Data Breach Alerts
Track significant data breach incidents as they are disclosed. Understand what happened, what data was exposed, and what your team should watch for.

Notice
Data breach alerts are compiled from publicly available breach notification records and security reporting. Inclusion on this page does not imply fault or negligence by the affected organisation. If you represent an organisation listed here and believe any information requires correction, please contact hello@scrutex.ai.
Cheyenne and Arapaho Tribes
Government / Tribal Administration · January 2026
The Cheyenne and Arapaho Tribes of Oklahoma suffered a data security incident resulting in unauthorised access to tribal member and employee personal information.
ESOP (Employee Stock Ownership Plan Provider)
Financial Services · January 2026
A financial services firm administering employee stock ownership plans reported a breach affecting plan participant personal and financial data.
Sundher Group
Professional Services · December 2025
Professional services firm Sundher Group reported unauthorised access to client and employee records following a network intrusion.
Wilson Workflow Solutions
Technology · December 2025
Workflow automation provider Wilson Workflow Solutions experienced a ransomware attack resulting in data exfiltration and service disruption.
Aura
Identity Protection / Cybersecurity · March 2026
Aura, an identity protection and digital privacy company, confirmed a data breach exposing approximately 900,000 marketing contacts. The breach is notable given the company’s core business of protecting customers from identity theft and privacy violations.
Marquis
Financial Services · March 2026
Financial services firm Marquis disclosed that a ransomware attack led to the theft of personal data for approximately 672,000 individuals.
Washington State Benefits Administrator
Healthcare / Employee Benefits · March 2026
A Washington-state based employee benefits administrator is notifying nearly 2.7 million individuals that their personal and health plan information, including Social Security numbers, was potentially stolen in a hacking incident discovered in January 2026.
Olympique de Marseille
Sports / Entertainment · March 2026
French football club Olympique de Marseille confirmed a cyberattack after data appeared online. The club initially described the incident as an attempted attack but subsequently acknowledged that data was leaked.
Frequently asked questions
Where does the data in breach alerts come from?+
Publicly available breach notifications, regulatory disclosures, dark web leak sites, threat actor forums, and the ScruteX threat intelligence feed. Every entry is time-stamped and sourced.
How quickly are alerts published?+
Significant incidents are typically published within 24–72 hours of public disclosure or credible dark web posting. Customers with active monitoring receive private alerts earlier.
Can I monitor my organisation privately?+
Yes. ScruteX Data Exposure Insights continuously monitors your domain, brand, and executives for leaks on the dark web and surfaces alerts before they are public.