Hokuto City: 586 Hokuto Fan Club member emails leaked via misaddressed mail
On February 13, 2026 a contractor sent fan-club event mail with To instead of Bcc so all member addresses were visible; the city disclosed this on February 14.
依企業、國家、產業、發生年份和攻擊方式查詢事件,了解外洩資料、影響範圍、查證狀態、企業應對及來源。
On February 13, 2026 a contractor sent fan-club event mail with To instead of Bcc so all member addresses were visible; the city disclosed this on February 14.
Possible data leak: Five SD cards used for voter-roll checks in the 8 Feb 2026 general election were found missing on February 10 and the city disclosed the loss.
Figure discovered unauthorised activity on its systems and found evidence that on January 28, 2026 data containing personal information was obtained through queries on company databases storing loan and loan inquiry data. It found no evidence of unauthorised access to customer accounts or funds.
Malware accompanied unauthorised access, with possible exposure of personal information in databases. The final investigation did not establish confirmed exfiltration.
Sofinter confirmed that an intrusion during January 20–24, 2026 encrypted virtual infrastructure and copied data from corporate servers.
Possible data leak: On February 13, 2026, TENGA USA discovered an unauthorised party had accessed one employee’s work email account; between 12am and 1am PT that day the party used it to send spam to contacts in the account history.
Tulsa Airports Improvement Trust said an unauthorized party accessed its systems and acquired files between January 17 and 20, 2026.
Data was accessed and acquired from the network by an unauthorised actor between June 6 and 9, 2025.
An unauthorised third party accessed the company’s network and acquired certain files in January 2024; review found they included information related to orders from a business customer (data owner name templated).
GALA Yuzawa announced on February 12 that ransomware on some servers may have allowed customer personal data to leak externally.
On December 14, 2025, AltaMed experienced a cybersecurity incident that limited access to certain systems while care continued; its investigation found employees’ names, addresses, SSNs and compensation information may have been accessed.
After detecting an anomaly on a used cloud service on 5 Dec 2025 and confirming possible personal-data exposure on 16 Jan 2026, Mynavi issued a first notice on 12 Feb and later updates with category counts.
The firm experienced a network disruption on June 9, 2025; the investigation found an unknown actor acquired certain data without authorisation on or about June 8, 2025.
On February 2, 2026, employee W-2 forms were inadvertently disclosed to an unauthorised actor.
In September 2025, the firm detected suspicious activity on certain systems; the investigation found an unauthorised party accessed parts of its environment on September 18, 2025 and copied data. The firm says the same event affected thousands of organisations using the same firewall technology.
Possible data leak: After finding a malicious file on the hosting server on January 8, 2026, Nittai disclosed on February 9 that its N-Trading shop had been tampered with; a follow-up listed 3,887 members.
A cloud-security tool found support-renewal forms on cloud storage that may have been publicly readable; Saison Technology disclosed this on February 9.
On February 5, 2026, delivery-note PDFs meant for individual recipients were sent to multiple partners; after recall, 10 partners still received them. Parent Fukuda Denshi disclosed on February 9.
An unauthorised party accessed the network October 14–21, 2025 and took files.
After card-brand alerts of possible card-data exposure on its EC site, Beauty Garage stopped card payments and issued a first notice on February 6, 2026, with later updates still reporting ongoing investigation.