Data breach incidents
Data breach incidents, most recently reported first.
KIPA’s IDEARO platform hacked, exposing 62 MB of data
Impact: Approximately 62 MB of data exfiltrated
On 6 November 2026, attackers exploited a vulnerability in the file upload feature of IDEARO, a platform operated by the Korea Invention Promotion Association (KIPA), to gain access and install and run malware. KIPA detected and blocked the intrusion on 11 November and confirmed that 62 MB of data had been transferred outside the organisation from some servers. The attackers could also access attachment storage, but it has not been confirmed whether any attachments were actually viewed or exfiltrated. No signs of intrusion were found on the separate server holding encrypted member information.
Read on 데일리시큐 ↗Hack at Coinone customer support contractor exposes personal information
↳ Knock-on damage from the MetaM incident · View original incidentOn 12 November 2026, an external attacker illegally accessed servers belonging to MetaM, Coinone’s customer support contractor, and viewed or exfiltrated customer support information. The exposed data included names, phone numbers, email addresses, bank account numbers, passwords, resident registration numbers and identity document issue dates that customers themselves provided during chat or telephone consultations, with the specific data varying according to each person’s consultation.
Related reports: 2 →Cyber-attack on France’s Maileva exposes 22 million people’s data
22mImpact: Personal information of 22 million people
France’s Maileva suffered a cyber-attack in which the personal information of 22 million people was stolen. The precise timing of the attack, the types of information exposed and the response measures have not been confirmed.
Related reports: 3 →MetaM customer service systems hacked, exposing phone numbers and conversations
Impact: Phone numbers and customer service conversations in some customer service systems
An external attack on some of MetaM’s customer service systems revealed indications that phone numbers and customer service conversations had been accessed without authorisation or exfiltrated. MetaM became aware of the incident following a customer service outage at 6:03 am on 12 November 2026. During its investigation, the company found that abnormal access to some services had occurred before it became aware of the incident, and it is investigating the extent of any further data exposure and the intrusion vector.
Related reports: 2 · last report →Attack on Inje University server exposes 24,011 personal information records
24kImpact: 24,011 personal information records belonging to students and staff
An external attack on a server associated with Inje University’s Flipped Learning Class system for course delivery exposed 24,011 personal information records belonging to students and staff. The university learnt of the incident through a notification from the Ministry of Education on 12 November, and the exposed data included student IDs, employee IDs, names, email addresses and mobile phone numbers. Passwords and resident registration numbers were not included, and the university blocked network access to the affected server and decided to shut down the system.
Related reports: 7 · last report →Unauthorised access raises concerns over personal data on Noran Woosan website
On 11 November, unauthorised external access and indications that a third party may have viewed some customers’ personal information were detected on the Noran Woosan website, operated by the Korea Federation of SMEs (KBIZ). Names, the first seven digits of resident registration numbers, contact details and addresses may have been viewed, while investigators are still establishing whether a leak occurred and the extent of any impact. KBIZ blocked the attacking IP addresses, reported the incident to the Korea Internet & Security Agency (KISA) and notified customers of the possible leak.
Related reports: 14 →Keihan group warns of possible LINE data leak involving about 250,000 customer entries
250kImpact: Potential leak of customer information, including LINE IDs, covering approximately 250,000 customer entries, counting repeat registrations. Names and addresses may also be included for up to approximately 30,000 of those entries.
Keihan Holdings announced that information including IDs for approximately 250,000 customer entries, counting repeat registrations, may have leaked from customers who had added five official LINE accounts run by four group companies as friends. Names and addresses may also have leaked for up to approximately 30,000 of those entries. The cause was reported to be unauthorised access to Sonicmoov, which provides services that extend LINE's functionality.
Read on NHKニュース ↗ID images leaked in breach of Japan's inflation relief coupon application system
Impact: Images of children's and guardians' My Number cards and driving licences
Unauthorised access occurred in a Japanese application system for coupons intended to address rising prices. Images of children's and guardians' My Number cards and driving licences were leaked.
Read on Yahoo!ニュース ↗Unauthorised access to Itami childcare service raises personal data leak concerns
Impact: Possible leak of facility communications and personal information of children and their guardians
Unauthorised access occurred on icuco book in Itami, Japan. Concerns were raised that facility communications and the personal information of children and their guardians may have been leaked.
Read on 合同会社ロケットボーイズ ↗Employer Solutions Staffing Group belatedly reports January data breach
19.7kImpact: 19,735 affected people across the three states specified in the article (19,551 in Texas, 141 in Rhode Island and 43 in Vermont); total scope unconfirmed
US-based Employer Solutions Staffing Group detected suspicious activity on its network on 13 January 2026 and confirmed that files had been accessed or acquired without authorisation that same day. The exposed data included names, Social Security numbers, driving licence and government-issued identification numbers, financial account and payment card information, and medical and health insurance information. The article identified 19,551 affected people in Texas, 141 in Rhode Island and 43 in Vermont, but did not specify the total number affected. The company began posting notifications to affected individuals on 12 November and is offering 12 or 24 months of credit monitoring and identity protection services, depending on the recipient.
Read on Claim Depot ↗Possible data leak affects 44 children and staff in Shijonawate
26Impact: Possible leak of information on 18 children and 26 staff members
Information on 18 children attending childcare facilities and 26 staff members in Shijonawate, Japan, may have been leaked. Unauthorised access to icuco’s nap monitoring system was identified as the cause.
Read on 合同会社ロケットボーイズ ↗Sensitive information leaked at Ironbridge Wells Council
Sensitive information was leaked at Ironbridge Wells Council. An investigation is under way to assess potential legal action relating to the breach.
Related reports: 2 →Potential legal action examined over Premier Business Solutions’ August data breach
An investigation examining possible legal action over Premier Business Solutions’ August 2026 personal data breach was announced. According to the company’s notice, an unauthorised party accessed some systems from 11 to 14 August, and personal information may have been affected. The company isolated the affected systems, reset passwords and reported the incident to federal law enforcement, among other measures, while the full scale of the impact remained unconfirmed.
Read on Claim Depot ↗Personal data stolen in University of Texas at Arlington cyber-attack
Impact: Personal information stolen
Personal information was stolen from the University of Texas at Arlington in a cyber-attack. The university confirmed the data theft during its investigation but did not disclose the specific types of information involved.
Read on The Record ↗Social Security numbers confirmed excluded from data breach
A person familiar with the data breach said that Social Security numbers were not among the information exposed. The affected organisation, other types of information exposed, and the scale of the breach have not been confirmed.
Read on www.reporter.net ↗EZaccessMD June–July data breach prompts law firm investigation into possible lawsuit
EZaccessMD said some files on its network were accessed without authorisation between 30 June and 30 July 2026, and that it became aware of the incident around 30 July. Personal and medical information, including names, Social Security numbers, contact details, diagnoses and test results, may have been exposed, and the company is reviewing the affected data. This article is a follow-up report on a law firm's investigation into a possible lawsuit related to the incident.
Read on Claim Depot ↗Dexcom notifies victims of personal and health data breach linked to October account compromise
Dexcom notified victims of a data breach relating to the employee account compromise and file downloads caused by a social engineering attack that it disclosed in October 2026. On 2 November, it confirmed that personal information may have been included; depending on the individual, this included Social Security numbers, government ID information or health information such as prescription numbers and diagnoses. The total number of people affected and the exact date of the compromise were not disclosed.
Read on cisonews.net ↗Australian Capital Territory warns around 6,000 people after booking service breach
↳ Knock-on damage from the Bookeasy incident · View original incident6kImpact: Around 6,000 people notified of possible exposure of personal information and booking details
A breach of booking platform Bookeasy raised concerns that personal information and booking details of Australian Capital Territory park and campsite users may have been exposed. The territory government warned around 6,000 people and suspended use of the platform. VisitCanberra's accommodation and tourism booking services were also affected, and some users received suspicious emails and WhatsApp messages.
Related reports: 3 →Snow Peak confirms exploitation of service vulnerabilities and unauthorised account logins
24.9kImpact: Information on 24,948, 5,923 and 21,553 people across the respective services leaked or potentially leaked; unauthorised logins to up to 445 accounts
Japan's Snow Peak disclosed the exploitation of vulnerabilities in its second-hand buyback, event booking and community services, alongside unauthorised logins to its online store and other services. Information on 24,948, 5,923 and 21,553 people, respectively, was leaked or may have been leaked from the three services. Separately, unauthorised logins to up to 445 accounts were confirmed.
Related reports: 2 →Keisei reservation system breach may expose 3.37 million customer records
3.4mImpact: Possible exposure of up to approximately 3.37 million customer records
Unauthorised access to Keisei Electric Railway’s Skyliner seat reservation system on 11 November 2026 raised concerns that up to approximately 3.37 million customer records may have been exposed. The information includes user IDs, encrypted passwords, names, phone numbers and email addresses. The company has suspended online reservations and is investigating the scope of the breach, with no timetable for resuming the service as of 14 November.
Related reports: 15 →