no confirmed theft but listed definitive at-risk fields.
An unauthorised person accessed some systems between January 7 and 14, 2026 and acquired copies of certain files.
A data security incident occurred around February 1, 2026; on April 22 the company found files containing personal information may have been subject to unauthorised access or acquisition.
A sophisticated actor used other legitimate companies’ cloud systems to gain access and accessed and copied files between January 16 and 22, 2026.
The April 2026 municipal mishap list published May 15 includes a Child/Youth Bureau misdelivery of a status-subject list affecting 104 people.
On March 3, 2026, an actor contacted city staff claiming to have accessed city files; the investigation found certain data was acquired without authorisation around February 23, 2026.
On May 8, 2026 an open-course mailing-list notice was sent with addresses in To:; disclosed May 15.
On September 29, 2025, Fluke learned a criminal actor exploited a vulnerability in a third-party application to access a limited segment of its network between August 10 and October 7, 2025; affected data included SSNs, dates of birth and a disability self-identification indicator.
On July 10, 2025, the firm found files encrypted in the virtual back-office environment shared with TradeUP; some files had been copied by an unauthorised party on July 8–9, 2025.
A vendor investigated suspicious activity in the part of its network dedicated to Lumexa’s affiliated practices; documents with patient information were taken between March 31 and April 9, 2026 and may have been viewed or copied.
Ransomware disclosed May 14, 2026; a later report confirmed credential theft, exfiltration and leak-site publication as of Aug 26, 2026.
Suspicious activity was identified on April 6, 2026; names, contact details, dates of birth, SSNs, licence and passport numbers and financial account information were among the data accessed.
A zero-day vulnerability in Oracle E-Business Suite, used for HR information, allowed unauthorised parties to access and acquire files on August 10, 2025; on March 12, 2026 Tulane determined files contained names, SSNs and direct-deposit/banking information.
After Anabuki Housing’s Feb 3, 2026 ransomware event, a May 12 notice confirmed 474 public-housing resident records leaked; the prefecture posted May 13.
Possible data leak: A March 26, 2026 ransomware outage was disclosed May 11; personal-data exfiltration remained under expert investigation.
In July 2025, a threat actor compromised the internal network, executed ransomware and accessed files containing names, dates of birth and Social Security information.
On May 8, 2026 a volunteer-recruitment mail was CC’d to Noto earthquake registrants, exposing names and emails; disclosed May 9.
Possible data leak: A Nishinari HS lodging-training teacher manual was briefly lost at an airport toilet on Dec 11, 2025 and recovered as airline lost-and-found; after parent briefings a May 8, 2026 press release followed.
On June 3, 2025, MSCU learned of a disruption to certain branch computer networks and confirmed data was taken; unencrypted files contained names, SSNs, driver’s licence/state ID numbers and financial account information.