Search Results for "unauthorized access"

Eckerd Youth Alternatives Inc November 11, 2024 • [ unauthorized access, network intrusion, data breach ] Eckerd Connects reported that it observed suspicious activity within its network environment on or around November 11, 2024. In response, it took steps to mitigate the threat (including taking certain systems offline) and engaged outside specialists to investigate. Following an extensive forensic investigation and manual document review, Eckerd Connects determined on November 17, 2025 that personal information may have been accessed or acquired by an unauthorized party during the period from November 3, 2024 through November 11, 2024. Potentially involved data elements include first/last name, address, date of birth, Social Security number, drivers license/state ID number, tax identification number, and medical information.

Arthur Ashe Institute for Urban Health Inc. May 18, 2025 • [ unauthorized access, personally identifiable information, health information ] Unauthorized access to systems at Arthur Ashe Institute for Urban Health Inc. between April 4 and May 18, 2025 may have exposed personally identifiable and health information according to breach notifications.

FullBeauty Brands, Inc. October 18, 2025 • [ ransomware, data leak, unauthorized access ] Unauthorized actors accessed FullBeauty Brands systems over several weeks in late 2025 and exfiltrated internal company data, later claimed by the Everest ransomware group, with no confirmed operational disruption publicly disclosed.

Murex Petroleum Corporation May 27, 2025 • [ unauthorized access, data breach, personal information ] Unauthorized access to Murex Petroleum Corporation systems resulted in the access and acquisition of certain individuals personal information, as disclosed in a regulatory filing with the New Hampshire Department of Justice.

Trocaire College March 13, 2025 • [ unauthorized access, data leak, data breach ] Trocaire College identified unauthorized access to its systems. A forensic investigation determined that sensitive personal information may have been acquired by an unauthorized actor. The college notified affected individuals in January 2026 and reported the incident to regulators.

Visiting Nurse Association of Texas July 17, 2025 • [ unauthorized access, email compromise, PII ] Visiting Nurse Association of Texas identified suspicious network activity on July 17, 2025; an unauthorized actor accessed employee email accounts and potentially compromised personal and health-related data belonging to thousands of individuals, per notice and investigation.

CFD Investments, Inc. March 15, 2025 • [ unauthorized access, email account compromise, data leak ] Unauthorized access to an employee email account at CFD Investments, Inc. resulted in exposure of client personal and financial information between March 15 and May 9, 2025; affected individuals were notified beginning January 28, 2026.

Central Ozarks Medical Center November 10, 2025 • [ cyberattack, unauthorized access, data breach ] Patients and individuals had their sensitive personal and health information exposed in a criminal cyberattack on Central Ozarks Medical Center. The breach involved unauthorized access to systems and resulted in the compromise of names, dates of birth, Social Security numbers, financial account details, medical treatment records, and health insurance information, according to investigation notices.

LawPavilion January 1, 2026 • [ data breach, unauthorized access, data leak ] Unauthorized actors accessed systems associated with the Nigerian legal technology platform LawPavilion and exposed a database containing user account information affecting approximately 63,000 users, with no reported operational disruption.

Center for Life Resources November 14, 2025 • [ unauthorized access, network intrusion, data breach ] Center for Life Resources identified unauthorized access to its network in mid-November 2025 and determined that files containing sensitive personal and protected health information may have been accessed or copied, which was later disclosed in regulatory notifications.

At least one government, military, and technology entity in Ukraine January 30, 2026 • [ APT, vulnerability exploitation, state-sponsored attack ] Security researchers reported that state-sponsored advanced persistent threat groups exploited a WinRAR vulnerability in real-world attacks that successfully compromised at least one government, military, and technology organization in Ukraine, using malicious archive files to gain unauthorized access to victim systems.

Bumble Inc. (dating app) January 28, 2026 • [ unauthorized access, internal network, compromised account ] A contractor account at Bumble was compromised, granting limited unauthorized access to part of the internal network. Bumble stated that no user accounts, profile data, messages, or member databases were accessed.

Undisclosed Nigerian Telecom Firm October 1, 2025 • [ cyber-enabled fraud, unauthorized access, billing system breach ] The Nigeria Police uncovered a cyber-enabled fraud involving unlawful access to a telecom operators billing system, leading to ?7.7bn in diverted airtime and data; six suspects arrested.

Panera Bread August 1, 2025 • [ data breach, unauthorized access, data leak ] Panera Bread reportedly suffered a data breach that exposed approximately 14 million customer records after unauthorized access to an application database, with no evidence of operational disruption disclosed at the time of reporting.

Laurel Health Centers July 11, 2025 • [ unauthorized access, email compromise, data leak ] Laurel Health Centers identified unauthorized access to portions of its email system during July 2025, which resulted in the potential exposure of personal and protected health information belonging to patients, as later disclosed in a public notice.

At least one blockchain developer January 22, 2026 • [ phishing, blockchain, credential theft ] IT technicians and blockchain developers were targeted in a phishing campaign attributed to the NGB 3rd Technical Surveillance Bureau (KONNI/APT37), resulting in unauthorized access to end-user systems and the compromise of stored development and infrastructure credentials.

Fyzical Acquisition Holdings LLC January 9, 2025 • [ unauthorized access, email compromise ] Unauthorized access to FYZICALs email environment was detected on December 9 2024 triggering an investigation that concluded in November 2025 Breach notifications were issued to affected individuals and state authorities in December 2025

Kamunikat.org December 25, 2025 • [ unauthorized access, data destruction ] An attacker obtained administrator-level access to Kamunikat.org and deleted several thousand publications and news items from the online library before access was blocked and restoration began.

McElroy & Associates, Inc. May 28, 2025 • [ data leak, unauthorized access, HIPAA ] McElroy & Associates, Inc., a professional services firm operating as a HIPAA-covered healthcare business associate, disclosed unauthorized access to an employee email account occurring between May 28 and May 30, 2025. A forensic investigation determined that personal and protected health information may have been exposed. The company notified affected individuals and regulators; no operational disruption was publicly reported.

Unleash Protocol December 26, 2025 • [ Theft, Cryptocurrency, Smart Contract Exploit ] Unauthorized multisig takeover allowed attacker to deploy a malicious contract upgrade and drain protocol funds, which were later laundered through Tornado Cash.

Search Results (unauthorized access)