Since September 2026, companies have been announcing unauthorized access and personal information leaks one after another.