調查中
Zetton’s forty three reports possible leak of 18,553 personal-data records
Unauthorised access to two legacy-mail accounts may have exposed 18,553 personal-data records. The two accounts are not a count of affected people.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
已確認
Mobilelink: data acquired without authorisation in network incident
Investigation of a November 9, 2025 network disruption found data acquired without authorisation that potentially contained notified individuals’ information.
調查中
WEG Electric reports possible exposure from insider access to employee records
Possible data leak: A now-terminated employee accessed employee records without a legitimate reason; SSNs and payroll information may have been accessible.
已確認
STRATeBEN phishing-related breach accessed health-plan member data
Unauthorised access to an employee Microsoft 365 account resulted in access to group health-plan members’ names, SSNs and dates of birth.
已確認
California Online Public Schools: student personal data in posted board packets
Around November 14, 2025, CalOPS learned that Board agenda packets posted on its website included personal information and removed them; packets for meetings from July 2023 to November 2025 included student and parent names, contact details, disability classifications and provider notes.
調查中
Joyfull: data of 23,585 employees/applicants and relatives may have leaked via contractor Zynas cyber-attack
Contractor Zynas confirmed unauthorised access to a subcontractor hand-off server on January 29, 2026; its March 26 notice says Joyfull employee/applicant/relative data may be in scope (Joyfull’s own PDF returned HTTP404 at collection time, so the contractor official notice is cited).
已確認
MXB Battery Operations: stored information accessed during network disruption
Around November 15, 2025, a network disruption occurred; certain information on the network was accessed without authorisation between November 11 and 15, 2025.
調查中
MoonStar: server intrusion may have exposed online-store customer data for up to about 593,000 people
Possible data leak: First notice Mar 26, 2026 reported suspected server intrusion (no confirmed theft then). Oct 2/15 follow-ups concluded name/address/phone/email/order data likely leaked May 14–19 for up to 593,000 online-store customers. Cards/passwords not stored. First disclosure remains Mar 26.
調查中
AILCO reports possible loan-applicant data exposure at vendor Kaaj
Credit-analysis vendor Kaaj suffered unauthorised access on January 13, 2026 and some data was copied; applicants’ names, addresses and SSNs may have been exposed.
調查中
Sato Kogyo: worker and emergency-contact data may have been viewed after jobsite NAS intrusion
Unauthorised access to one jobsite NAS was confirmed on November 5, 2025; Sato disclosed on March 26, 2026 that personal data may have been viewed.
已確認
Alliance Industrial Refrigeration: names and SSNs acquired
Suspicious network activity was discovered on December 25, 2025; data was accessed and acquired between December 25 and 26, 2025, including names and SSNs.
調查中
Nephrology Associates Medical Group: information may have been accessed via employee email
Around May 20, 2025, suspicious activity in the email system was discovered; an unauthorised individual may have accessed information in an employee account.
調查中
Niigata University Hospital: endocrine/metabolic patient data may have leaked after USB loss
Possible data leak: A USB used in an in-hospital meeting on November 5, 2025 was found missing on November 18; disclosed March 25, 2026.
調查中
Cetera reports possible exposure via compromised email account
Possible data leak: An employee email account was accessed between July 7 and August 21, 2025 and personal information may have been involved.
已確認
Osaka Marathon Organising Committee: volunteer system auth disabled, exposing 4,101 registrants
Before shutdown work a contractor disabled personal authentication so other volunteers could view data from March 16–18, 2026; Osaka Prefecture and Osaka City disclosed on March 25.
已確認
Niigata University: student/guarantor roster of 1,478 people misattached to degree-check mail
The Graduate School of Science and Technology misattached an Excel sheet with roster data for 1,478 enrolled students to a degree-content check mail; disclosed March 24, 2026.
已確認
Fukushima University: faculty ages left reachable on the web via installation-plan reports
Faculty ages were left in installation-plan reports and pre-replacement CMS files remained searchable; disclosed March 24, 2026.
已確認
Hightower: files downloaded via compromised user account
Through a compromised user account, files in the company’s environment were downloaded without authorisation on January 8–9, 2026.
已確認
Telecharge accounts accessed in brute-force attack
On January 19, 2026, a brute-force attack accessed some accounts on the Telecharge ticketing site; names and usernames/passwords could have been subject to access.
調查中
Stockton Cardiology: patient files may have been accessed and removed
On December 15, 2025, suspicious emails sent to several employees were identified; on January 17, 2026, the group found that business and patient-care files may have been accessed and removed, potentially including names, mailing and email addresses and billing records with limited medical information.