Email, files and business apps
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found breach notices or SEC cyber filings for 5 of the 21 vendors it tracks in this category: Google (2), Microsoft (2), Adobe (1), Dropbox (1) and Okta (1), dated Oct 3, 2013 to May 1, 2024. 11 of them have flaws on CISA's list of actively exploited security flaws. Finding nothing in these sources does not mean nothing happened.
| Vendor | State breach notices | SEC cyber filings | Exploited flaws | Latest notice or filing |
|---|---|---|---|---|
| Adobe | 1 | 0 | 82 | Oct 3, 2013 |
| Amazon (AWS) | 0 | 0 | 0 | None found |
| Apple | 0 | 0 | 95 | None found |
| Atlassian (Jira, Confluence) | 0 | 0 | 14 | None found |
| Box | 0 | 0 | 0 | None found |
| Cloudflare | 0 | 0 | 0 | None found |
| DocuSign | 0 | 0 | 0 | None found |
| Dropbox | 0 | 1 | 0 | May 1, 2024 |
| Google (Workspace, Chrome, Android) | 2 | 0 | 92 | Jun 29, 2017 |
| HubSpot | 0 | 0 | 0 | None found |
| Microsoft (Microsoft 365, Windows) | 0 | 2 | 390 | Mar 8, 2024 |
| Okta | 1 | 0 | 0 | Nov 1, 2023 |
| Oracle | 0 | 0 | 46 | None found |
| Roundcube Webmail | 0 | 0 | 11 | None found |
| Salesforce (Slack) | 0 | 0 | 0 | None found |
| SmarterTools (SmarterMail) | 0 | 0 | 3 | None found |
| Snowflake | 0 | 0 | 0 | None found |
| VMware (Broadcom) | 0 | 0 | 34 | None found |
| Zimbra (Synacor) | 0 | 0 | 19 | None found |
| Zoho (ManageEngine) | 0 | 0 | 9 | None found |
| Zoom | 0 | 0 | 0 | None found |
Don't see a vendor your business uses? Email its name to support@vendorhistory.com and we'll look at adding it.
Breach notices and SEC filings in this category
-
Dropbox filed a Form 8-K with the SEC under Item 1.05, which is used to report a material cybersecurity incident.
Source: SEC EDGAR
-
Microsoft filed a Form 8-K/A with the SEC under Item 1.05, which is used to report a material cybersecurity incident.
Source: SEC EDGAR
-
Microsoft filed a Form 8-K with the SEC under Item 1.05, which is used to report a material cybersecurity incident.
Source: SEC EDGAR
-
Okta, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 09/23/2023.
Source: California Attorney General
-
Google Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 08/10/2016, 03/09/2017.
Source: California Attorney General
-
Google Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 03/29/2016.
Source: California Attorney General
-
Adobe Systems Incorporated filed a data breach notice with the California Attorney General. Breach date(s) listed: 09/11/2013, 09/12/2013, 09/13/2013, 09/14/2013, 09/15/2013, 09/16/2013, 09/17/2013.
Source: California Attorney General
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works