Data breach incidents
Data breach incidents, most recently reported first.
KIPA’s IDEARO platform hacked, exposing 62 MB of data
Impact: Approximately 62 MB of data exfiltrated
On November 6, 2026, attackers exploited a vulnerability in the file upload feature of IDEARO, a platform operated by the Korea Invention Promotion Association (KIPA), to gain access and install and execute malware. KIPA detected and blocked the intrusion on November 11 and confirmed that 62 MB of data had been transferred outside the organization from some servers. The attackers also had access to attachment storage, but whether attachments were actually viewed or exfiltrated has not been confirmed. No signs of intrusion were found on the separate server that stores encrypted member information.
Read on 데일리시큐 ↗Hack at Coinone customer support contractor exposes personal information
↳ Knock-on damage from the MetaM incident · View original incidentOn November 12, 2026, an external attacker illegally accessed servers belonging to MetaM, Coinone’s customer support contractor, and viewed or exfiltrated customer support information. The exposed data included names, phone numbers, email addresses, bank account numbers, passwords, resident registration numbers, and identity document issue dates that customers themselves provided during chat or phone consultations, with the specific data varying according to each person’s consultation.
Related reports: 2 →Cyberattack on France’s Maileva exposes 22 million people’s data
22MImpact: Personal information of 22 million people
France’s Maileva suffered a cyberattack in which the personal information of 22 million people was stolen. The precise timing of the attack, the types of information exposed, and the response measures have not been confirmed.
Related reports: 3 →MetaM customer service systems hacked, exposing phone numbers and conversations
Impact: Phone numbers and customer service conversations in some customer service systems
An external attack on some of MetaM’s customer service systems revealed indications that phone numbers and customer service conversations had been accessed without authorization or exfiltrated. MetaM became aware of the incident following a customer service outage at 6:03 a.m. on November 12, 2026. During its investigation, the company found that abnormal access to some services had occurred before it became aware of the incident, and it is investigating the extent of any further data exposure and the intrusion vector.
Related reports: 2 · last report →Attack on Inje University server exposes 24,011 personal information records
24KImpact: 24,011 personal information records belonging to students and staff
An external attack on a server associated with Inje University’s Flipped Learning Class system for course delivery exposed 24,011 personal information records belonging to students and staff. The university learned of the incident through a notification from the Ministry of Education on November 12, and the exposed data included student IDs, employee IDs, names, email addresses, and mobile phone numbers. Passwords and resident registration numbers were not included, and the university blocked network access to the affected server and decided to shut down the system.
Related reports: 7 · last report →Unauthorized access raises concerns over personal data on Noran Woosan website
On November 11, unauthorized external access and signs that a third party may have viewed some customers’ personal information were detected on the Noran Woosan website, operated by the Korea Federation of SMEs (KBIZ). Names, the first seven digits of resident registration numbers, contact details, and addresses may have been viewed, while investigators are still determining whether a leak occurred and the extent of any impact. KBIZ blocked the attacking IP addresses, reported the incident to the Korea Internet & Security Agency (KISA), and notified customers of the possible leak.
Related reports: 14 →Keihan group warns of possible LINE data leak affecting about 250,000 customer entries
250KImpact: Potential leak of customer information, including LINE IDs, covering approximately 250,000 customer entries, counting repeat registrations. Names and addresses may also be included for up to approximately 30,000 of those entries.
Keihan Holdings announced that information including IDs for approximately 250,000 customer entries, counting repeat registrations, may have leaked from customers who had added five official LINE accounts operated by four group companies as friends. Names and addresses may also have leaked for up to approximately 30,000 of those entries. The cause was reported to be unauthorized access to Sonicmoov, a provider of services that extend LINE's functionality.
Read on NHKニュース ↗ID images leaked in breach of Japan's inflation relief coupon application system
Impact: Images of children's and guardians' My Number cards and driver's licenses
Unauthorized access occurred in a Japanese application system for coupons intended to address rising prices. Images of children's and guardians' My Number cards and driver's licenses were leaked.
Read on Yahoo!ニュース ↗Unauthorized access to Itami childcare service raises personal data leak concerns
Impact: Possible leak of facility communications and personal information of children and their guardians
Unauthorized access occurred on icuco book in Itami, Japan. Concerns were raised that facility communications and the personal information of children and their guardians may have been leaked.
Read on 合同会社ロケットボーイズ ↗Employer Solutions Staffing Group belatedly reports January data breach
19.7KImpact: 19,735 affected people across the three states specified in the article (19,551 in Texas, 141 in Rhode Island and 43 in Vermont); total scope unconfirmed
US-based Employer Solutions Staffing Group detected suspicious activity on its network on January 13, 2026, and confirmed that files had been accessed or acquired without authorization that same day. The exposed data included names, Social Security numbers, driver’s license and government-issued identification numbers, financial account and payment card information, and medical and health insurance information. The article identified 19,551 affected people in Texas, 141 in Rhode Island and 43 in Vermont, but did not specify the total number affected. The company began mailing notifications to affected individuals on November 12 and is offering 12 or 24 months of credit monitoring and identity protection services, depending on the recipient.
Read on Claim Depot ↗Possible data leak affects 44 children and staff in Shijonawate
26Impact: Possible leak of information on 18 children and 26 staff members
Information on 18 children attending childcare facilities and 26 staff members in Shijonawate, Japan, may have been leaked. Unauthorized access to icuco’s nap monitoring system was identified as the cause.
Read on 合同会社ロケットボーイズ ↗Sensitive information leaked at Ironbridge Wells Council
Sensitive information was leaked at Ironbridge Wells Council. An investigation is underway to assess potential legal action related to the breach.
Related reports: 2 →Potential lawsuit explored over Premier Business Solutions’ August data breach
An investigation assessing potential litigation over Premier Business Solutions’ August 2026 personal data breach was announced. According to the company’s notice, an unauthorized party accessed some systems from August 11 to 14, and personal information may have been affected. The company isolated the affected systems, reset passwords and reported the incident to federal law enforcement, among other measures, while the full scope of the impact remained unconfirmed.
Read on Claim Depot ↗Personal data stolen in University of Texas at Arlington cyberattack
Impact: Personal information stolen
The University of Texas at Arlington had personal information stolen in a cyberattack. The university confirmed the data theft during its investigation but did not disclose the specific types of information involved.
Read on The Record ↗Social Security numbers confirmed excluded from data breach
A person familiar with the data breach said that Social Security numbers were not among the information exposed. The affected organization, other types of information exposed, and the scale of the breach have not been confirmed.
Read on www.reporter.net ↗EZaccessMD June–July data breach prompts law firm investigation into possible lawsuit
EZaccessMD said some files on its network were accessed without authorization between June 30 and July 30, 2026, and that it became aware of the incident around July 30. Personal and medical information, including names, Social Security numbers, contact details, diagnoses and test results, may have been exposed, and the company is reviewing the affected data. This article is a follow-up report on a law firm's investigation into a possible lawsuit related to the incident.
Read on Claim Depot ↗Dexcom notifies victims of personal and health data breach linked to October account compromise
Dexcom notified victims of a data breach related to the employee account compromise and file downloads resulting from a social engineering attack that it disclosed in October 2026. On November 2, it confirmed that personal information may have been included; depending on the individual, this included Social Security numbers, government ID information, or health information such as prescription numbers and diagnoses. The total number of people affected and the exact date of the compromise were not disclosed.
Read on cisonews.net ↗Australian Capital Territory warns about 6,000 people after booking service breach
↳ Knock-on damage from the Bookeasy incident · View original incident6KImpact: About 6,000 people notified of possible exposure of personal information and booking details
A breach of booking platform Bookeasy raised concerns that personal information and booking details of Australian Capital Territory park and campground users may have been exposed. The territory government warned about 6,000 people and suspended use of the platform. VisitCanberra's accommodation and tourism booking services were also affected, and some users received suspicious emails and WhatsApp messages.
Related reports: 3 →Snow Peak confirms service vulnerability exploitation and unauthorized account logins
24.9KImpact: Information on 24,948, 5,923, and 21,553 people across the respective services leaked or potentially leaked; unauthorized logins to up to 445 accounts
Japan's Snow Peak disclosed the exploitation of vulnerabilities in its used-item buyback, event booking, and community services, as well as unauthorized logins to its online store and other services. Information on 24,948, 5,923, and 21,553 people, respectively, was leaked or may have been leaked from the three services. Separately, unauthorized logins to up to 445 accounts were confirmed.
Related reports: 2 →Keisei reservation system breach may expose 3.37 million customer records
3.4MImpact: Possible exposure of up to approximately 3.37 million customer records
Unauthorized access to Keisei Electric Railway’s Skyliner seat reservation system on November 11, 2026, raised concerns that up to approximately 3.37 million customer records may have been exposed. The information includes user IDs, encrypted passwords, names, phone numbers, and email addresses. The company has suspended online reservations and is investigating the scope of the breach, with no timetable for resuming the service as of November 14.
Related reports: 15 →