已確認
NICT: voice files of 115 speakers leaked via mispublished speech corpus
A research speech corpus published on March 12, 2026 wrongly included 115 out-of-scope voice-check files found on March 13; disclosed March 19.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
調查中
Check City: files may have been accessed or removed during network disruption
Around April 3, 2025, Check City observed a network disruption caused by unauthorised access; the investigation found some files may have been accessed and/or removed around March 21, 2025, and on February 17, 2026 it determined the files may have contained personal information.
調查中
Mazda: 692 employee/partner records may have leaked after parts-warehouse system intrusion
In mid-December 2025 unauthorised access to a Thailand parts-warehouse system was found; Mazda disclosed possible personal-data exposure on March 19, 2026. Consumer customer data are stated not to be on that system.
已確認
Senior Aerospace Jet Products/Ketema: attacker accessed files with personal data in attempted ransomware incident
In late December 2025, Senior identified and responded to an attempted ransomware incident affecting the Senior Aerospace Jet Products/Ketema environment. It was initially believed to have been blocked with no evidence of data compromise, but forensic analysis completed in late February 2026 found the attacker was able to access files containing personal information.
調查中
Hotel Nikko Princess Kyoto: Expedia admin-account abuse may have exposed guest data and triggered fake payment messages
Possible data leak: On March 2, 2026 the hotel’s Expedia admin account was abused to send WhatsApp messages seeking card details; disclosed March 19.
已確認
Sekibunkan: 320 customer emails leaked via misaddressed textbook-sales mail
On March 18, 2026 a textbook re-acceptance notice was sent so recipients could see one another’s addresses; apology published March 19.
已確認
NHK: 32,940 information-system registrant emails leaked via misaddressed mail
On March 17, 2026 a vendor operator wrongly selected all information-system registrants for an approval mail so addresses were visible within each send group; NHK disclosed on March 18.
已確認
International Budo University: personal data of about 120 graduates leaked via IT contractor intrusion
The IT contractor detected an intrusion in early November 2025 and reported on February 16, 2026 that some graduate data had leaked; the university disclosed on March 18.
已確認
Kaplan North America: files with SSNs taken from servers
An unauthorised actor accessed Kaplan’s servers between October 30 and November 18, 2025 and took certain files; on February 21, 2026 Kaplan determined the files contained names, SSNs and/or driver’s licence numbers.
調查中
Tane General Hospital: surgical-patient data of 379 people may have leaked after contractor USB loss
Possible data leak: A contractor SPD worker noticed a USB with surgical data missing on February 19, 2026; the hospital was told on February 20 and disclosed on March 17.
已確認
OpenLoop Health: information removed after unauthorised system access
On January 7, 2026, OpenLoop learned that an unauthorised third party had gained access to certain systems and removed certain information; the access occurred from January 7 to 8, 2026.
調查中
Medica Publishing: customer and related personal data may have leaked after ransomware
Possible data leak: Ransomware struck on March 13, 2026 (disclosed March 17). The May 13 investigation found no definitive exfiltration proof but could not rule it out, treating an approximate 641,000 people as at risk.
調查中
Nippon Telenet: entrusted and customer personal data may have leaked after ransomware
A cyber-attack disruption began March 9, 2026 (disclosed March 17). The June 12 update reported no detected outbound transfer but still listed category counts that may be at risk.
調查中
Retail Merchandising Services: information may have been accessed via one email account
In January 2026, RMS detected unusual activity in its email environment; a single email account was intermittently accessed without authorisation between November 24, 2025 and January 7, 2026, and information in it may have been accessed.
調查中
Woundtech reports possible data copying
Possible data leak: Information may have been copied by an unauthorised individual in a December 2025 incident.
已確認
United Arrows: partner-list personal data of about 10,000 people leaked after ex-employee removal
An employee who left at end-December 2025 removed partner lists via a cloud external-link feature; discovered in January 2026 and disclosed March 16.
調查中
Chapter 13 Trustee Office of Rod Danielson: files may have been accessed or removed
On December 19, 2025, the office detected unauthorised access to its network; some files may have been accessed or removed between December 18 and 19, 2025, and on February 19, 2026 they were found to possibly contain personal information.
調查中
Trinity Health reports possible unauthorised disclosure through health information exchange
Possible data leak: Health Gorilla, an HIE member, requested patient information citing treatment, but the HIE could not confirm the recipients were authorised; health information may have been disclosed without authorisation.
調查中
Possible leak of Navia benefits-related personal information
Navia disclosed on March 13 that an unauthorized actor may have acquired personal information during access from December 22, 2025 to January 15, 2026.
調查中
Chukai TV: names and addresses may have leaked via misaddressed campaign direct mail
Possible data leak: A March 10, 2026 campaign DM had mismatched names and delivery addresses; disclosed March 13.