Data Interception
19 confirmed incidents.
VERIS: hacking:AitMMITRE ATT&CK: T1557 (Adversary-in-the-Middle)T1020 (Automated Exfiltration)
MITRE ATT&CK technique names and ids on this page are reproduced and distributed with the permission of The MITRE Corporation. © 2015–2026, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
Data interception covers an attack that captures data while it is moving between two parties, rather than reading it off a system it is stored on. It maps to two MITRE ATT&CK techniques: T1557 (Adversary-in-the-Middle), inserting the attacker between a victim and the service it is talking to so traffic passing between them can be read or altered, and T1020 (Automated Exfiltration), automating the transfer of what was captured out to the attacker. Because it targets data in transit, an incident classified this way often points to a weakness in how a connection was secured, rather than a weakness in the systems at either end.
Top organizations
Recent incidents
| Organization | Disclosed | Jurisdiction | Records affected |
|---|---|---|---|
| SPay Inc dba Stack Sports | July 27, 2026 | US-WA | — |
| Service Lighting, Inc. | March 6, 2026 | US-WA | 25,736 |
| Outdoor Smart! Inc | December 19, 2025 | US-WA | 19,864 |
| American Association of Critical-Care Nurses | September 4, 2025 | US-TX | 57,526 |
| Valley Veterinary Clinic, LLC | April 23, 2024 | US-WA | — |
| Revival Animal Health | October 19, 2023 | US-WA | — |
| Boeing Employees' Credit Union | May 26, 2022 | US-WA | — |
| Leerburg Enterprises, Inc. | March 23, 2022 | US-WA | — |
| Boeing Employees' Credit Union | November 22, 2021 | US-WA | — |
| Diode Dynamics, L.L.C. | November 16, 2021 | US-WA | — |
| Merani Hospitality, Inc. | July 14, 2020 | US-WA | — |
| Boeing Emlpoyees' Credit Union | July 9, 2020 | US-WA | — |
| Washington State Employees Credit Union | November 16, 2018 | US-WA | — |
| Hyatt Hotels Corporation | October 12, 2017 | US-WA | — |
| Al J. Schneider Company (Galt House Hotel) | July 26, 2017 | US-WA | — |
| GOLFTEC | June 22, 2017 | US-WA | — |
| Brooks Brothers | May 12, 2017 | US-WA | — |
| Noble House Hotels | September 2, 2016 | US-WA | — |
| Landry's Inc | January 29, 2016 | US-WA | — |
Questions and answers
How many confirmed incidents are classified as Data Interception on Breach Census?
19 confirmed incidents are currently classified as Data Interception.
Which organization has the most confirmed Data Interception incidents?
Boeing Employees' Credit Union, with 2 confirmed incidents classified this way.
Which MITRE ATT&CK techniques does the Data Interception classification cover?
This classification maps to MITRE ATT&CK techniques T1557 (Adversary-in-the-Middle), T1020 (Automated Exfiltration).
What counts as a confirmed incident for the Data Interception classification?
An incident counts here once it carries the Data Interception attack-type classification and has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.