Editor's Message

Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and PRiSM celebrated it's third anniversary. Both projects have made a huge impact on my life and I'd like to thank each and everyone of you who have supported me, with special thanks to those individuals and communities who have helped me build up my knowledge on cybercrime and ransomware over the years. Thanks again for all your continued support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.
0
Data-Leaking Ransomware Attacks Tracked This Month
0
Data-Leaking Ransomware Attacks Tracked This Year



Tuesday, 10 November 2026

Ransomware Operator Claims - Week 45 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 2nd November and 8th November 2026, kindly assisted by our partners.

DBD discovered and researched 241 Ransomware Victims over 44 Countries and Islands claimed by 48 Data-Leaking Ransomware Operators, including 4 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.


Monday, 9 November 2026

Data Breaches Digest - Week 46 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 9th November and 15th November 2026.


📅 13th November

A Familiar Face Can Hide a Hacker: FBI Warns of North Korea’s Malware Scheme Using Stolen Webcam Videos

AI Set to Revolutionize Ransomware Following “Stagnant” Few Years

Amplifon discloses data breach involving medical and insurance information in the US

Attackers Don’t Need AI to Get in, Just a High-Vis Jacket

Attacks on French Supermarket Freezers Expose Broad Critical Infrastructure (CI), Operational Technology (OT) Concerns

Baker Tilly Data Breach Lawsuit Filed After Client Data Taken From Vendor Platform

Beast Ransomware Uses Hidden ‘666’ Control Panel to Encrypt Windows Systems and Network Shares

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper

Check Point warns of zero-day flaw exploited for root access

Chip giant Taiwan Semiconductor Manufacturing Company (TSMC), hot target for identity theft, confirms data breach

Digital sovereignty leaves enterprises chasing their own audit trails

Fake Grand Theft Auto VI (GTA 6) download goes after Steam logins and crypto wallet data

Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters

FBI Disrupts North Korean FaceStealer Scheme Behind $400 Million Crypto Theft

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

French Table Tennis Federation (FFTT) Confirms New Data Breach: What Members Should Do

From Assault Rifles to Phishing: Brazilian Criminal Groups Go Digital

German parliament passes law giving spy agencies hacking, sabotage powers

Germany reinforces cyber-attack defence

Global Microsoft outage leaves users open to phishing attacks

Gootloader used in at least 44 ransomware attacks costing $29 million since 2018

Hacker advertises 46,000 Taiwan Semiconductor Manufacturing Company (TSMC) employee records for sale after cloud leak

Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2

Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

Hackers Use 4,837 Stolen GitHub Accounts to Target 61,764 Repositories

Hackers' Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofpoint Researcher Says

"Hange" Suffers Data Breach: 62,000 Passwords and Credit Card Security Codes Leaked

How attackers turned a Teams meeting booking into a device code phishing trap

‘Idealistic but passive’ boards putting firms at greater risk of cyber attack

Investigation into Cyber Incident at Lithuanian Customs Identifies Potential Personal Data Breach; BAP Unavailable

Japan: Data Breach Suspected at Agency of Popular YouTuber 'Kimagure Cook'

Kakao Work suffers data breach, exposing emails and attachment contents

Kalahari Data Breach Lawsuits Filed After Employee Social Security Numbers Exposed

KB Capital Data Breach Exposes Personal Information of 1,811 People

Metabase Zero-Day Exploited in Dorsata Data Breach Affecting 58,000 Patients

Microsoft 365 Outage Set to Ramp up Security Risks to Organizations

New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

New SignDrop Exploit Claims SYSTEM Access on Windows Through Common Log File System (CLFS)

No Parking, No Standing? Florida Court Rules on Standing in Driver’s License Privacy Case

North Korea’s hacker army steal another £300 MILLION in crypto using fake video calls weeks after ‘biggest ever heist

North Korean state-backed hackers steal over $400 million in cryptocurrency, FBI says

One infected computer could expose an entire network: CERT-In flags ‘The Gentlemen’ ransomware

Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4 Million Stolen Logins

Personal data of startup support program participants leaked in cyber attack

Phishing Rises Three Times Faster in Europe Than Globally

Police arrest 354 suspects in dark web cybercrime crackdown

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes

Ransomware attack on Belarusian cloud firm disrupts businesses for days

Record number of cyber incidents reported to UK privacy regulator

SafePal Phishing Letters: How a Data Leak Made Fake Mail Look Real

SafePal Users Targeted by Phishing Letters Following Data Breach Affecting Nearly 40,000 Customers

SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users

Singapore clothing brand Our Second Nature hit by data breach; customer details exposed

Sophos State of Ransomware in Retail 2026: Retailers Pay Less and Recover Faster, but Encryption Rates Climb

South Korea's Ministry of SMEs and Startups Hit by Another Data Breach in "Startup for Everyone" Program; 818 Affected, Recurrence in Just 5 Months

State Bank of India (SBI) Cyber Attack Probe Begins After 3.75 Lakh Records Allegedly Stolen

Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme

Suspected North Korean IT workers reached onboarding at companies with open data

Taiwan Semiconductor Manufacturing Company (TSMC) confirms employee data breach tied to cloud service provider

Taiwan Semiconductor Manufacturing Company (TSMC) Data Breach - Employee Data Exposed via Third-Party Cloud Provider

The U.S. Justice Department Has Seized More Than $1.2 Billion in Assets Stolen From Binance and Uncovered a New North Korean Hacker Scheme

Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases

Uber confirms hackers stole thousands of drivers’ license information in data breach

Uber Data Breach: Notices Sent After a Service Provider’s Credentials Were Compromised

US Disrupts North Korea’s FaceStealer Campaign, Targets $1.2 Billion in Stolen Crypto

Wales: Prestatyn High School pupil's report leaked in 'data breach'

What Is MDR? How Managed Detection and Response Stops Ransomware

Why experts fear Canada's not-for-profits are prime targets for hackers

📅 12th November

45% of Organizations Lack Confidence in Ransomware Defenses

186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers

A Hacker Has Put the Data of 46,000 Taiwan Semiconductor Manufacturing Company (TSMC) Employees up for Sale for 3 BTC

AI Can Help Bad Actors, Operational Technology (OT) Defenders Need to See Attack Path First, Close OT Environments

Amplifon data breach exposes sensitive data of over 1.3 million people

Amplifon probes data breach affecting customers’ personal and health records

Apache HTTP Server patches critical HTTP/2 remote code execution flaw

Apify Confirms Customer Data Breach, Resets Security Credentials And Revokes Third-Party Access

Apify rotates API tokens, prompts 2FA resets after breach

Aréas Assurances falls victim to a data breach

Attackers are Using Agentic AI Offensive Tools to Automate Intrusions

Attackers breached 10 organizations with an open-source AI pentest framework

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

Australia: Breached! Hacker defaces Victorian Curriculum and Assessment Authority (VCAA) website, says exams sold to students

Australia: Customer details potentially exposed in national parks booking system breach across multiple states

Australia: Exam chaos after hacker claims to have sold ‘hundreds’ of papers

Australia: Hacked Victorian Certificate of Education (VCE) exams allegedly sold to students

Australia: Hacker claims to have leaked Victorian Certificate of Education (VCE) papers to students

Australia: Ransomware risks rise for retailers ahead of peak trading season

Australia cyber attacks rise 39% as ransomware grows

Baker Tilly data breach exposes client information

Belgium: "Indications of Iranian involvement" in cyber attack on refrigeration systems

Belgium unveils 29 measures to tackle online fraud

Belgium Unveils 29-Point Action Plan To Tackle Online Fraud And Phishing

Boston University alums sue school over data breach

Bots pose as AI agents, AI agents pose as humans, and defenses believe both

Bristol: Full recovery from schools cyber-attack could take 'years' says council leader

Burger King Japan's Data Breach Leaked 11 Million Customer Details - Here's What We Can Learn From It

Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign

Canada: British Columbia post-secondary application portal affected by data breach

Canada: Calgary Police Service suspends use of Crime Stoppers following data breach

Chainstack Urges Credential Rotation After Data Breach

Check your GitHub repos: A secret stealer hit tens of thousands of them

CISOs say Operational Technology (OT) will survive a cyberattack, but their engineers aren’t so sure

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations

Crafty Microsoft Teams Booking Flow Disguises Device Code Phishing

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

Cyber Attack Could Cost Britain's Railway £1.8 billion, Department for Transport (DfT) Warns

Cyber pros unmask Qilin ransomware administrator as St. Petersburg man

Europe’s Threat Landscape in 2026: Espionage Expands as AI and Phishing Risks Grow

European authorities take down SteaIC malware servers for second time this year

Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools

Fireworks AI suffers second data breach, exposing Notion customer data

French Blood Banks Heated to Boiling Temperatures Following Cyber Attack on Cold Storage Facilities

GhostMap Android Flaw Can Leave Phones Stuck in Crash Loop

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

Gootloader Malware Disrupted in International Cyber Operation

Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts

Hackers Abuse Microsoft SQL Servers to Deploy Monero Miner and Gh0st RAT

Hackers Abuse Windows Group Policy to Deploy Citrus Ransomware and Disable Microsoft Defender

Hackers compromise 4,800 GitHub accounts to steal cloud credentials

Hackers could exploit Zoom to take control of Windows PCs

Hackers plant GSocket on Linux servers for persistent access

Hackers Steal $133 Million After Cyber Attack Hits French Cooperative Bank Crédit Mutuel Arkéa

Hijacked email accounts complicate investigations into European bomb hoaxes

How dangerous are online ads?

International operation dismantles malware networks, exposes 6.4 million stolen credentials

IT firms and their clients hit: hackers hijack ScreenConnect, seize remote control

Kalahari Resorts Data Breach Exposes Social Security Numbers of Employees

Kaspersky Identifies Routine Admin Gaps Opened the Door to Ransomware in Virtualisation Cases

Kazakhstan-linked hackers used AI agent to spy on Central Asian governments

Kempinski Data Breach - Guests Targeted In Phishing Scams

Large-scale attack pushes secret-stealing malware to 65K+ GitHub repos

Leak reveals how former US marine tried to trick Claude into spreading pro-Russian propaganda

LEGO Takes BrickLink Marketplace Offline After Detecting Unusual Activity

LEGO's BrickLink Marketplace Dark for a Week as Ransomware Fears Mount

Maersk confirms cyber attack on 'local legacy system'

Maersk cyber attack ‘connected to’ hacking group claims, company confirms

Maersk hit by cyber attack amid claim of $5 million ransom demand

Maersk hit by ransomware cyber-attack

Maersk investigates data breach involving legacy IT system

Maersk investigates legacy-system breach after WhiteArmor ransomware group claims 100GB logistics data theft

Maersk Reveals Data Breach as Extortion Group Demands $5 million

Muji operator apologizes for data breach

Myriad Genetics Data Breach Exposes Sensitive Patient Information

National Cyber Security Centre (NCSC) Launches Cyber Adversary Testing to Boost Resilience

Nevada County Behavioral Health: Important Notice of Data Breach for ECM/HOME Team Clients

New N-able "4EverAble2Shell" zero-day exploited hours after PoC released

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

New Windows SignDrop zero-day gives hackers SYSTEM privileges

New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

Operation Endgame malware takedown turns up over 6 million stolen logins

PCH Digital Data Breach Exposes PHI and PII of Adults and Minors

Philippine cyber threats surge as nine million credentials compromised

Phishing site ‘suspended’? Don’t count on it

Police dismantle Gootloader, CastleRAT, StealC malware infrastructure

Potential Data Breach on Japan Post's LINE Official Account Following Unauthorized Access to Dentsu Digital Service

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

Quantum Systems drones suspended by German military after cyber attack

Ransomware group claims attack on Delta Dental of Missouri

Richmond Public Schools (RPS) data breach: Former students at risk after dark web leak

Romania says it stopped Russian cyberattack targeting government emails

Romanian intelligence agency says it identified Russian-linked cyber attack

Russia’s Turla Hackers Target Exchange Servers for Espionage

SafePal Data Breach Victims Are Now Getting Scam Letters at Home

SafePal users targeted by phishing letters after customer data breach

Samsung Affiliate Multicampus Reports Data Breach Affecting 70,000

Samyang Group affiliates fined over breach of 150,000 people’s data

SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

Security Teams Must Shift from Patching to Mitigation in the AI Era

Shipping Giant Maersk Confirms Cyberattack and Data Theft as Ransomware Gang Demands $5 Million

Shipping giant Maersk confirms data breach as hackers demand $5 million ransom

Shipping giant Maersk says recent cyber incident affected legacy system

Shukran data breach: Dubai’s Landmark Group investigating cyber incident

Shukran members’ names and birth dates accessed, Landmark Group says

Social Security Numbers, Medical Data Compromised in Amplifon Breach

Sophos state of ransomware in retail 2026: Retailers pay less and recover faster, but encryption rates climb

South Africans’ identity documents and bank records exposed on ransomware leak sites

South Korea: Financial Security Institute (FSI) Chief Apologizes for Data Breach, Leaves After One-Minute Statement Without Details

South Korea: Financial Security Institute Suffers Data Breach, Over 850 Records Leaked

South Korea: Financial Supervisory Service (FSS) warns of scammers posing as community centers in Korea voice phishing

South Korea’s Financial Security Institute reports data breach exposing personal information

South Korea's Samyang Group Units Fined approximately $410,000 Over Data Breach Affecting 150,000 People

Southwire Confirms Data Breach Exposing Employee Health and Identity Records

Stolen Claude API keys can turn Claude Code into a remote-controlled implant

Taiwan: Passport validity unaffected by data breach of 70,000 headshots

Taiwan Semiconductor Manufacturing Company (TSMC) Confirms Employee Data Leak After Hacker Demands 3 BTC

Task Bar Hero breach exposes player data as studio warns of impersonation

Thailand tightens aviation cybersecurity after 60,000 passenger data breach

Top South African e-commerce platform suffers data breach which includes users’ credit card details

Uber Data Breach Exposes Driver's License Info of Thousands

Ukraine busts call center network behind €4.3 Million investment scam

United Airlines blocks AI agents from booking flights, citing cybersecurity risks

United Airlines to block customers from using AI agents, citing cyber threats

United Airlines Won’t Let Personal AI Agents Book Your Flights

University of Texas at Arlington Breached by Qilin Ransomware as Campus MachForms Data Leaks

Victorian Curriculum and Assessment Authority (VCAA) hack: what students, parents and schools can make of the attacker’s claims

Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT

Who collects the keys when an AI agent retires?

📅 11th November

Across Protocol Recover from Domain Hijacking Phishing Incident, Pledges Full Compensation to Victims

Across Protocol restores website after phishing attack, $350K in estimated losses

Across Protocol Restores Website After Phishing Attack, Losses Estimated at $350K

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones

Android Malware Poses as Casino App to Collect User Data

Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Armed Forces of the Philippines (AFP) probes alleged data breach involving Air Force

Australia: Hacker claims to have sold Victorian Certificate of Education (VCE) exam papers to hundreds of students after government website hack

Australia: Victorian Curriculum and Assessment Authority (VCAA) investigating after website hacked during student exam period

Baker Tilly notifies clients of data breach at third-party provider

Bitget Wallet expands AI checks as phishing detections jump 7.4-fold

Bomb threats at schools via anonymous emails: “We will carry out a genocide of Italians”. Dozens of schools across Italy have been targeted

Britain, France set out first guidelines for commercial hacking firms

BYOD Ransomware Gang claims to have stolen Medical Records of Two Million Texas Residents

Chinese spies are hacking the services you rely on, and your data is the target

CISA flags Cisco BroadWorks flaw as actively exploited in attacks

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

CopperDragon Malware Supplier May Arm Chinese Hackers Who Breached Telecoms, Check Point Says

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

Cyberattacks hit a third of Japan firms or their service providers this year

Dire Wolf ransomware: An apex predator stalking your data

Duck and coverage: The insurance impact of a cyber attack

eMudhra Revokes 8 More Certificate Authorities (CAs) It Previously Declared Unaffected by Key Compromise

eMudhra revokes 8 more Certificate Authority (CA) certificates after private key mishap

EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch

FBI-wanted North Korean hacker back in spotlight

Git fixes six vulnerabilities, including code execution during recursive clones

Grok's security blind spot exposed users and Musk's company secrets

Hacker takes over Australian high school exam authority's website to promote cheating scam

Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

Hackers use AntiFox AI agents in AWS credential-theft attacks

Huge European telecom leak exposes Swedbank, SEB, airBaltic and dozens of other companies’ clients

Iran’s Foreign Minister Seyed Abbas Araghchi hits back at France over cyber-attack allegations

KakaoTalk Blocks 176,000 Phishing Suspect Accounts as Investment Scams Triple

Korea Launches First Mandatory Probe Into GS E&C Data Breach

Korea's financial cybersecurity watchdog hacked just days after regulator's warning

Maersk confirms cyberattack after hackers access old IT system

Maersk confirms data breach as WhiteArmor ransomware demands $5 million

Maersk Probes Ransomware Claim Tied to Legacy System

Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday

Microsoft Patches 1,235 Security Flaws: Outlook Zero-Day Already Under Attack

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft researchers demonstrate hidden backdoor technique for AI agents

Microsoft Researchers Reveal How Tiny Weight Edits Can Hijack AI Models

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons

Microsoft Teams AI Phishing Detection: Rollout and Deepfake Warnings

MSP Ransomware Recovery: 12% Lost Clients

N-able releases security hotfixes for zero-day vulnerabilities

N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public

Near AI Says Hacker May Have Seen Confidential AI Requests in Server Breach

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed

Notion says Fireworks breach exposed customer AI chat transcripts

OpenAI Deploys 35-Second Kill Switch to Stop Rogue AI Models

Operational Technology (OT) Incidents Hit a Third of Industrial Organizations

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Poland shuts down government services platform ePUAP following cyberattack

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

Ransomware Gang Says It Hacked Vanderbilt University

Ransomware report: 78% of Australian victims pay up as businesses abandon negotiations

Researchers link Qilin ransomware administrator to St. Petersburg man

Richmond Public Schools (RPS) technology director left weeks before cyber attack that put personal information on dark web

Russian hackers compromised Microsoft Exchange to steal NATO, EU emails

Scan and Sue - Your Website Is Talking to Strangers, and Someone Is Taking Notes

SEGA confirms data breach exposing 2.2 Million email addresses

SEGA Confirms Data Breach Hitting 2.2 Million Addresses

Shipping company Maersk suffers data breach, ransomware gang demands $5 million

Singapore: Fullerton Health hit by cyber attack, personal data of migrant workers exposed

Singapore: Meal ordering app Tappee hit by data breach; SATS says four schools affected

South Korea: Hacker Impersonates Financial Supervisory Service, Breaches Financial Security Institute

SPH Media confirms data breach affecting 9% of its database

SPH Media is latest Singapore firm impacted by data breach, report says

SPH Media latest Singapore firm impacted by data breach

Study finds AI is making phishing attacks harder to detect

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

Tappee Data Breach Exposes Student Details at Four Singapore Schools

Thai Airways left reeling after major data breach over three years

The Philippines: Bureau of Internal Revenue (BIR) Data Breach - Taxpayer Profile Info May Have Been Exposed, Here’s What Taxpayers Should Do

The Philippines: Securities and Exchange Commission (SEC) confirms data breach on digital platforms

The Philippines: Securities and Exchange Commission (SEC) probes data breach; says no records affected

Vanguard Faces Class Actions Over Data Breach

Vibe-Coded APIs Riddled With Vulnerabilities

Whale phishing (whaling): what it is, how it works and what to do if you answered one

Why Backups alone cannot save Healthcare Providers from Ransomware

📅 10th November

350,000 SAS passengers may have had details leaked in major data breach

After clock change, clicks on phishing links rose by 13%

AI company Fireworks says hackers stole data, billing info during October breaches

AI phishing scams turn your social posts against you

AI, AI, Oh! The Fourth Amendment and the Machine That Reads Everything

AI-Powered Malware Analysis Uncovers Hidden Phishing Threats and Reduces SOC Workload

Amadeus breach compromises 116,000 Finnair bookings

Amplifon Americas discloses data breach affecting sensitive customer information

Amplifon Breach: 1,332,826 People, Some SSNs

Andover, Massachusetts, Still Reviewing Cyberattack Data, Offers No Timeline

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

Armed Forces of the Philippines (AFP) investigates alleged Philippine Air Force data breach

Armed Forces of the Philippines (AFP) probes alleged data breach on military systems

Armed Forces of the Philippines (AFP) probing into alleged Air Force data breach

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Australia announces mandatory AI safeguards following alleged OpenAI data breach

Baker Tilly Data Breach Exposes Social Security Numbers

Binance Investigates ShinyHunters Breach Claims

Binance warns of iOS flaw that could leak crypto wallet secrets

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

Blind Eagle threat group launches new phishing campaign in Latin America

Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America

Brazil’s Largest Port Hit by Major IT Outage Amid Suspected Ransomware Cyberattack

BYOD Ransomware Group Allegedly Claims Toyota Data Breach

Canada: Data breach at The Children’s Foundation

Canadian Investment Regulatory Organization (CIRO) to pay $8.3 Million to resolve data breach class action

Chevy Chase Club Data Breach Impacts 7,585 Individuals

Cirrus Aircraft Data Breach Exposes Sensitive Personal and Health Information

CISA Expands Incident Reporting Form While CIRCIA Mandate Waits

CISA tweaks cyber incident form to spot attacks that might be linked

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

Cloud Vulnerabilities Surge Fourfold in Less Than a Year

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

“Customer data leaked”: AI agents cause a security nightmare for companies

Cyber attack prompts Swiss pension funds to review software ties

Cyber Attack Targets Multiple European Supermarkets, Disrupting Cold Storage Systems

Cyberattacks threaten to make open-source AI a little less open, Hugging Face executive warns

Cybercriminals are increasingly infecting regular people with spyware

Cybercriminals Lure Victims with Fake Adobe Acrobat Document-Signing Pages

Cybercriminals target South Africa through stolen logins and unpatched devices

Default Admin Password Let Researchers Unlock and Start Cars

Doctor Anywhere Suffers Data Breach Exposing Identification and Bank Records

Dutch military police officer accused of stealing crypto from traveler

Emc CPAs Data Breach Exposes Info of 3,003 Individuals

FBI-wanted North Korean hacker back in spotlight

Finnair Announces Data Breach at Amadeus IT Group

Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights

Fireworks AI discloses new breach after cloud provider hack

Football Leaks hacker who sparked Man City probe in talks with Serious Fraud Office (SFO) over co-operation

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants

France points the finger at Iran over fridge attacks. Were the Russians lying?

Frontier Airlines warning customers about phishing emails: Here's how to protect yourself

GhostFrame: A New ESXi Implant Linked to Settra Ransomware

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google patches eighth Chrome zero-day exploited in attacks this year

Hackers Claim Data on 1 Million People in Vanderbilt University Ransomware Attack

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

Hackers exploit trusted Amazon Web Services (AWS) access to breach multiple cloud environments

Hackers log in to Linux systems using any long password: CISA confirms active exploitation of SSHole

Hackers now exploit critical Barracuda ESG flaws to gain root access

Half of global companies vulnerable to cyber attack targeting AI systems

Healthcare company faces $10 Million penalty over failure to protect patient data

Hearing aid giant Amplifon reveals data breach hits thousands of US customers - Social Security numbers and medical information stolen

How AI security failures are endangering your supply chain - and what you can do

How scammers are targeting high school students through phishing emails

Iris Ohyama data breach may expose personal information of 7.7 million people

Is Iran Behind the Recent String of Refrigerator Cyberattacks?

Italy: Aviano mayor among Europeans in crosshairs of Russian hacker group

Japan’s data breach surge puts cyber insurance adequacy in focus

Japanese furniture giant Nitori says hackers stole 37.6 Million customer records

Keep Smiling Dental Group Data Breach Exposes PHI and PII

Lansing Urgent Care Data Breach Exposes Social Security Numbers

Legacy Cooperative Data Breach Exposes Data of 8,836 People

Malaysia: Election Commission steps up website security following suspected cyber-attack

Malaysia: Election Commission (EC) Working To Protect Website From Cyberattack After Recent Reports

Malaysia: Election Commission (EC), Malaysian Communications and Multimedia Commission (MCMC) take measures to protect website following reported cyber attack

Managed service providers face client trust challenges during ransomware recovery

Mavis Tire Data Breach Exposed Personal and Protected Health Info

Merrill Steel Data Breach Affects 4,118 Individuals

Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

Microsoft Self-Service Password Reset (SSPR) Changes: What Are Your Options?

Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row

Minor Sleep Loss Raises Risk Of Falling For Phishing Scams, Study Finds

Mirae Asset Securities data breach exposes data of over 35,000 employees

Missoula school district suffers data breach through third-party education software

Musinsa Warns of Phishing Scams Impersonating Recruitment Staff

N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with Proof-of-Concept (PoC) Exploits

NEAR AI Reports Data Breach Affecting Around 100 Users After AI Server Hack

No charges against OpenAI for its data breach against Services Australia

Notion Confirms AI Chat Transcripts Exposed in Fireworks AI Breach, Affecting Customer Workspaces

Over 575 malicious OpenClaw skills delivered malware to Windows and macOS

Philippines Securities and Exchange Commission (SEC) confirms data breach as ureau of Internal Revenue (BIR) investigates 340K record leak claims

Point72 Asset Management Data Breach Exposes SSNs

Premise Health Data Breach Impacts 62K+ Individuals

Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials

Queens libraries still reeling from ransomware attack as some services return

Queens Public Library still recovering from ransomware attack

Railway breach leads to $740,000 in fraudulent AI charges

Ransomware recovery is now a client retention metric

Ransomware threat blares from Vanderbilt University computers during cyberattack

Refrigeration under cyber attack

Riverside Resort and Casino to pay $1.5 million to resolve data breach class action

Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails

Russian hackers compromised government email servers to steal NATO, EU correspondence

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

Santa Barbara Endodontics Data Breach: SSNs and Health Records Exposed

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

SAP patches ICM2SHELL and PROXYGATE maximum severity flaws

Security teams want to spot unusual AI agent behavior while they’re still defining normal

Security Through Obscurity Is Dead. Long Live the King

SEGA confirms 2.2 million email addresses exposed in newsletter data breach

SEGA Confirms Data Breach After Third-Party Email Provider Exposes 2.19 Million Customer Email Addresses

SEGA confirms newsletter data breach, exposing 2.2 million users

SEGA newsletter data breach has exposed 2.2 million email addresses

SEGA newsletter data breach sees 2.2 million email addresses exposed - gaming giant says it is investigating, but user financial data not affected

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

Shinhan Bank to insure data-breach victims and waive fees for one year

Singapore: M1 hit with data breach

Singapore: Meal ordering app Tappee suffers cyberbreach, says SATS; four schools affected

SM Entertainment confirms employee data breach following hacking attack on internal systems

South Korea: Prosecutors indict and detain six in Thailand-based voice phishing ring

South Korea: Voice Phishing Syndicate Members Indicted for Swindling W15.1 Billion from 705 Victims

SPH Media hit by data breach affecting 9% of its database

Taiwan: Data breach did not compromise credit card numbers, online travel agency says

Thai Airways confirms passenger data leak but credit card details safe

Thai Airways reports unauthorised access to passenger records

Thai Airways Reveals Data Breach Affecting 60,529 Bookings

The Binance Hack - The 6 Billion Dollar Man

The faces of the North Korean hacker army sought by the FBI

The Philippines: Department of the Interior and Local Government (DILG) probes reported possible data breach in Barangay Information System

The Philippines: National Privacy Commission (NPC) confirms data breach reports from 10 government agencies

The Philippines: National Privacy Commission (NPC) confirms breaches in 10 government agencies; warns public against phishing

The Philippines: National Privacy Commission (NPC) receives data breach reports from 10 agencies

The Philippines: Personal data breach reports filed by 10 government agencies

The Philippines: Securities and Exchange Commission (SEC) confirms data breach on its digital platforms

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

Trump Mobile hackers target health records of 2 million Texans

Turla hackers use new Cereal malware to spy on government Exchange servers

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

US Army member arrested in UK over allegations of spying for Russia

US security firm N-able pulls the plug on N-central, its key platform, following disclosure of 33 zero-days

Vanderbilt University asked campus to shut down devices amid claimed ransomware attack

Vanderbilt University Battles Ransomware Attack on Campus Network

Vanderbilt University confirms cyberattack as BYOD ransomware gang claims theft of student and employee data

Vanderbilt University cyberattack hits campus devices, systems

Vanderbilt University hit by BYOD ransomware gang

Vanderbilt University Ransomware: BYOD Claims 1 Million+ SSNs

Vanderbilt University reels following ransomware attack claimed by BYOD group

Vanderbilt University reportedly targeted by BYOD Ransomware Group in Cyber Attack

Vanderbilt University responds to cyberattack by BYOD ransomware group

Vanderbilt University Takes Systems Offline After Cyber Incident

Vanderbilt University tells students to disconnect devices after ransomware gang claims theft of 1 million records

What a security leader should tell the CEO about leaked credentials

What the Midterm Results Could Mean for US Cybersecurity Policy

Who Gives a Crap mopping up after data breach

WireCo Data Breach Exposes Sensitive Employee Information

WM Data Breach Exposes Social Security Numbers of 8K+

📅 9th November

5 brands scammers impersonated most in Q3 2026 phishing

53% of Organizations Lack Definition For 'Normal' AI Agent Behavior

$133 million stolen from French bank via exploited service provider

150GB of data at risk as luxury furniture brand Ligne Roset hit by ransomware attack

AI agents are leaking their owners’ secrets on GitHub: thousands of files exposed

AI phishing scams turn your social posts against you

Alation Data Breach Exposes Social Security Numbers

Alleged AI-aided cyberattack exploits assistant interface to breach German web host

Amplifon Americas Data Breach Impacts 1.3 Million

An average of 8 minutes is all hackers need to log in with stolen credentials

Anti-Money Laundering Watchdog Financial Action Task Force (FATF) Targets Scam Compounds

Anubis Ransomware Hackers Deploy New Lindnor Backdoor and 13 Security-Killing Tools in U.S. Attack

ARTEX goes from pentesting tool to attacker staple in three months

Australian healthcare provider suffers ransomware attack, patient records stolen

Big Red Liquors Data Breach Impacts Over 7,000 Individuals

Binance calls ShinyHunters’ alleged 335 million user data breach a likely scam

Binance denies data breach after alleged ShinyHunters claims

Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia

CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

Companies seeking an MSP doubt their ability to spot cyberattacks

Confidence in surviving major cyber-attack plunges

Crédit Mutuel Arkéa Targeted in Reported $133m Heist

Crypto’s crime-tracking giant restores its main tools after hackers exposed every user’s login data

Cyber Criminals Move Toward More Targeted Phishing Attacks

Daishin Securities to Pay 10,000 Won to Hacking Victims, Cover Phishing Insurance

Daishin Securities to Provide "Free Enrollment in Voice Phishing Compensation Insurance" for Customers Affected by Hacking-Related Data Leak

Data breach at hearing aid giant Amplifon impacts thousands

Data breach at reservation partner exposes Singapore Airlines customer data

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

Den Hartog Industries Data Breach Affects 2,957 People

Edion Online Store Suffers Unauthorized Access, Potential Data Breach

Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

FBI agent stole $2.5 million in crypto from hackers under investigation

FBI Still Hunting North Korean Hacker Eight Years After Indictment

FBI warns of hacker attacks on cold chain systems

FBI-wanted North Korean hacker back in spotlight

Finnair Says 116,000 Reservations Have Been Compromised in Massive Data Breach

Five 'professional' hacker groups linked to foreign intelligence agencies, governments

Former FBI agent stole $2.5 Million in crypto to fund new life abroad

Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room

France accuses Iran of supermarket fridge hacking

France blames Iran for fridge cyber attacks as UK ‘hunt forces’ target hackers and blackout threat grows

France blames Iran for fridge cyberattacks, says some caused fires

France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks

France blames Iran for massive cyber attack on supermarket fridges

France blames Iranian hackers for supermarket attacks that sparked fires

Fraud and phishing behind 44% of Gallagher's New Zealand cyber claims

Google’s “zero-day”: Attackers say they have access to Gmail even after password change

Hackers abuse refrigeration controllers to send spam and route proxy traffic

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Hackers exploit SSHole OpenSSH flaw to breach Linux systems

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

Hackers Steal Around €100 Million From Crédit Mutuel Arkéa Through Supplier Platform

Hackers Use New Lindnor Backdoor to Target Microsoft SQL Servers in Anubis Ransomware Attack

Hong Kong: Police flag the use of AI by criminals

Hong Kong records nearly 18% rise in ransomware cases amid drop in tech crime

Hotel giant Wyndham exposed customer data after app security lapse

How Social Engineering and AI Can Enable Crypto Attacks

HTH Companies Data Breach Exposes Sensitive Personal and Health Information

In the AI Era, CIOs and CISOs Must Decide Together

Inside New Zealand’s Telco Data Breaches

Insight Credit Union discloses breach affecting 656 Texans after Storm ransomware group claimed attack

Iran rejects French claims it was behind supermarket fridge hacking

Iran was behind cyber-attack on French supermarket freezers, Paris says

Italy probes claims of anti-mafia agency data breach

Jailbroken AI Agent Ran Two-Week Attack on European Telecom

Japan: Arrest made in mobile phishing scheme targeting Chinese tourists

Japan prosecutes Chinese suspect over rogue cell tower, phishing

Kenya: Absa Bank Accused of Bribery, Extortion and Data Breach in Case Against Major Client

LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks

MediaLab Ventures discloses data breach that may have exposed Social Security numbers

Minor sleep loss increases risk of phishing scam traps

Mirae Asset Securities hit by data breach affecting 35,000 employees

MS&AD Data Breach Tops 1 Million Records as Japan Insurers Report New Leaks

N-able takes cloud platform offline after 30+ "zero-days" published

New Japan Cyber Regulation Changes Global Rulebook for Cyber Resilience

New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories

Nigeria: Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) advises bank customers against phishing scams

Nigeria: Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) Warns Bank Customers Against Phishing Scams, Cyber Fraud

North Korean Hacker Once Called “a Person Who Does Not Even Exist” Resurfaces Amid Binance’s $8 Billion Hack

November 2026 Android Security Update Fixes 3 Critical Remote Code Execution Flaws

Oregon woman pleads guilty in $82K phishing scam targeting Ohio dispensary

Over 3 Million People Hit by Frontline Education Data Breach

Pro-Kremlin group leaks EU officials’ private data, offers bounties for more info on family members

Pro-Russian hackers target European officials, offer rewards for personal information

Ransomware attack knocks out key Queens library services

Ransomware Attack Puts Vanderbilt University on Lockdown

Ransomware Group BYOD Claims It Stole Data on 1 Million People From Vanderbilt

Revolve Puts Data Breach Victim Count at 1.5 Million

Royal Cornwall Hospitals NHS Trust: Hospital staff faced 'significant distress' over data breach

Runaway AI agent hacks sign-in provider used by OpenAI, Anthropic

Russian cloud firm Beget rebuilds from scratch after data wiper attack

Securities and Exchange Commission (SEC) Philippines Confirms Data Breach on Digital Platforms

SEGA Confirms Data Breach of Over 2 Million Email Addresses

SEGA Data Breach: 2.19 Million Customer Emails Leaked in Arara Vendor Attack

SEGA newsletter data breach exposes 2.2 million email addresses

SEGA reports email data breach following third-party incident

Seminole County expects online services fully restored soon following cyberattack

SK Telecom receives insurance payout after massive SIM data breach

Sony Life Insurance Data Breach Grows to Over 3.2 Million Cases After Unauthorized Access Adds 2.9 Million More

South Korea: Financial Supervisory Service (FSS) and banks to aid voice-phishing victims with cash and counseling

South Korea: Voice Phishing Victims Targeted by Refund Scams

South Korea: "Why Haven't You Come After I Prepared the Money?" Police Officer's Quick Thinking Saves 6 Million Won

South Korea's Daishin Securities to Compensate 38,000 Data-Breach Victims: 10,000 Won Each, Full Fee Waivers

South Korea's Financial Supervisory Service (FSS) to Provide Up to 2 Million Won in Living Expenses and Counseling to Voice Phishing Victims

South Korea's Mirae Asset Securities Reports Data Breach Affecting 39,000; FSS Launches Emergency On-Site Inspection Amid Suspicions of Group-Wide Hacking

Taiwan: ezTravel says credit card numbers safe after data breach

Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records

The Center for Discovery Data Breach Exposes Social Security Numbers

The French fridge hacks were relatively unsophisticated. An AI-enabled attack would raise the stakes

The growing threat of identity compromise

The Philippines: Bureau of Internal Revenue (BIR) investigating alleged data breach

The Philippines: Bureau of Internal Revenue (BIR) launches probe into reported data breach

The Philippines: Data breach hits SEC digital platforms: Full names, email addresses, TINs exposed

The Philippines: Government Agencies Probe Alleged Bureau of Internal Revenue (BIR) Data Breach

The Philippines: Securities and Exchange Commission (SEC) confirms a data breach on its online platforms, exposing users’ names, phone numbers, and tax IDs

The Philippines: Securities and Exchange Commission (SEC) Confirms Data Breach Involving Platform Users, Notifies Privacy Commission

The Philippines: Securities and Exchange Commission (SEC) orders system-wide audit after data breach

The Philippines: Securities and Exchange Commission (SEC) probes data breach affecting online platform users

The Philippines: Securities and Exchange Commission (SEC) says company records unaffected after confirming data breach

Three Men Indicted for Using AI to Impersonate CEOs and Steal $129 Million

Three suspects arrested for AI-powered impersonation scheme costing victims $129 Million

Tired brains take the phishing bait

Toilet paper company knows where you live – and now hackers do too

Toilet Paper Delivery Service Who Gives a Crap Confirms Customer Data Breach

Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million

Two carmakers breached with “admin” password: researchers unlock, start and track customers’ cars

U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses

Ukraine arrests four in $5 million crypto scam targeting Germans

Ukraine dismantles crypto scam network that stole €4.3 million

US bans MEXC crypto exchange over sanctions evasion, cybercrime links

Vanderbilt University cybersecurity incident impacting campus devices and systems

Vanderbilt University hit in BYOD ransomware attack, data theft claimed

Vanderbilt University shuts down devices after cyber attack

Vanderbilt University suffers potential ransomware attack, data breach

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Who Gives A Crap: Data breach at ethical toilet paper company exposes customer information across UK, US and Australia

Who Gives A Crap knows where you live - and now hackers do too

Who Gives A Crap reports customer data breach via third-party provider

Why Australian Signals Directorate (ASD) new authentication guidance demands a closer look at passkeys

Wisconsin Company Offering Up To $5,000 Per Person in Data Breach Settlement Covering 578,699 People

WorkOS Says a Researcher’s Runaway AI Pentest Agent Copied Customer Sales Records

York University breach exposed personal information dating to 2007

York University data breach exposes student personal information

York University discloses data breach affecting departmental forms

Your Data Has Been Breached. Now What?

Z-Pentest: Who are the Russian GRU hackers behind the attacks on industrial systems?

Zelenkofske Axelrod Data Breach Exposed PHI and PII Data