調查中
J.M. Forbes reports possible client-data exposure in email compromise
An employee email account was accessed through social engineering and may have contained names, addresses, SSNs and account numbers.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
調查中
Murata Manufacturing: employee and partner personal data may have been taken after IT-environment intrusion
After an IT-environment intrusion, Murata’s April 6 second and April 27 third notices said about 73k employee-related and about 15k external-contact records may have been taken.
已確認
Resonus Face Clinic Tokyo: personal data of 369 patients taken after ransomware
After detecting a cloud-server outage on March 11, 2026 and confirming ransomware-style intrusion, the clinic disclosed on April 6 that personal data of 369 patients had been taken.
已確認
Option Care Health: employee email accessed, exposing health information
An employee email account was accessed without authorisation between February 6 and 9, 2026; on February 26 the company found protected health information was accessed, which may include names, dates of birth, medical record numbers and treatment information.
調查中
YCC Information Systems: entrusted partner data may have leaked after file-server ransomware
Ransomware on the file server was confirmed early on April 2, 2026 (first notice April 3). The April 14 fourth notice said entrusted partner data may have leaked; the May 20 fifth notice found no clear outbound traces but did not fully rule out access.
已確認
Tokyu Resorts & Stay: guest data of 95,986 people leaked via misaddressed mail
On March 25, 2026 an internal mail with a guest CSV was wrongly sent to one contractor employee; deletion was confirmed the same day and disclosed April 3.
已確認
GMO Aozora Net Bank: 1,820 customer records leaked via contractor SocioFuture file sent to another bank
From 28 Nov 2024 contractor SocioFuture sent ostensibly cleared templates to another bank with customer data left in hidden sheets; discovered March 27, 2026 after the other bank noticed and disclosed April 3.
已確認
Awa Bank: 27,745 customer-related records (with duplicates) leaked from OA test environment
After an external tip on March 24, 2026, Awa Bank found its OA test environment had been accessed and customer-related data leaked; disclosed April 3. Separate from live banking systems.
已確認
DocketWise: repositories cloned with valid credentials
An unauthorised actor used valid credentials to clone third-party partner repositories containing law-firm customers’ client data, including names, addresses, SSNs, government IDs and passport numbers.
已確認
Wynn Resorts confirms HR records accessed and obtained
An unauthorised party accessed human-resources systems in October 2025 and accessed and obtained records about employees and service providers.
已確認
Hims & Hers: customer-service tickets accessed on third-party platform
Between February 4 and 7, 2026, support tickets on a third-party customer-service platform were accessed or acquired without authorisation; they included names and medical information.
已確認
IPPC pharmacy network intrusion: files with medical data copied
The network was accessed September 18–19, 2025; files were copied and potentially viewed, including names, SSNs, medical and health-insurance information.
調查中
Whitepages: accounts may have been accessed in credential stuffing attack
On March 24, 2026, a spike in login attempts was detected as a credential stuffing attack using credentials stolen from other sites; accounts reusing the same credentials may have been accessed, exposing names, email addresses, lookup and order history and partial card details (last four digits, card type).
已確認
Advantage Media Services: data copied from server environment
In September 2025, suspicious activity was identified; an unauthorised actor briefly accessed the server environment and copied certain data.
已確認
illumifin: files with insurer clients’ data copied
On November 4, 2025, illumifin identified unusual network activity; an unauthorised person accessed the network and acquired copies of files, which on November 10 were found to possibly contain information received from or on behalf of its clients.
已確認
Mercer Advisors confirms third party obtained client data
Unauthorised access around January 22, 2026 resulted in a third party obtaining names, contacts, SSNs, government IDs, dates of birth, account numbers and, for some, login credentials.
調查中
Elephants Food Group reports possible data copying in network intrusion
Possible data leak: Activity from January 25 to February 11, 2026 may have resulted in personal information being copied.
調查中
Advantage Gold reports possible customer-data exposure via firewall flaw
A third-party firewall vulnerability was exploited; names, addresses, contacts, some SSNs and account numbers may have been exposed (unauthorised access confirmed).
已確認
Fukuoka Bank: insurance-contract data of 1,052 individuals leaked via MetLife-seconded staff
A MetLife-seconded worker had improperly given the bank’s life-insurance contract data to MetLife; disclosed March 27, 2026 after MetLife’s report.
已確認
Oklahoma Tax Commission: unauthorised access to W-2 and 1099 files in OkTAP
In December 2025, the OTC learned of suspicious activity in the OkTAP taxpayer portal; certain W-2 and 1099 files were accessed without authorisation between July 5, 2024 and December 20, 2025, containing names and SSNs.