Ransomware Operator Claims - Week 43 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 19th October and 25th October 2026, kindly assisted by our partners.

DBD discovered and researched 205 Ransomware Victims over 41 Countries and Islands claimed by 45 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 44 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 26th October and 1st November 2026.

📅 30th October

A Hacker Allegedly Stole Up to $4 Million From Poker Players by Secretly Watching Their Cards

A&L Foods Data Breach Compromises SSNs

Amadeus Breach Exposes Data of 92,000 Japan Airlines Customers as ANA, Asiana, and Korean Air Report Impact

Assad regime hacker who caused $136 billion market drop sentenced to 42 months

AU Small Finance Bank probes possible data breach on Salesforce platform

August 2026 Healthcare Data Breach Report

Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data

Bennett Jones, Borden Ladner Gervais hit in data breach targeting Bay Street law firms

Binance: Hacker used self-destruct mechanism to erase traces

Binance Cryptocurrency exchange cyber attack: North Korean-linked Lazarus Group suspected in $6.3 billion heist

Binance hack: North Korean hackers blamed for $6.3 Billion theft

Binance Hit by $6.3 Billion Security Incident, With North Korea’s TraderTraitor Blamed

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record

Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds

Binance Hit by Record-Breaking $6.3 billion Hack in Largest Cryptocurrency Heist in History

Binance Investigates Multiple Breach Points After $6.3 Billion Crypto Hack

Binance links $6.3 billion crypto theft to compromised DevOps laptop

Binance Probes DevOps Engineer’s Hacked Laptop After $6.3 Billion Theft

Binance Probes Suspected $5.8 Billion Crypto Hack, $3 Billion Frozen

Binance Security Incident Affects $6.3 Billion in Crypto Assets, $3 Billion Frozen

Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

Bithumb Data Breach Exposes 844 Customers Despite 2.6-Fold Security Spending Increase

Blossom Health Data Breach Exposed Sensitive PHI and PII

Bluesky Blocks Links to Leaked Department of Homeland Security (DHS) Employee Data as Takedown Pressure Grows

British spy agency cannot account for thousands of data storage devices, watchdog says

Calgary police stands by Crime Stoppers as Lethbridge pauses program in wake of data breach

Canada: Police suspend use of Greater Victoria Crime Stoppers after data breach

Canada: School District 23 shuts down student and staff Gmail after phishing breach

Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Chinese Hackers Use DeepSeek AI to Target More Than 200 Organizations

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to Known Exploited Vulnerabilities (KEV)

CISA says max severity GitLab flaw now exploited in the wild

Claude Code extension poisoned with persistent SSH backdoor

Columbia University to pay $16.1 Million to settle cyberattack lawsuit

Compliance Theater Won’t Stop an AI Data Breach. Do This Instead

Confronting What Lurks in the Shadows: AI Regulation and Governance

Covenant Health agrees to $2 Million data breach settlement

Covenant Health reaches settlement in data breach lawsuit

Critical Linux kernel flaw allows remote root attacks on MPTCP servers

Crypto giant Binance attempting to recover $6.3 billion stolen in hack linked to North Korea

Crypto Hackers Steal $6.3 Billion From Binance in 'Largest Bank Heist in Human History'

Cyberattack knocks Belgium’s tax services offline ahead of filing deadline

Data breach exposes personal details of 53,000 Cathay Pacific passengers; other major airlines hit

Data Breach Hits Lab Giant Quest Diagnostics, Exposing Personal Information and Patient Records

Del Monte Foods Data Breach Exposed Social Security Numbers

Department of Justice (DOJ) raises privacy concerns over potential sale of Character.AI chats

Drupal warns of critical Commerce Core flaw exploited in attacks

Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware

Fake IT help desk callers got by on little more than names and email addresses

Fashion retailer Resolve says hackers stole payment card information

Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach

Foundation for Defense of Democracies (FDD) urges NIST, NSA to evaluate vaultless, keyless pseudonymization as safeguard against ransomware attacks

French privacy watchdog fines FNAC €7 Million for tracking app users without consent

Gone in 20 minutes: How the biggest heist in crypto history unfolded

Hacker attack hits Sony’s internet provider, exposing millions of records

Hacker leaks data on more than 40,000 Homeland Security employees

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Hackers steal $6.3 billion from Binance in record heist blamed on North Korea

Hackers target government Windows systems in Asia with new malware

HCA Healthcare Data Breach Impacts Patients and Employees

Housing committee chair seeks answers as ombudsman cyber attack remains unresolved two weeks on

Hyundai Easywell Apologizes After Customer Data Breach

Icepick Leak: 41,000 Department of Homeland Security (DHS) Staff, 7 Data Fields

Invisible “SMS of Death” crashes Android phone, traps victim in reboot loop until factory reset

Israel Sends Alleged Nomad Bridge Hacker to U.S. After Supreme Court Defines Code Exploit as Intrusion

Japan Airlines data breach exposes 92,000 customer records

Japan's Foreign Ministry reports data breach affecting 3,600 records

Major Software Provider That Manages Bookings For Hundreds of International Airlines Had a Data Breach For THREE Years

Malicious Claude Code extension on Cursor planted SSH backdoors

Microsoft Identifies AI Use Across Eight North Korean Hacker Groups

Moldova data breach exposes records linked to 750,000 national ID numbers

New Framework Puts Ransomware Resilience for AI Systems in Focus

Nigeria Data Protection Commission (NDPC) probed 240 data breach cases, flagged 1,900 firms for non-compliance

‘No government entity, large or small, previously targeted or not, is immune’: Ransomware attacks on government agencies have surged 91% in a year

North Korea May Be Behind the $6.3 Billion Binance Hack

North Korean hackers blamed for stealing record $6.3 Billion in Binance breach

North Korean Hackers Use AI to Mass-Produce Phishing Documents Targeting South Korea

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

Phishing Attack leads to $1.6 Billion Cryptocurrency Loss at Binance

Polymarket confirms cyberattack on third-party provider after outages

Polymarket Restores Trading After Third-Party Security Incident and Promises Full Reimbursement

Quebec crime-tip organizations not affected by massive Canadian data breach, they say

Ransomware Attacks on Synology NAS Users in South Korea Demand Bitcoin

Ransomware 'C3RB3R' Hits Synology Network-Attached Storage (NAS): 3.9 Million Won in Bitcoin Demanded, No Fix Beyond Patching

Russian popular home goods chain faces days of disruption following cyberattack

Scammers rebuild fake shopping sites within hours of a takedown

Smart TVs can harbor unpatched security flaws and track what you watch

Syrian Electronic Army hacker gets prison time for attacks on Western targets

Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison

Syrian hacker gets US prison time for spree that included takeover of Marine Corps site

Syrian hacker sentenced to 42 months for attack on Western media, U.S. government

Syrian hacker who served Assad regime gets 42 months in US prison

TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs

Telegram for Android Flaw Can Give Attackers Full Phone Control After a Voice Call

The $6.3 billion Binance hack: What we know so far about the biggest crypto heist in history

The ASOS cyber attack shows the challenges of crisis communications

‘This is a terrorist crime’: Jerome School District superintendent shares details on ransomware attack

Train for the Gray Zone: Security Awareness Needs a Simulator

Trezor warns of suspected crypto-theft implant in hardware wallet

Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis

What makes North Korea’s state-linked hacker network so powerful?

Who could be behind the Binance hack and what we know so far

Why is Archive of Our Own down? AO3 warns of security incident and possible data breach

WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

Your Netgear router may be vulnerable to a security exploit - how to check and patch it

📅 29th October

42 million docs left unsecured: local complaints exposed personal data for years

42 Million Records Exposed by Government Technology Platform

26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories

AI Involved in 52% of Detected Ad Fraud Schemes - Shopping Agents Could be Next

Animate Confirms Data Breach After Hack of YMIRLINK’s Cuenote FC Email Service

Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Belarus Hackers Wiped Data in First Russia-Tier Cyberattack on Europe

Binance pauses withdrawals as hackers suspected of stealing billions in crypto

Binance probes potential $5.8 billion crypto-theft hack

Bithumb 6,444 Customer Data Breach Found After Employee Leak

Bithumb Reports Data Breach Affecting 6,444 Customers and 715 Employees

Bithumb says personal information of hundreds of customers leaked in recent hack

Canada: Belleville police suspend Quinte Crime Stoppers services after data breach

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

Chrome extensions with 13.4 million installs caught hijacking searches

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

Claude finds Android phone allegedly took thousands of secret photos

CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience

Cyber Attack Emergency forces Japan to ask citizens to disconnect devices from internet

Cyberattack disrupts Belgian tax services before filing deadline

Daekyo Fined 3.26 Billion Won for Data Breach Hitting 650,000 Users

Data breach: Hackers claim to have unmasked thousands of ICE agents trying to hide their identities

Data theft overtakes encryption in cyber intrusions

Department of Homeland Security (DHS) Data Breach Exposes Information on 41,000 Employees, Including ICE and CBP Staff

Department of Homeland Security (DHS) Data Breach Exposes Personnel Records of More Than 40,000 Employees

Department of Homeland Security (DHS) investigates massive data breach exposing 40,000 employees, including ICE and Border Patrol agents

EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft

ENGIE Data Breach Exposes Customer Details and Energy Contracts

ESET Documents First Belarus-Aligned Destructive Cyberattack in Europe in Q2–Q3 2026 APT Report

Ex-Swagelok Worker Sues Over 881 Gigabyte Hack, Wants Class-Action Status

Experts warn Korea investors as Daishin, Mirae hacks spur spear phishing

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)

Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners

Fake crypto app on Apple App Store linked to $23K wallet theft

Fan-fiction site Archive of Our Own (AO3) could be offline for up to 4 weeks after security incident

Federal bankruptcy courts contractor says no data stolen during cyber intrusion

Firefox and Chrome patch 200+ security flaws combined - update both ASAP

First OpenAI, now Anthropic: Unreleased AI models uncover hundreds of security flaws

Frontline Education Breach: 45,000 at Killeen ISD Alone

General Motors (GM) settles with 36 states for selling driver data, agrees to $220 million fine and reforms

German spy agencies plan to exchange secret information via the Google Cloud

GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GMO cybersecurity team finds info critical to identifying hackers, CEO says

Good Smile Company: Full Credit Card Details for 2,800 Customers May Have Been Exposed in Data Breach

Hacker hits South Korea's Pukyong National University, leaks 5,100 records

Hacker Leaks Data of 40,000+ Homeland Security Employees Including ICE Agents

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers steal data on 40,000 Department of Homeland Security (DHS) employees as Okta denies breach

Hacktivists leak 41,000 Department of Homeland Security (DHS) staff records, revealing undercover ICE agents

Health and Human Services (HHS) Filing Puts iRhythm Data Breach Toll at 8.2 Million

Hidden Chrome extensions racked up 13 Million+ installs, hijacking user searches for profit

Hugging Face malware campaign returns to hijack GPUs for crypto mining

Information Commissioner’s Office (ICO) Reprimands Staffordshire Police After Domestic Abuse Breach

International crackdown takes bulletproof hosting provider offline, exposing data on more than 3,000 customers

IT bosses are confident they’ve found the certificates they don’t know about

Japan: Communications ministry orders ISPs to block hacker site after GMO data breach

Japan Airlines suffers third-party data breach exposing passenger info

Japanese government asked telecom firms to block extortion site in GMO data breach

Korea crime agency busts no-show voice phishing ring, seeks arrest warrant

Limited reports of PHP bug exploitation emerge

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Massive breach hits Department of Homeland Security (DHS): 41,000 employees, including undercover agents, exposed

Massive Data Breach Exposes Over 41,000 Homeland Security Employees and Undercover Agents Online

Massive Department of Homeland Security (DHS) Data Breach Raises Fears for Undercover ICE Agents as Sensitive Operations Are Exposed

Massive Department of Homeland Security (DHS) Personnel Data Breach Exposes Sensitive Information of Over 41,000 Agents

MR ROBOT Malware-as-a-Service Targets Indian Bank Customers

Myrealtrip Reports Data Breach Exposing Passport Numbers

National Institute of Standards and Technology (NIST) Publishes Guidance to Meet Federal Post-Quantum Deadlines

Nefilim and Hive ransomware affiliate sentenced to 70 months in prison

New Cisco firewall zero-day exploited to crash SSL VPN devices

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

Online Scam Volumes Double to Overtake Phishing

Online Scams Surpass Phishing for the First Time

Over 41,000 U.S. Homeland Security officials’ details apparently exposed after massive data breach

Phase Eight owner confirms customer data accessed in cyber attack

Phase Eight owner TFG London contacts customers as personal data is accessed following cyber attack

Phishing accounts for almost 40% of reported banking fraud

Polymarket halts trading after crypto-draining script breach, $2.5 Million traced

Ransomware Attacks on Hospitals and Businesses Lead to 70-Month Sentence

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Saskatchewan Crime Stoppers suspends tip submissions following data breach

Scams Overtake Phishing as Crooks Industrialize Fraud With AI

Shame and sleepless nights haunt scam victims long after the money is gone

Skyticket Data Breach May Have Exposed Refund Bank Account, Credit Card, and Travel Insurance Information

South Korea: Police Arrest 37 Members of Corporate-Style Phishing Ring 'Daedongdan-gyeol', Sparing No One in 8.1 Billion Won Scam

South Korea: Police Dismantle Vietnam-Based Phishing Ring That Took 8.1 Billion Won

South Korea: Seoul Metropolitan Police Arrest 54 in Vietnam-Based Phishing Group

South Korea: Serious Crime Investigation Agency Seeks Arrest Warrant for Voice Phishing Syndicate Member in 'No-Show' Scam

South Korea: 'That Guy's Voice' Targeted People in Their 20s and 30s...Vietnam-Based Phishing Ring Swindled 8.1 Billion Won

South Korea's Daekyo Fined approximately $2.4 Million Over Data Breach Affecting 650,000; Same Hacking Method Recurred Within Six Months

Stolen staff logins are spreading attacks between K-12 school districts

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

Telegram warning: Hackers could run code through Android calls

TFG London confirms personal data ‘accessed’ in cyber-attack

The Philippines: Bureau of Corrections (BuCor) warns public against fake recruitment post, phishing lin

Three Cyberattack Campaigns Target Japan, Exposing AI’s Growing Role

Trump’s Department of Homeland Security (DHS) hit by data breach as hackers expose records of 41,000 employees

UK privacy watchdog reprimands police over victim’s exposed address

Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months

Ukrainian Ransomware Affiliate Artem Stryzhak Sentenced to 70 Months for Nefilim and Hive Ransomware Attacks

University of New Mexico restores hospital systems, urges no contact with hackers

Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network

“We ain’t done” - crypto scammer steals $13 million in Bitcoin, brags on Signal

When a $1 million hacker bounty becomes a cybersecurity warning

Yoba malware hides in fake desktop versions of ChatGPT and Claude

📅 28th October

345,000 email addresses stolen in cyberattack on Germany’s far-right party Alternative für Deutschland (AfD)

Acumetis Data Breach Exposes SSNs and Financial Account Info

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

AI Is Turning CISOs Into Business-Risk Translators

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

Are Indiana schools cyber resilient: When the network goes down, can pen and paper keep schools running?

Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries

Australia’s ASD Issues 4,400+ Cyber Warnings and Asks Victims to Report Back

Australian Data Breach Incidents Up 66% as AI Sharpens Scams

Bandai Namco data breach: Over 300,000 users affected by third-party leak

BCS Counseling Group Data Breach Exposed PHI and PII

Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine

Breach victims discover their data was held by companies they’ve never heard of

Canada: Privacy commissioner investigating provider behind Crime Stoppers data breach

Chatham-Kent police suspend Crime Stoppers partnership after data breach, launch new tip line

China-linked hackers exploit PHP2Shell to breach US government network

CISA warns of hackers now exploiting critical Node2Shell flaw

CleanYourTV project explodes on GitHub as thousands hack their TVs back

Cloud Storage Risk Analysis: Fresh Credential Exposure vs Legacy Backup Extortion

Coinbase Clarifies Amplitude Data Breach Impacted Only Limited Customer Contact Information

Compromised camera management software gives attackers a way into corporate networks

Court strikes down West Virginia law barring disclosure of public officials’ personal data

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

Cyber Resilience Requires More than a Backup

Cyberattack concealed political spending by big donors before US midterm elections

Data breach at Coinbase vendor Amplitude: contact details exposed, balances untouched

Data breach at Sony-owned internet provider compromises 2.6 million customer records

Details of thousands of US immigration agents leaked in major hack

Discord makes public communities searchable, users immediately look for a way to opt out

Discord to Let Google Index Public Server Messages, Raising Privacy Concerns

Discord to let search engines index public server messages

Distributed Denial of Secrets Publishes Icepick Leak Exposing 40,000 U.S. Homeland Security Employees

Energy Giant Engie Notifies Customers of Supply Chain Breach

European digital rights nonprofit NOYB sues Scale AI for ‘invasive’ worker surveillance

Even after PHP2Shell, blast radius matters more than a CVSS score

Fairmont Federal Credit Union agrees to $1.78 million settlement over 2023 data breach

Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft

Fake ChatGPT and Claude Apps on GitHub Spread Yoba Malware, Check Point Warns

Fake Court Phishing Campaign Targets More Than 100,000 Companies

Fake US Court Notices Target 100,000+ Businesses With LodaRAT

FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering

FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police

Federal Report Pins Springfield Schools Cyber Attack on Hacker Group

Ford Audio-Video Systems (Ford AV) Data Breach Impacts Current and Former Employees: SSNs Exposed

Frontline Education Discloses Data Breach Impacting School Districts

Good Smile Company Announces Data Breach of Online Store

Google Develops Crypto Security System to Counter Cyberattacks

Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents

Hackers demand $1 million after cyber attack on internet provider

Hackers now scanning systems for recently-patched Oracle flaw

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Hackers Target US Federal Election Commission

Hacktivist Group Leaks Personal Data of 41,000 Department of Homeland Security (DHS) Employees, Exposing ICE and CBP Agents

Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail

Hive ransomware affiliate jailed, years after FBI infiltrated the gang's systems

How Ransomware poses a major Cyber Threat to the Agricultural Supply Chain

India’s Film Certification Board Data Breach Exposes Documents Linked to More Than 500 Film Titles

InfraTrust report warns of exploited flaws in critical network infrastructure

INJ3CTOR3 Malware Steals FreePBX Credentials, Enabling Toll Fraud After Cleanup

Japan Airlines warns of data breach as country grapples with multiple cyber incidents

Japan’s GMO confirms hacker website taken down after data disclosure

Japan's GMO Group Offers $1M Bounty for Hacker's Identity

Japan’s GMO Internet Urges Customers to Disconnect PCs

Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

Japanese internet provider confirms takedown of hacker website claiming to contain customer data

Loblaw Customers Got Hacked Last Year—Are You Affected?

Massive data breach at Department of Homeland Security (DHS): Names, phone Numbers, email addresses of more than 40,000 employees leaked

Microsoft urges Entra ID admins to migrate users to passkeys

Millions of students caught in massive data breach

Moldova investigates possible foreign involvement in major government cyberattack

National Institute of Standards and Technology (NIST) starts the countdown to retire quantum-vulnerable encryption

Nefilim and Hive ransomware affiliate gets 70 months in prison

New Zealand: Third-party cyber risk exposed by ZenTech ransomware breach

NHS Tayside apology to patients after scientist's data breach

‘No indication’ of who carried out cyber attack impacting thousands of Greater Manchester residents

One Fake TikTok Shop Domain Accounted for 19% of Surfshark’s Phishing Blocks

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Police seize Virtualine bulletproof service tied to ransomware, cybercrime

Ransomware Attacks Move Beyond Enterprise Systems to Theaten Employees' Families

Ransomware Group Claims Responsibility for Oneonta City Schools Hack

Ransomware group SETTRA behind cyberattack on Israel’s largest car importer

Ransomware Pressure Moves Beyond Enterprise Systems to Theaten Employees' Families

Ransomware victims may also need protection from their rescuers

RMS hack sees 'convincing' phishing scam emails using real hotel booking numbers sent to customers

Rocket.new Data Breach: Encrypted API Keys Exposed

SafePay Ransomware Breached Over 600 Critical Infrastructure Organizations, CISA Warns

San Antonio Independent School District (ISD) warns staff of vendor data breach involving district data

Sarku Japan Data Breach Exposes Social Security Numbers

Scanner Poses as 32 AI Bots to Find Credentials and Private Keys

Security vulnerability at Bitonic allows unauthorized access to customer accounts

Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles

SETTRA Named in Colmobil Attack, 14 Days Later

Shielded by Department of Homeland Security (DHS), immigration agents’ identities exposed in massive data breach

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

Sony ISP subsidiary data breach exposes 2.5 million customer records

Sony Network Communications Breach Exposes 2.5+ Million So-net and Plala Records

South Korea’s financial industry hit by fresh wave of cyberattacks

South Korean voice phishing gang intercepted victim’s calls to police and regulator

Stop Counting Vulnerabilities and Start Measuring Risk Reduction

Summit Public Schools Breach Exposes 115 GB of Student and Staff Data

Tailscale fixes SSH flaws allowing lateral movement within tailnets

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

The Johns Hopkins Breach Wasn’t Caused by a Hacker. It Started With 1 Employee Upload

The Speech Clinic Data Breach Compromises SSNs and Medical Information

Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout

Times Car users in Japan prepare lawsuit against Park24 over major data breach

UK to look at making software companies liable for cyber breaches

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator

University of Guelph says no evidence of data breach after online attacks

US Federal Election Commission Website Hack Attempt Takes Filing System Offline One Week Before Midterms

US sanctions Russians, North Koreans for laundering IT worker earnings

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

Website leaks data on more than 40,000 Department of Homeland Security (DHS) employees

📅 27th October

71% of vulnerability exploitation starts within a week of disclosure

2,000 customers of Hong Kong Airlines, 2 appliance shops, get scam calls after data breach

A fake TikTok shop is Surfshark’s most-blocked phishing scam - how to steer clear

AI companies could gain wider access to Europeans’ personal data under EU plan

AI-Generated Fake Login Pages Are Making Account Takeovers Easier

AI-Powered Hacker Breached More Than 100 Companies with Minimal Human Involvement

Alliance Medinet says access path used in data breach has been secured

Apple backports CoreGraphics zero-day patches to older iPhones

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Apple Just Patched 163 iPhone Security Flaws - Here’s What Was at Risk

Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

Australia: Major holiday park operators warn guests about fraudulent emails, messages seeking credit card details

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

Australia’s spies are sharing intelligence with hacking targets - and want them to share back

Australian tourist parks warn guests about phishing after cyber incident

Bangladesh: Websites still on outdated program amid data breach claims

Bank of America kindly asks that you don’t share your banking password with your AI assistant

Belgium: 'Watch out for fake fines and phishing' - Software provider for local municipalities hacked

Brotli bug reaches far beyond Node.js (CVE-2026-111497)

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

CISA lays out plan to push cyber adversaries out of US critical infrastructure

CISA Says PHP2Shell Flaw Under Attack as Reports of More Come In

CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch

CoinDCX’s $16 Million Wallet Drain to Phishing: Security Issues Draw Fresh Attention After Fake Notifications

Coinone supports refunds of 7.5 billion won in voice phishing losses over three years

Columbia University Settles $16.1 Million Data Breach Lawsuit After 2025 Cyberattack

Copenhagen University Breach Compromises Data on Half a Million People

Cyber Essentials in 2026: Why Stolen Credentials Still Put UK Small Businesses at Risk

Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances

Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack

Cyberattack on University of Copenhagen exposes data of 525,000 people

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Data Breach Announced by NorthShore Health Centers

DreamHost incident triggers password resets, locks customers out of email and FTP accounts

Energy giant ENGIE discloses data breach affecting customers

Foundation Identifies Over 23,000 Phishing Attempts

Foundation Probes Data Leak After 23,000 Phishing Attempts Target Users

Foundation Reports More Than 23,000 Phishing Email Attempts in Passport Wallet Security Incident

GMO Internet Warns of Noon Ransomware, $50 Million Demand

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

Google’s sneaky privacy policy update pushes users to consider alternatives

Hacker attack on Italy's Chamber of Deputies hits Prime Minister Meloni's email too

Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records

Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs

Hackers breach school tech giant serving 50 million students nationwide

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support

Hackers hijack Convertr analytics script to steal payment card data

Hackers Infect 953 Online Stores With Scanner-Evading Code

Hackers repeatedly breached suppliers holding UK police data, watchdog finds

Hacking Attempt Disrupts Federal Election Commission (FEC) Campaign Finance Filings Ahead of Midterms

“High risk, no reward:” hackers’ attempt to extort 38 organizations in South Korea nets just $226

How to Protect Your Child’s Identity Before a Data Breach Happens

India: Central Board of Film Certification (CBFC) data breach exposed movie scripts, censor cuts summaries and distribution deals of 500+ films

INTERPOL targets ransomware, phishing networks

Italy: A hacker attack on the Chamber of Deputies targeted email accounts, including Prime Minister Giorgia Meloni's

Italy: Hacker attack - the Chamber of Deputies’ website and Prime Minister Giorgia Meloni’s email account have been breached

Japan: Customer info likely disclosed as hacker threatens GMO Internet

Japan: Cyberattack-hit GMO says hacker threatens to disclose customer info at noon

Japan: GMO refuses demands as hackers threaten data leak, ransomware attack at noon Tuesday

Japan: Hackers release data after GMO ignores ransom demand

Japan: High-stakes standoff between GMO and hacker group escalates with first data leak

Japan internet giant GMO says hackers posted stolen customer data

Japan vows to address cyber attack on Foreign Exchange (FX) with urgency

Japan’s GMO Internet warns users of impending ransomware attack

Japan’s GMO Says Hacker Threatens To Disclose Customer Data At Noon

Japan's GMO urges customers to shut down PCs amid ransomware threat

KB Bank Data Breach Victims Jump to 2,210 From 119

Keystone Hardware Wallet Halts Sales, Destroys 18,835 Devices Following Customer Data Breach

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft Authenticator vulnerability let rogue Android apps steal work account access

Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation

Microsoft Releases Emergency .NET Patches

Microsoft releases Windows Out-of-Band (OOB) updates to distrust eMudhra certificates

Microsoft Teams Adds AI That Reads Conversations to Catch Phishing With No Malicious Links

Microsoft Teams External Chat Abused in 400+ Incidents, Arctic Wolf Finds

Microsoft Teams is getting a suite new AI features to crack down on phishing attacks

Microsoft Teams to Use AI to Catch Phishing Scams Hidden in Conversations

Microsoft Teams to use AI to detect phishing scams hidden in conversations

Microsoft Teams to use AI to proactively detect Phishing Attacks

Navigate360 Data Breach Exposes Some SafeVoice Nevada Tips

Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea

New phishing scam impersonates the Canada Revenue Agency (CRA) to trick Canadians into installing malware on their devices

New Zealand: Coronial files sat with a pharma lab nobody at Ministry of Justice hired

OpenAI Compaction Flaw Exposed AI Reasoning to Researchers

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections

Over 525,000 hit in massive University of Copenhagen data breach

Police and fire services in UK issued urgent warning over 'significant' cyber attack threats

Private repos still leak secrets to Gheist, a stolen GitHub token campaign

Qilin ransomware group claims quartet of Australian victims in as many days

Quest Diagnostics data breach hits patient records in lab system

Ransomware attacks against healthcare industry rose by 40% in Q3

Ransomware Attacks Rise 50% in Q3

Ransomware chaos hits Richmond, Oneonta school districts as cyberattacks pile up

Ransomware Groups Claim University Breaches in Mexico and New Mexico as UNM Hospital Diverts Ambulances

Severe GoAhead flaws expose security risks for devices from Palo Alto, Siemens, and Boeing

Singapore: No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company

Sirius Backdoor Campaign Hides Fileless Malware in Spear-Phishing Emails Containing Fake FedEx Tax Invoices

Sony Data Breach Hits 2.58 Million Users, Bank Account Details and Passwords Exposed

Sony discloses data breach exposing 2.6 million customer records

South Korea: Spoon Halts Lotte-Branded Gifticle Service After Data Breach Hits 18,000

Tailscale warns of SSH flaws allowing root privilege escalation

Test account using “Password1” caused data leak affecting thousands of people

The days of assuming another company’s breach is someone else’s problem are over

Three Plead Guilty in $9 Million Romance Fraud Scheme Targeting Older Americans via Dating Platforms and Social Media

Times Car Operators to Face Damages Lawsuit over Data Breach

Ukraine warns hackers are exploiting China-made Dahua cameras

UltraMobile Imaging data breach exposes information of 75,000 individuals

University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers

University of Copenhagen Hit by Second Cyberattack Days After 525,000-Person Data Breach

University of New Mexico Health Sciences Center (UNM Health) ransomware attack disrupts patient care, surgeries

University of New Mexico hospital diverts ambulances after cyberattack

US blocks Huawei-linked surveillance chips over national security fears

US government says hackers are now exploiting critical PHP web bugs

US, UK, and Germany target SafePay ransomware group

Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

Warp discloses breach exposing AI agent logs, user telemetry data

Watchdog Urges Police and Fire Service to Improve Cybersecurity

What happens when security tools go dark before the ransomware

WhiteArmor ransomware group claims Hisense data theft, demands $5 million

Your TV might be spying on you: Samsung devices secretly listen in for dog and baby noises, hacker claims

📅 26th October

8 Million Records Allegedly Stolen by AI Hacking Group

23andMe reaches $6 million settlement over 2023 data breach

12,976 Refrigeration Controls Found Exposed Online in 99 Countries

‘A betrayal’: Royal Darwin Hospital issues apology following patient data breach

A hacker claims Samsung's smart TV software is doing secret reporting and looks for mics on connected devices - but this doesn't look like a privacy scandal on the face of it

Accommodation Booking Details Leaked...Nol Universe Apologizes for Customer and Employee Data Breach

AI coding agents fall for malicious instructions planted in the Downloads folder

AI is rewriting social engineering, from phishing defenses to autonomous machine deception

AI phishing puts micro businesses in firing line, yet many still see no need for cyber cover

Amagi Media Labs faces extortion attempt, operational data stolen

Anthropic’s Claude AI Model Accessed Georgia Voting Data

Anthropic’s Claude AI Model Accessed US Voter Data

Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) urges Bank customers to shun phishing scams

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware

BASS Medical Group Data Breach Exposes Medical Information

Bathurst RSL says cyber incident contained after Qilin ransomware attack

Belgium: Four convicted over €17,000 phishing scam targeting Prince Laurent and Princess Claire

Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database

Blueberry Pediatrics Data Breach Impacted 340k Individuals

Brantford Police Service suspends use of Crime Stoppers after data breach

California settles 23andMe data breach and genetic data sale claims for $6 million

Canada: Cornwall police pause use of Crime Stoppers after national data breach

Canada-wide freeze on Crime Stoppers programs, partnerships surges to 35 agencies

Capcom’s 196 Password Resets Test an 11.77 Million Breach

Chinese man extradited for role in $36 million cryptocurrency scam

Chinese national extradited over alleged $36.9 Million crypto scam

CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure

Claude AI Bypassed a Paywall to Access Georgia Voter Counts, Anthropic Confirms

CoinDCX Warns Users of Phishing as Exchanges Investigate Similar Activity

CONAPE Data Leak: Hacker Claims 6 Million Dominican Republic Senior Records

Cornwall, Brockville police suspend use of Crime Stoppers following data breach

Crime Stoppers data breach exposes 1.5 million tips and Canadian privacy law gaps

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

Crypto wallet maker Foundation warns Passport users after email breach

Cyber Attack Cripples University of New Mexico Hospital System, Forces Closures

Cybersecurity CEO Indicted for Allegedly Scamming Millions From Ransomware Victims

Data breach at Central Ohio Primary Care affects 1.4 million people

Denver Health Medical Plan Breach Exposed Data of 238,000 Members for 14 Months

DreamHost forces password resets in ongoing "incident"

Dutch police extradite Chinese national accused of laundering Cambodian investment scam funds

Emperador Lists AB InBev: $1M BTC Claim, 3.9 GB

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

Ernst & Young (EY) data breach exposes client tax records after third-party platform hack

European Union Agency for Cybersecurity (ENISA) Software Bill of Materials (SBOM) Security Advisory Highlights Software Supply Chain Risks and Protection Measures

Fake TikTok Shops now fuel one in five phishing blocks - and Black Friday could make it worse

First 48 hours: What ransomware attack taught family business about cybersecurity, trusted partnerships

Forgotten AI agents may still access sensitive company data

Former Insurance Account Executive Who Stalked and Doxxed Women Across Five States, Now Sentenced

Former minister confirms Jaguar Land Rover cyber-attack was state sponsored

Former pentester used ARTEX AI to steal 8.2 million data records

Fortinet patches critical FortiOS flaws found with AI help

Foundation Finds 23,000 Phishing Attempts Tied to Exposed Customer Data

Foundation Finds More Than 23,000 Phishing Email Attempts

Foundation Identifies 23,000 Phishing Attempts, Investigates Data Exposure

Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys

Foundation Passport Phishing Alert: Are Bitcoin Wallet Users at Risk?

Foundation Revokes All Cloudflare API Keys After Phishing Emails Sent From Its Own Domains

Foundation Says Cloudflare API Keys Behind Phishing Blast From Its Own Domains

Foundation Says Compromised Cloudflare API Keys Fueled Passport Wallet Phishing Emails

Four in 10 charities have ‘limited or non-existent’ board-level plans for a cyber attack

Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens

Gheist Campaign Abuses Stolen GitHub Tokens Across 850+ Accounts

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs

Global cyber attacks jump 48% as phishing rises

GMO Internet Compensates Users as Cyberattacks Hit Japanese Companies

Good Smile Company Reports Potential Customer Data Breach Due to Unauthorized Access

Google Brotli flaw leaves 90% of the cloud exposed, Wiz finds, as patching scramble continues

Grieving families’ ‘incredibly stressful’ wait for answers after major New Zealand cyber attack

Hacker Claims Samsung Smart TVs Collect Audio, Viewing Data for Targeted Ads

Hacker Drains Nearly $1,000,000 in SOL From Solana Trading Bot Users in 94 Seconds

Hacker Exploits Critical PHP2Shell Flaws to Win $2,000 Bitcoin Challenge, Releases Proof-of-Concept (PoC)

Hacker with No IT Background Uses Generative AI to Breach Companies, Steal 8.2 Million Records, Demand Money

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

Hardware wallet after the data breach: four ways to order without a home address

Hisense faces $5 million ransom demand over alleged 19GB data theft

India: Central Board of Film Certification (CBFC) Data Breach - Confidential Documents Linked To Over 500 Films Reportedly Exposed

India: Cyber Attack On TG-iPASS Portal Halts Industrial Approvals In Telangana

India: Ransomware Attack Hits TG-iPASS Portal, Industrial Approvals Disrupted

India: Telangana TG-iPASS Portal Recovers Data After Ransomware Attack

India: TG-iPASS portal services disrupted since October 22nd after suspected ransomware attack

India: TG-iPASS recovers data after ransomware attack

India’s Film Sensor Board Data Breach - Unreleased Scripts, 500+ Film Titles Exposed

Iranian hacker group hides C2 server in US for first time

Jaguar Land Rover £2.1 billion cyber-attack was state-sponsored

Japan's Mos Card data breach: 1.13 million records leaked after unauthorized access to contractor's server; card numbers and PINs affected

Johns Hopkins Bayview warns patients of data breach involving more than 3,100 people

KB Kookmin Bank: "Additional 2,091 individuals confirmed in hacking data breach, bringing total to 2,210...We sincerely apologize to customers"

KB Kookmin Bank Finds 2,091 More People Hit by Data Breach

Keystone confirms data breach: “We owe you an apology”

Keystone Hardware Wallet Suffers Data Breach Exposing Customer Addresses and Purchase Records

Keystone Says Data Breach Exposed Customer Addresses, Purchase Histories

Keystone to Destroy 18,835 Older Devices After Data Breach

Lexitas Data Breach: 7-Year Long Undetected Error May Have Leaked Information

Linux Flaws Exposed Before Fixes as Root Exploit Goes Public

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

Marines sue Pentagon over data breach affecting more than 3 million people

Mega breaches nearly triple as health sector tops Australia’s data breach count

Michael J. Berger & Co. Data Breach Exposed SSNs and Financial Info

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw

Microsoft releases emergency .NET patches for critical Brotli flaw

Microsoft Removes Entra ID Custom CSS Layout Options to Fight Phishing

Microsoft Teams to get AI protection against phishing and fraud

Microsoft Teams will soon use AI to warn you of sneaky phishing scams

Microsoft to Introduce AI Phishing Detection in Teams for Enhanced Security

Mirae Asset Life Insurance Suffers Data Breach, Confirms Customer Information Leak

Navigate360 Data Breach Compromised SSNs and Driver's License Numbers

New Zealand: Grieving families discover coronial investigations caught up in Dunedin health data breach

Nol Universe admits Korea data breach, boosts security after hacks

Oshkosh utility customers warned of data breach

Pakistan issues high-alert advisory over phishing and malware attacks via WhatsApp

Pakistan warns of phishing, malware attacks via WhatsApp

Pakistan warns of WhatsApp phishing and malware attacks

PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP Publishes Mitigation Advice for New RCE Flaw

PHP2Shell Exploited in the Wild

PHP2Shell security flaws now sucessfully exploited in the wild

Political microtargeting violates voters’ data privacy, German regulator rules

Popular AI tool LiteLLM says unrevoked key allowed hackers to target users

PricewaterhouseCoopers (PwC) confirms cyber incident as Everest claims 590 GB data breach

Qilin Lists Bathurst RSL on October 22nd, Club Responds

Ransomware gangs target cybersecurity workers’ families

Researcher hacks into “Steal My Bitcoin” server in PHP security test

Samsung accused of spying on users and then sharing data with 400+ partners

Saskatchewan Crime Stoppers ‘pause’ operations after data breach

Saskatchewan Crime Stoppers suspends all tips after data breach raises concerns over anonymity

Security pros reckon the biggest AI risk comes with an employee badge

Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control

Sometimes Cyber Attacks Are All About the Money: Ransomware Stats Here

South Korea: Financial Supervisory Service (FSS) Warns of High-Paying Job Scams

South Korea Arrests Self-Taught Hacker Who Used Generative AI to Steal 8.2 Million Records from 90 Companies

South Korea Police Dismantle AI-Driven Cybercrime Ring That Hit 90 Companies

SquareML Data Breach Impacts 238k Individuals

StealC Malware Returns as Stadia RAT After Operation Endgame Takedown

Swedish government blocks ChatGPT and Claude, citing security risks

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Tailscale zero-days spark a disclosure war before fixes land

Taxpayers May Pay Up to $25,000 to Address County Data Breach

The Phishing Domain You Missed Shares a Nameserver With the One You Caught

Timmins Police suspends use of Crime Stoppers after data breach

Top 7 email security threats facing businesses in 2026

Trinity Health Data Breach Impacts Over 33,000 Individuals

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

UK Biobank prepares to reopen research platform following major data breach

UK Biobank set to reopen to researchers after data breach

UK Phishing Warning as 511 Lookalike Domains Imitate Trusted Brands and Target Consumers

Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras

University of Copenhagen data breach exposes data of 525,000 people

Voice Phishing Gang Arrested for Stealing 3.1 Billion Won Using Fake Arrest Warrants

What Happens When Manufacturing’s Security Debt Comes Due?

When an AI Agent Is the Incident, the Identity Record Is the Evidence

Wichita Family Dental Data Breach Compromises PHI and PII

Who Authorized That Agent? Enforcing AI Authority Before the Action

Who Pays When AI Makes Cybercrime Cheaper? Inside the New Economics of Ransomware and Extortion

Your Older Android Phone Is Getting a New Scam Defense - Here’s What Google Changed