Editor's Message

Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and PRiSM celebrated it's third anniversary. Both projects have made a huge impact on my life and I'd like to thank each and everyone of you who have supported me, with special thanks to those individuals and communities who have helped me build up my knowledge on cybercrime and ransomware over the years. Thanks again for all your continued support. Stay safe. :)

“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.
0
Data-Leaking Ransomware Attacks Tracked This Month
0
Data-Leaking Ransomware Attacks Tracked This Year

Wednesday, 7 October 2026

Ransomware Operator Claims - Week 40 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 28th September and 4th October 2026, kindly assisted by our partners.

DBD discovered and researched 250 Ransomware Victims over 56 Countries and Islands claimed by 50 Data-Leaking Ransomware Operators, including 3 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Posted by at
Labels: ,

Monday, 5 October 2026

Data Breaches Digest - Week 41 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 5th October and 11th October 2026.


📅 9th October

China-based hacker used AI coding agent in attacks on South Korean banks

Guangdong Hacker in 20s Uses AI in Attacks on South Korea's Finance

📅 8th October

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

28 million Discord accounts have been affected by a data breach

53 companies in Japan hit by Qilin ransomware group

$76.7 million awarded to Desjardins customers affected by 2019 data breach

87 Bristol schools targeted by cyber attack

200 phishing victims take action against Argenta over €4.5 million in losses

Advantest Data Breach Exposes Medical Information and Contact Details

AI-Assisted Attacks Hit South Korean Banks, Exposing Hacker Records

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

ASOS: Hackers tricked way into employee account before sending rogue push notification

ASOS confirms breach of customer data after hackers send rogue app notification

ASOS Confirms Data Breach Linked to Stolen Employee Credentials

ASOS Data Breach: Hackers begin sending threatening messages to Customers

ASOS data breach: What hackers accessed from customer accounts revealed

ASOS Data Breach Exposes Millions of Customer Records

ASOS explains how hacker was able to send threatening notification to customers

ASOS hackers took more personal details than first revealed

ASOS issues warning after 'full extent' of data breach emerges

ASOS links data breach to social engineering attack, credential theft

ASOS provides update on cyber attack as investigation continues

ASOS says customers’ names, contact details and search histories hacked

ASOS says hacker accessed customers’ search histories along with names and contact details

ASOS says hackers tricked an employee into handing over their work account login

ASOS warns shoppers over full extent of data breach after thousands sent sinister phone notification

Attackers Hijack Three country-code Top-Level Domains (ccTLDs) to Obtain Google Certificates

Australia: St Andrew’s Hospital reports personal data breach

Australian firms lag on passkeys as AI phishing rises

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls

Bridgewater Police warn of phishing email using department name

Bromcom notifies schools of data breach tied to legacy sign-on system

Canadian VPN joins Signal, NordVPN and Windscribe in threat to leave Canada over surveillance law

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

Chinese hacker targeted South Korean banks using Claude, AI agent

Chinese Resident Clues in South Korean Financial Hacks

Chinese-speaking hacker possibly linked to AI-driven attacks on South Korean banks

Cisco Firewall Management Center Has Two CVSS 10.0 Unauthenticated RCEs - Interlock Ransomware Exploited One as Zero-Day

Cisco warns of critical flaws allowing Nexus switch takeover

Clio schools warns of phishing scam emails from ‘compromised’ district account

Clover Health data breach exposes information of nearly 140,000 people

Coupang files lawsuits against 620 billion won fine over data leak

Coupang files lawsuits over $462 million in South Korea fines over data breach

Coupang files lawsuits to contest record $462 million South Korean data breach penalties

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

CrowdStrike finds possible bank hacker's CV among exposed AI logs

CrowdStrike Says South Korean Bank Hack Suspect May Be a 26-Year-Old Using ARTEX and Claude Code

Crypto theft campaign escalates on Firefox: 16 additional malicious extensions flagged

Crypto thief who splurged on gold grills sentenced in London

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers

Data breach: Estate agent’s Somerset customers’ details revealed in “security breach”

Data Breach Following a Cyberattack on the Federal Pension Fund

Department of Justice (DOJ) charges ransomware recovery CEO for secretly paying hackers

Double Counter Data Breach Claims Cite 21.7 Million User Records

Dual-Threat Email Attacks Emerge: Single Phishing Payload Targets Both Human Eye and AI Mail Filters

Dutch intelligence agencies sound alarm over growing Chinese threat to edge devices

Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats

Fake AI Ad Portals Hit 6 Chatbots, Steal MFA Codes

Fake ChatGPT, Gemini Ads Hijack MFA at 6 AI Brands

Fake Decryption Tools Masked $11 Million Markup in Ransomware Recovery Scheme

FBI and Secret Service Warn of FortiBleed Lockout Threat

Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets

Flock You and the Horse You Rode In On - Federal Court Rules Flock Violates Fourth Amendment

Fortra Reports 475% Rise in Phishing Attacks Abusing Remote-Management Tools

French Police Arrest Two Brothers Over NudeLeaksTeens Platform Targeting 17,000+ Women and Girls

Germany arrests member of Qilin hacker group who was extradited from Japan

Germany Arrests “Qilin” Hacker Group Member Extradited from Japan

Global cyber attacks up 48% as ransomware and phishing climb

Goldman Sachs Ensnared in Ernst & Young (EY) Data Breach Earlier This Year

'Group of individuals' impacted by data breach at South Australian hospital

Guangdong hacker targets South Korea banks using Hong Kong servers, DeepSeek

GuidePoint Security Reports Record-High Ransomware Activity as Victims Rise 75% Year Over Year

Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks

Hacker Who Hit Korean Finance Firms Exposed by AI Resume Request

Hackers Registered New Domain with Exact Microsoft Teams Interface to Steal Logins

Hackers take over Discord security bot, spam groups, and steal from credit cards

Hackers target two South Korean megachurches, potentially exposing congregant data

Harman Fitness Data Breach Exposes Personal and Health Information

Hotel Phishing Campaign Uses Ethereum and TON Blockchains to Rotate Malware C2 Servers

How AI can fix cybersecurity compliance: From dashboards to continuous execution

Imagine the Possibilities Data Breach Exposes PHI and PII

Italian Foreign Ministry under cyber-attack following Moscow’s accusations against Vice President of the Council of Ministers Antonio Tajani

Italy foreign ministry says it has come under cyber attack

Japan cloud service hit by ransomware attack

Japan extradites Russian man to Germany over role in Qilin ransomware group

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Japan Transfers Suspected Qilin Ransomware Figure to Germany

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients

LabCorp will pay $2.3 million to 44 states for 2019 data breach

Laboratory Services Cooperative Agrees to Pay $6.1 Million to Settle Data Breach Litigation

Law firm Sheppard Mullin sued in class action after data breach disclosure

Lawson Reports Data Breach Affecting Over 2.15 Million Records; Daiichi Kosho Also Hit With Up to 8.72 Million Potentially Exposed

Leaked chats show Russian extortion gang sending ‘agents’ into US law firms

Live Nation Faces Three Class Actions Over Data Breach Affecting SSNs, Health Records

Lubbock ISD Employees Affected By Major Data Breach Impacting Social Security Numbers

Medical devices patients rely on most are least prepared for quantum attacks

Microsoft Teams to get support for third-party deepfake detection tools

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones

MonsterCloud boss charged over ransomware decryption fraud

MonsterCloud CEO Accused of Paying Ransomware Groups Behind Customers’ Backs

MonsterCloud Owner Accused of Billing Over $19 Million While Secretly Paying Ransoms to Decrypt Data

MonsterCloud Owner Charged With Secretly Paying Ransomware Demands

OpenAI used AI to draft disclosure after its agent hacked Australian government sites

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

Owner of Empire cybercrime market gets 40 years in prison

Pathao says cyber attack exposed users’ names, emails and phone numbers

Publica Breach: One Supplier Hack Triggers Swiss Probe

Ransomware attacks increasing in Japan

Ransomware claims surge in The Philippines

Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead

Ransomware Negotiator turns Cyber Criminal: A Twist in the Story

Ransomware recovery boss accused of secretly paying hackers

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

Ransomware recovery firm claimed it could decrypt files, but may have just paid hackers and pocketed the difference

Ransomware remediation company owner charged with defrauding victims

Ransomware Response Firm CEO Accused of Data Recovery Fraud

Retail AI Security: Controlling Data Exposure, Shadow AI, and AI Agent Risks

Revolut compensates customers who have to apply for new identity documents after data breach

Revolut Pledges to Fund ID Replacements for Data Breach Victims

Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware

Russian hackers hide spyware behind bizarre cat feeding planner

Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms

Scope of ASOS data breach wider than first reported

Security Leaders Share Additional Thoughts on Oracle Health Breach

Sheppard Mullin Data Breach Lawsuit Alleges Personal Information Was Stolen

Shipping Association of New York and New Jersey Data Breach Exposes Social Security Numbers

Short-term risk from AI and cyber security has spiked

SoftBank Subsidiary Hit by Ransomware, Affecting 495 Companies and Local Governments

Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data

South Africa struggles to bounce back from ransomware

South Korea: Banks promise full compensation after hacks, but many may get left out

South Korean banks likely targeted by China-based hacker using AI agent

Suspected Chinese-speaking hacker uses AI to breach South Korean banks

Swiss pension fund hit by data leak after cyber attack on software provider

Teen Who Hacked FBI Arrested in Amman

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Tensorlake npm SDK 0.5.144 Compromised in ChainDrop/Shai-Hulud Credential-Stealing Attack

The people who know passkeys best are still typing passwords

Thousands of cheap Android phones shipped with ad-fraud malware

U.S. Offers $10 Million for Chinese Hacker Accused of Stealing COVID-19 Research

U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu

U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

Uranium crypto exchange hacker convicted for stealing $53 million

Uranium Finance Hacker Who Bought Pokémon and Magic Cards Convicted Over $50 Million Theft

US Government Moves $1 Billion in Bitcoin Seized From Bitfinex Hacker

US Puts $10 Million Bounty on Chinese Hacker Accused of Stealing COVID Research

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

US states sue TP-Link, claiming router ties to China expose millions of Americans to hackers

US-Israeli owner of Florida ransomware company charged with defrauding clients

Veradigm data breach exposes patient information after third-party vendor hack

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

We are fighting phishing at the wrong layer

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

You’ve heard of Phishing, but what is Quishing? How to spot fake QR code scams

YouTubers targeted with fake sponsorships and “channel verification” phishing

Zohar Pinhasi charged with wire fraud after using cybersecurity company to pay off hackers

📅 7th October

48% of Cybersecurity Professionals Rely on Passwords for Personal Accounts

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure

86,644 Firewalls in 194 Countries Breached With Stolen Passwords

Advantest confirms personal information stolen in ransomware attack

Alabama Securities Commission warns of online bill pay risks after Southern Company data breach

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders

Aon Faces Unverified Ransomware Claim After Termite Leak Site Listing

Arizona: State court system hacked, Supreme Court warns of widespread data breach

Arizona court suffered data breach exposing 1.3 million people

Arizona courts say hackers stole info on more than 1.3 million people

ASOS Confirms Cyberattack, Data Breach

ASOS confirms data breach after “hacked” app alert reaches shoppers

ASOS Faces Investor Scrutiny After Cyber Attack Triggers Sharp Share Price Decline

ASOS hack - what happened to your data and should you be worried?

ASOS Hack Warning: Customers Urged to Watch for Phishing

ASOS opens investigation into potential customer data breach amid issues with third-party platforms

ASOS Says Some Customer Details Potentially Exposed Following Unauthorized App Alert and Hacker Claim Over Snowflake Data

ASOS share price drops after cyber attack

ASOS shoppers face data threat after cyber attack

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products

Attackers Hide AI Prompt Injections Inside Phishing Emails

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Australia: Unpatched server behind Victorian student data breach

Automation, AI agents or people? Sorting out who handles each security finding

Canadian Mennonite University students, staff victims of cyberattack

Canadian Mennonite University warns of data breach in cyberattack

Check your X.Org server version because a dozen vulnerabilities have been patched

Chinese AI Agent Fleet Uses Tencent Cloud to Bypass Amap Anti-Bot Protections

Coffee machine uses 1,000GB of traffic in 10 days, leaves IT Pro shocked

Cyber experts call on CISA to create mandatory federal Operational Technology (OT) rules

Cyberattack on South Korean Churches Exposes Data of More Than 1 Million Congregants

Cybersecurity Awareness Month 2026 - Don’t Make It Easy for Them

Cybersecurity Judgment: How Professionals Should Build It and Employers Identify It

CyberXero Uses 51 AI Agents to Target Ukrainian Critical Infrastructure and Mass-Exploit WordPress

Danish CPR Breach Highlights Challenge of Supply Chain Risk

Danish Population Register Breached, Leaking Data of Millions

Data breach victims face significant increase in loan denials, study finds

Denmark’s national ID system breach exposes personal data of 8.8 Million

Double Counter Data Breach Leaks IP Addresses of 28 Million Discord Users

Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys

DriveWealth Data Breach May Have Impacted 2.5 Million

Dutch Tax Agency Reverses Microsoft 365 Cloud Migration Over Data Risks

EfficientIP Finds Malware Activity Quadrupled Since January, Overtaking Phishing as Top DNS Based Threat

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data

Ernst & Young (EY) Data Breach: 15-Day Hack, 81-Day Notice Gap

Ernst & Young (EY) Data Breach Exposes Goldman Sachs and Man Group Clients’ Data

Even with Operational Technology (OT) network visibility, critical infrastructure operators struggle with legacy equipment

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)

Fake ChatGPT and Gemini Sites Used in AI Phishing Attack to Steal Ad Accounts and MFA Codes

Fake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts

Fake ChatGPT, Gemini, and Claude Ad Tools Steal Logins and MFA Codes in New Phishing Campaign

FBI captures ATM jackpotting kingpin accused of stealing millions of dollars

FBI Removes Accenture Contractor After Missed Oracle Patch Led to ShinyHunters Data Breach

FBI Removes Accenture Contractor Following Employee Data Breach

FBI Removes Accenture-Linked Contractor After Employee Data Breach

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

FBI, Secret Service add to warnings of FortiBleed credential stealing campaign

FlyDubai data hijacked: hackers threaten to dump pilot data

FortiBleed Campaign Exploits Fortinet Firewalls and VPNs, FBI Warns

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks

Goldman Sachs client data exposed in Ernst & Young (EY) hack earlier this year

Hack exposes personal data of 5,000 Kia union members

Hacker caught double-crossing Gentlemen ransomware gang, diverting victims to keep all the loot

Hackers Claim ASOS Data Breach in Message Sent to App Users

Hackers crack Samsung Galaxy S26 with single email in zero-day attack

Hackers exploit critical Atlassian flaw after public Proof-of-Concept (PoC) release

Hackers hijack Google domains after breaching country-code Top-Level Domain (ccTLD) registries

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains

Hackers Impersonate ChatGPT, Claude and Gemini in Human-Operated MFA Phishing Campaign

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

India: Karnataka High Court grants bail to hacker Sriki in money laundering case

Island reports fake AI-ad portals steering sign-ins in real time

Japan extradites suspected Qilin ransomware 28-year-old Russian member to Germany amid rising cybercrime records

Jefferson County phone system, online network taken down after possible cyber attack

Kaspersky flags Microsoft link phishing campaign

LG Uplus Faces Evidence Destruction Questions Over Data Breach

Live Nation Is Battling Multiple Class Action Lawsuits Following Its Latest Data Breach

Merrimack County says backups saved it from paying ransom after cyberattack

Oklahoma judge’s Flock ruling shows the power of Supreme Court’s digital evidence decision

Ongoing FortiBleed attacks lock out FortiGate VPN admins

Operational Technology Cybersecurity Coalition (OTCC) Urges CISA to Mandate Federal Operational Technology (OT) Security

Osaka Metropolitan University Hit by Ransomware, 130,000 Records at Risk

PeoplesBank discloses data breach at identity-verification vendor IDScan.net

Philippine organizations face rise in ransomware, phishing incidents in 2026

Philippine organizations see more ransomware, phishing incidents

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

PoeLLM malware infects exposed AI servers in cryptomining attacks

Proof-of-Concept (PoC) Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access

Prosecutors demand 2 years in jail for Taiwan high-speed rail hacker

Qilin Hacker Detained in Japan

Ransomware attacks hit yearly high in August

Ransomware attacks jump 29% to hit new quarterly high in Q3

Ransomware Data Theft Surges 275% as Payments Sink

Ransomware has a new target. Is your backup ready?

Ransomware recovery CEO charged over secret ransom payments

Report Surfaces Sharp Increase in Malware Detections

Researchers Find 8,500+ European Wind and Solar Systems Exposed Online, With Full Control Possible at 180 Sites

Researchers Warn Fake ChatGPT and Gemini Sites Are Stealing MFA Codes

Retail and manufacturing named UK’s most security-exposed industry in new combined crime and data breach index

Russian cyberattacks against UK are 'Putin Tax' costing $3.3 billion, says lawmaker

Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach

Shinhan Bank likely to face collective lawsuit over customer data breach

ShinyHunters-Linked Hacker Arrested In Jordan

Silent Ransom Group Exposed in Data Leak

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

South Korea: AI Adoption Expands Security Vulnerabilities

South Korea: Bank data breach victims step up calls for compensation

South Korea: Two Seoul Megachurches Probe Suspected AI-Linked Cyberattacks as Data of 850,000 Members May Be Exposed

South Korea moves to deploy offensive cybersecurity after hospital data leaks

South Korean President Orders Probe After Financial Data Breaches

Suspected Data Breach at Korea's Largest Yoido Full Gospel Church: Personal Information of 850,000 Members, Including IDs and Phone Numbers, Potentially Exposed

Taiwan’s 104 Job Bank faces inspection after data breach

Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading

Thousands of Aussies potentially caught up in data breach at popular online fashion company ASOS

Toda Corporation Hacked: Data Breach Exposes Info of ~4,800 Employees, Up to 7,200 Business Partner Emails

Trump Mobile Data Breach: Hackers Claim Data on 3,615 Customers

Trump Mobile hit by fresh data breach as hackers claim 3,615 customer records leaked

Trump Mobile Suffers Data Breach (Maybe Again?)

UAC-0277 Hackers Compromise 100+ Websites to Spread LUNEXSTEALER via ClickFix Attacks

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

US posts $10 million reward for accused Chinese ‘Hafnium’ hacker

Veeam Backup & Replication Vulnerability Allow Attackers to Execute Malicious Script

‘We are sorry:’ OpenAI’s bid to prevent government data breach

We don't get Man City guilty verdict without hacker Rui Pinto, but it doesn't make him a hero

What ASOS customers should do after retailer hit by cyber attack

Wikimedia uncovers unauthorized activity by OpenAI’s AI agents across its platforms

Your Phishing Drill Numbers Are Lying to You

YouTubers targeted: convincing sponsorship offers lead to hijacked accounts

📅 6th October

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

8.8 Million People Affected in Major Denmark Data Breach

9 Common Ransomware Attack Vectors in 2026

Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees

Accenture contractor removed from FBI following damaging data breach

AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed

Aldrich Services Data Breach Exposes Financial Account Information

Alleged ATM malware creator appears in Nebraska court after arrest

Alleged Hacker Attack on Online Retailer ASOS

Anderson School District 2 warns of possible data breach

Arizona: State court system hacked, Supreme Court warns of widespread data breach

ASOS confirms cyber attack

ASOS confirms cyber attack as customer data may have been accessed

ASOS confirms cyber attack, warns of ‘personal information’ access

ASOS confirms data breach after “HACKED” in-app notifications

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

ASOS customers receive threatening notification in apparent cyber attack

ASOS customers sent ‘hacked’ alert as shares plunge after warning echoes M&S cyber attack

ASOS cyber attack: Australian and UK customers sent threatening message as retailer investigates data breach

ASOS data breach: Hackers sent users a threatening message

ASOS Data Breach: Hackers Turn Retailer’s Own App Into a Ransom Note

ASOS hacked: App sends threat to customers

ASOS hacked: App users receive notifications apparently sent by hackers

ASOS hacked: message from hackers to app users, what to do now

ASOS hacked? A threatning 'we will leak it' alert has shoppers checking their accounts; is their data at risk and should customers delete the app?

ASOS hacked? Customers receive chilling notification claiming data was stolen

ASOS hacked in data breach affecting UK and Australia

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

ASOS investigating if client data base is compromised

ASOS Investigating ‘Unauthorized Activity’ Involving Apparent Data Breach Conducted by Hackers

ASOS Shares Slide 10% After Hacker Breach Claim

ASOS shares slide after hackers target online retailer

ASOS stock sinks 13% after hackers send threatening notification through its app

Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

Atlassian Warns of Critical CVE-2026-21589 File Access Flaw in Data Center Products

Atlassian warns of critical file-access flaw in Jira, Confluence

Bolt Web Solutions Data Breach Exposes Social Security Numbers

China-linked TA419 targets US AI policy experts in phishing

Citizen Watch Says Data Breach at Outsourcing Partner May Have Exposed Personal Information of About 100,000 Customers in Japan

ClickFix Attack Hides VBScript Payload in Browser Cache

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Coupang CISO Apologizes for Data Breach at South Korea's National Assembly Audit; Shifts to Hardware-Based Key Management

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Critical Medical Devices Unable to Support Post-Quantum Cryptography (PQC) Transition

Cyber Threats targeting AI Experts at U.S. Legal Organizations, Universities and Businesses

Cybersecurity Awareness Month: Is AI Phishing Making Awareness Training Obsolete?

Danish data breach: Everything we know about the cyber attack that hit 8.8 million Danes

Data Breach Affects Alabama Power and Georgia Power Customers

Data breach at Denmark’s population register exposes 8.8 million people

Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)

Denmark Braces for Wave of Phishing Attacks

Denmark Data Breach Exposes Names, Addresses and ID Numbers of 8.8 Million People

Denmark Says Attackers Accessed Central Person Register (CPR) Data for 8.8 Million People via Company Account

Denmark sees serious data breach affecting 8.8 million people

Denmark's Biggest Data Breach? Hackers Access 8.8 Million Central Person Register (CPR) Records

Derbyshire automotive supplier takes £46 million revenue hit after customer cyber attack

Email attacks target both humans and AI in the same message

Engineer sentenced for locking over 3,000 devices on employer network

Ex-Engineer Daniel Rhyne Gets 32 Months in Prison for Sabotaging Employer’s Network and Demanding Bitcoin

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

FBI Confirms Multiple Arrests in ShinyHunters Investigation

FBI Drops Accenture Contractor After Sensitive Data Breach

FBI Removes Accenture Contractor After Data Breach Exposes Employee Information

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

FBI Removes Accenture Contractor After PeopleSoft Breach Exposes Employee Data

FBI Removes Accenture Contractor Over ShinyHunters Data Breach

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

FBI removes contractor after missed security patch exposed employee data

FBI removes contractor working with its PeopleSoft system after data breach

Financial phishing campaigns exploit fragmented hosting, AI tools

FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

From Phishing To Quishing - How To Protect Yourself From QR Code Scams

From ransomware to data breaches: How businesses can build financial resilience against cyber threats

Frontline Education Data Breach Highlights Third-Party Risks

Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks

Gentlemen Ransomware Affiliate Uses Stolen GitLab CI/CD Secrets to Breach Dozens of Organizations

Georgia Power Breach Exposes Data From 300,000 Accounts in 400,000-Customer Hack

Georgia Power data breach exposes information of 300,000 customers

Georgia Power says hackers accessed 400,000 customer accounts

GitHub Copilot CLI Vulnerability Could Enable Developer Secret and Local File Theft

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Hacker gang says it breached Deutsche Telekom’s IT arm

Hacker Group Claims to Have Stolen Trump Mobile Customers’ Personal Data

Hacker Rui Pinto’s technique for hacking Manchester City servers revealed

Hackers Message ASOS Users in Alleged Data Breach

Hong Kong Broadband Network modem QR code redirected to phishing site after domain lapse

How AI-Powered Phishing Works in 2026 (and How to Stop Scams in Their Tracks)

India: Mumbai Police Recover 25 Phones in Credit Card Phishing Case

Japan collars fugitive suspect of ransomware syndicate Qilin

Japan hands over ‘Qilin’ hacker group member to Germany

Japan hands over Russian national suspected of being ransomware group member to Germany

Japan hands over Russian ransomware suspect to Germany

Japan's Nimoca reports data breach affecting 521 customers; names and addresses not exposed

KillSec Ransomware Takedown: 16-Year-Old Named as Operator

Korean Prime Minister Warns of AI-Driven Phishing After Data Breaches

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Live Nation Data Breach Exposes Social Security Numbers

Massive Data Breach in Denmark Exposes Personal Info of 8.8 Million, Exceeding Total Population

Mississippi City Discloses Ransomware Incident

Nearly 100,000 Alabama Power Accounts Hit by Data Breach

Neopharm Labs Data Breach Impacts Current and Former Employees

Nikkei confirms Google account breach led to phishing attempts

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Nikkei Discloses Two Employee Cloud Account Compromises

Ninja Forms plugin flaw exploited to hack WordPress sites

No honor amongst thieves, as hacker betrays his own gang

Norway seeking temporary ban on smart glasses in public domain

NSE Insurance Data Breach Exposes SSNs and Medical Records

One missed security patch: FBI kicks out Accenture contractor after data breach

OpenAI addresses medicare data breach in Australia, promises faster incident reporting

OpenAI and Anthropic tell Australia they would welcome data breach rules, weeks after rogue AI agent hacked government websites

OpenAI faces scrutiny over Medicare data breach

OpenAI, Anthropic tell Australia they would welcome data breach rules

Oracle Health Data Breach From Last Year Was Reportedly Huge

Oracle medical data breach affected nearly 20 million people

Osaka Metropolitan University cancels classes after suspected ransomware attack

Pakistan: Phishing domains impersonate government agencies

PeoplesBank Data Breach Affects 23,731 Individuals

Phishing scam targets tourists applying for Schengen visas

Platt, Miller & Jacobs Data Breach Exposes Social Security Numbers

Post Claims Sale of Over 100 Million Rakuten Member Data; Rakuten States "No Data Breach Confirmed"

Potential widescale cyber attack on ASOS but head office “unaware”

Qantas 5.7 Million Customer Data Breach Suspect Detained in Jordan

"Qilin" Hacker Group Member Held in Japan, Sent to Germany

Qilin Ransomware Core Member, 28, Caught in Japan

Qilin Ransomware Member, 28, Extradited to Germany

Rakuten Drive Reports Data Breach, 15,000 Accounts' Stored Data Leaked

Rakuten Hit by Two Security Incidents: Confirmed Drive Breach Impacting 15,000+ Accounts and Unverified Claim of 101 Million Member Records for Sale

Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds

Ransomware attack hits University of Illinois Chicago's College of Medicine

Ransomware Group 'Qilin' Operative Detained in Osaka, Extradited to Germany

Rare occurrence: Japan extradites ransomware suspect to Germany

Received a 4 a.m. call? Your Telegram may be hacked 5 minutes later

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

Researchers Determine That 2,514 Cybersecurity Events Occur Each Second

Rogue OpenAI agents made unauthorized Wikipedia edits and millions of requests to Wikimedia

Russian hackers found in hotel chain WiFis, targeting travelers

San Francisco wants to police its people with Israeli-made tech

Shares in British clothing company ASOS dive after hackers apparently send push notification

South Korea: Are Korea's financial defenses ready for an AI hacker army?

South Korea: Financial Supervisory Service (FSS) identifies 19 hacker IPs used in financial sector attacks, spanning 12 countries

South Korean officials believe AI agents were used to hack several banks

Stay alert, stay safe: Why cyber awareness matters more than ever

Stolen IFAPME data released for free on the dark web, exposing over 700K people

The Problem with Chasing IOCs: Why SOC Analysts Need More Context in Ransomware Investigations

Trump Mobile customers' data dumped - and some never even received their gold device

Trump Mobile Data Breach Exposed 3,615 Customers With No Response Team

Trump Mobile Data Breach Exposes Personal Details of Thousands of Users

Trump Mobile data breach hits family’s own cybersecurity chief

Trump Mobile data breach, BYOD gang leaks 3,615 customers' records

Trump Mobile leaves customers hanging following data breach: "We have no team to handle this."

UK: Police Urge Passkey Use After Surge in Cybercrime Profits

Unprecedented data breach in Denmark exposes 9 million citizens

US: Plans by CISA, Department of Defense (DoD) to Protect Elections May Be Too Little, Too Late

US-Bound Oil Supertanker Breached by Hackers

Voice Phishing Losses Hit Record 1.26 Trillion Won in Korea

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

Wikimedia Finds Unauthorized OpenAI Agent Activity Across Its Platforms

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

Wikimedia Says OpenAI’s Rogue AI Agents Possibly Behind May Wikidata Outage and Malicious Edits

World's Largest Ransomware Group Qilin Member Arrested in Japan

Your Service Desk Agents Can’t Out-Talk an AI

📅 5th October

3 ways to respond to time bomb ransomware

8 Steps to Take Immediately After Clicking a Phishing Link

16-year-old allegedly led ransomware gang behind hundreds of attacks

100,000 Alabama Power Customers Affected in Southern Company Data Breach

A Texas judge approves $177 million AT&T data breach settlement

AI slop submissions force Google to freeze its open-source bug bounty

Alabama Power says 100,000 customers affected by data breach

Alegeus Data Breach Exposes Social Security Numbers

Alleged developer of Ploutus ATM malware appears in US court after arrest

Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement

Apple iCloud Mail vulnerabilities allowed spoofed sender addresses

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple tightens macOS disk access as AI agents become more powerful

Arizona Courts Cyber Attack Exposed 30 Years of Personal Data

Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security

Belarusian hacktivists spent two years inside Russian healthcare network, researchers say

Blackstone Data Breach Exposes Social Security Numbers

Bromcom notifies customers of personal data breach affecting SSO technology

California Subpoenas OpenAI Over AI Agent Cybersecurity Breaches

CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)

Citrix NetScaler Targeted Via New Zero Day

Citrix Warns of Actively Exploited NetScaler Vulnerabilities Affecting ADC and Gateway

City of Princeton confirms information taken during data breach

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

CVE-2026-88779: Citrix NetScaler Zero-Day Exploited in Targeted Attacks

Data breach at Denmark’s national population register exposes 8.8 million people

Data Breach in Denmark Exposes Personal Data of 8.8 Million People

Data breach in Denmark leaks personal data of 8.8 million

Denmark: Data of millions compromised in hack

Denmark data breach exposes 8.8 million people’s personal data

Denmark data breach exposes Central Population Register (CPR) records of 8.8 million people

Denmark data breach exposes information of 8.8 million people

Denmark data breach exposes personal details of 8.8 million people

Denmark hacker attack exposes data of 8.8 million people

Denmark investigates major Data Breach after 8.8 million Central Person Register (CPR) records Exposed

Denmark population registry data breach affects 8.8 million people

Denmark’s population database hit by major data breach

Denmark’s Population Registry Breached, 8.8 Million Affected

Desert De Oro Foods Data Breach Impacts Sensitive Personal Info of Employees

Detained ShinyHunters hacker reportedly helping FBI track down fellow members

Dutch Ex-Hacker Arrested Over Suspected Link To FBI Breach Gang

Fake brand discounts on social media prey on shoppers’ fear of missing out

Families United Network Data Breach Exposes Social Security Numbers

Family Physicians Data Breach Exposes PHI and PII

FitnessKPI denies data breach but confirms some logs still spilled

Frontline Education Breach Impacts K-12 School District Staff

Georgia Power customer data may have been accessed in data breach, company says

Georgia Power data breach exposes info of 300,000 customers

Google Gemini-Powered PageBreak Agent Finds More Than 500 XSS Vulnerabilities

Google halts open-source bug bounty program amid AI spam surge

Google Suspends Open Source Bug Bounty Over AI-Generated Reports

Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains

Hackers Abuse Trusted Remote Monitoring and Management (RMM) Software to Bypass Suspicion and Gain Remote Access

Hackers breached Denmark's national registry, exposing data on 8.8 million people

Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Hackers hit Denmark: 8.8 million people exposed in a massive data breach

Hackers steal 8 million citizens’ records from Danish government database

How one person’s personal information can put the whole family at risk

How Remote Monitoring and Management (RMM) abuse gives attackers a way in that looks like business as usual

India: Supreme Court Refuses To Quash Star Health Data Breach Case Against Cybersecurity Researcher Himanshu Pathak

IQVIA fined $7.8 million for failing to properly anonymize health data

Iranian hacker accused of draining 31TB from university inboxes extradited to the US

Iranian hacker Amir Barati faces extradition to the US over alleged data theft campaign

Japan Plans Major Cyber Hunt to Detect Hidden Attacks on Critical Infrastructure

Japanese media group Nikkei discloses intrusions targeting employees and users

Joint FBI ‘Operation KillSwitch’ Dismantles KillSec Ransomware Network and Secures 110 Terabytes of Stolen Data

Lincoln Property Data Breach Exposes Sensitive Personal Information

Malicious VS Code Themes Hide GlassWorm Malware Targeting Developers

Managed Care of North America (MCNA) data breach settlement reached over breach affecting nearly 9 million people

Massive zero-day: cyber pro breaks out of virtual machine, takes root on KVM host

McLean Mortgage reaches settlement over 2025 data breach affected over 30,000

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Milk Dragon scam uses fake deals on social media to steal payment data

Millions of Airbnb, Uber, and Google records are for sale, hackers claim

More UK Schools Are Recovering Faster from Cyber Incidents

Most workers have encountered cyber threats at work, EU survey says

NEAR Intents Hack: Hacker Returns $3.8 Million After 48-Hour Ultimatum

NEAR Intents Hacker Returns $3.8 Million in Full

Nearly 40,000 phishing attacks hit US financial firms in H1 2026 - automated AI agents and a new Seychelles bulletproof host fuel aggressive new campaigns

Nearly 100,000 Alabama Power accounts affected by Southern Company data breach

New Dell System Update flaw lets hackers gain root privileges

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic

Nikkei Cyberattack Hijacks Employee Accounts, Sends 9,000 Spoofed Emails

Only 14% of 19.5 Million TVING Data Breach Victims Seek Compensation

Oracle health data breach touched nearly 20 million people

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

Persona Dental Data Breach Impacts 3,386 Patients

Pilgrim Title Data Breach Compromises Government IDs and Financial Account Information

Potential data breach possibly affected as many as 100,000 Alabama Power customers

Ransomware disrupts University of Illinois Chicago medical school; hackers steal data

Ransomware gang threatens to dump more South African client data

Ransomware group threatens to leak customer data from top insurance companies in South Africa

Ransomware Hits JetBrains TeamCity Flaw, 9.8 CVSS

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Rejetto HFS servers now actively scanned for critical RCE flaw

Report Details AI Tactics and Techniques Used to Launch Cyberattacks

Restorative Therapies Data Breach: Medical Records Exposed

Security Industry Specialists (SIS) Data Breach Exposes SSNs and Driver's Licenses

Sensitive data breached in ransomware attack on Alabama Board of Nursing personnel systems

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau

ShinyHunters Suspect Saif al-Din Khader Detained in Jordan, Helping FBI, Sources Say

Simple But Effective Hacking Surges

South African firms hit with R17 million ransomware recovery costs as attacks worsen

South Korea: "Posted Externally"...Emergency at Seoul Cyber University Over Personal Information Leak

South Korea Probes AI-Powered Cyberattacks After Major Banks Suffer Data Breaches

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea’s Shinhan Bank Hack Exposes Data of 25,000 Customers

Southern Company hit by data breach

St. Lucie County Finds Unpermitted Flock Cameras, Raising Privacy Concerns

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Star Health and Allied Insurance data breach case reaches Supreme Court

Star Health Data Breach: Supreme Court Refuses To Quash Criminal Case Against Cybersecurity Expert

Technical University of Denmark (DTU) Data Breach Exposes Data of Up to 200,000 People

Teen Scores $5K Bounty for JWT Flaw in Microsoft Titan Analytics Service

Teenager Suspected of Running KillSec Ransomware Group as Police Seize Servers in International Crackdown

Three questions a hospital CISO should ask a healthcare fintech vendor

TIAA Discloses Data Breach Exposing Social Security Numbers

Times Car Data Breach: 30,000 People Express Interest in Class-Action Lawsuit

Times Car Breach Hits 6.6 Million as Keio Confirms Ransomware

Times Car data breach exposes 6.6 million customer accounts in Japan

Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data

Unexpected Twist in $3.8 Million Crypto Attack: Hacker Returns All the Money!

University of Illinois Chicago affected by ransomware attack on medical school

University of Illinois Chicago College of Medicine systems impacted by ransomware attack

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

What one hour of ransomware costs dairies, feedyards, hog barns and mills

Why AI-Written Phishing Is Outpacing the Native Filters Built to Stop It

Why Poppins Payroll Data Breach Is Particularly Concerning

Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool

World Acceptance Data Breach Impacts 51k Individuals

Zaxis Data Breach Exposes Social Security Numbers

Zscaler Report Finds 275% Jump in Ransomware Data Theft

Posted by at
Labels:
Subscribe to: Posts (Atom)