已確認
KCI Telecommunications: files copied in intrusion
Network segments were accessed on August 22, 2025 and files were copied and potentially viewed.
資料外洩事件
依企業、國家、產業、發生年份和攻擊方式查詢事件，了解外洩資料、影響範圍、查證狀態、企業應對及來源。
已確認
Nacca & Capizzi: files copied in network intrusion
An individual accessed the network from November 26 to December 4, 2025 and took copies of files that may contain names, SSNs and driver’s licence numbers.
已確認
FuturHealth: files viewed and copied
Files on the network were viewed and copied by an unauthorised actor between August 8 and 14, 2025.
調查中
Pyramid Global Hospitality: employee data may have been affected by network event
Possible data leak: Around August 14, 2025, Pyramid became aware of suspicious network activity, initially finding no indication data was affected; on September 30, 2025 it discovered data on its servers was impacted, and determined current and former employee data was likely affected.
調查中
Evergreen Healthcare Group: files on cloud healthcare platform may have been accessed
Around December 3, 2025, EHG became aware of unauthorised activity in its cloud-based healthcare platform; preliminary investigation found evidence certain files may have been accessed by an unauthorised party.
調查中
360training (MEC): card data may have been sent to attacker via malicious website script
Possible data leak: Around November 25, 2025, MEC discovered suspicious activity on its website; on November 26 it found an unauthorised party had added a script sending credit card data to a Google Analytics account it controlled.
已確認
Hennessy Advisors: Hennessy Funds investor data accessed and released without authorisation
On March 30, 2025, Hennessy Advisors discovered suspicious activity affecting access to certain systems and data. In late December 2025 it learned that data including personal information of certain Hennessy Funds investors had been accessed and released without authorisation, and on February 5, 2026, after reviewing the released information, it confirmed unauthorised access to notified individuals’ information.
已確認
QualDerm Partners: patient information removed after network intrusion
On December 24, 2025, QualDerm detected unauthorised activity on certain systems; the investigation found an unauthorised actor accessed a limited number of systems between December 23 and 24, 2025 and removed certain stored information.
已確認
Cyrus D. Mehta & Partners: data removed in intrusion
An unauthorised third party accessed systems and removed data; address, date of birth, SSN and passport or other IDs may be involved.
已確認
Beacon Pointe: social engineering led to file theft
Between January 30 and February 1, 2026, an unauthorised actor used social engineering to access part of the IT network and take files.
已確認
Center for Advanced Eye Care: legacy system PHI accessed
Protected health information in legacy systems was subject to unauthorised access.
調查中
CSA Tax reports possible exposure of names and Social Security numbers
Unauthorised access on December 2, 2025 may have affected stored names and Social Security numbers.
已確認
Too Lost: user data transferred from web application
Unauthorised access and data transfer involving a web application occurred between July 25 and September 2, 2025, including names and contact details such as address and email.
已確認
Choice Hotels: franchisee records accessed via social engineering despite MFA
On January 14, 2026, social engineering gave access to an MFA-protected application with franchisee and applicant records, including names, contacts, SSNs and dates of birth.
已確認
TAK Broadband: files acquired after systems intrusion
On August 11, 2025, TAK became aware of suspicious activity in its network; the investigation found an unauthorised third party accessed certain systems between August 2 and 12, 2025 and acquired certain files.
調查中
FABRIC TOKYO: other customers’ data may have been shown due to EC settings error
Possible data leak: From about 18:30 to 23:00 on February 18, 2026, a product-detail settings error could show the wrong customer data; disclosed on February 19. Not an intrusion.
已確認
Alpine Lumber ransomware: files viewed and obtained
An unauthorised actor viewed and obtained files on a file server between December 14 and 22, 2025, and devices were encrypted with ransomware.
調查中
JR Sendai Hospital: patient data of 11,791 people may have leaked after device losses
Possible data leak: After finding missing devices on February 3, 2026, the hospital issued a first notice on February 18 and later updates expanding the affected set to 11,791 people as of the June 15 update.
已確認
JOGMEC: names of 2,246 mining-right holders leaked after ex-staff removal of data
JOGMEC announced on February 17 that a former employee had taken outside personal data obtained while employed.
調查中
Miyazaki Prefecture: personal data of 102 people may have leaked after accounting documents went missing
Possible data leak: December accounting vouchers being returned to the Minaminaka agriculture office went missing and contain personal data of 102 people; disclosed on February 16.