Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th October and 18th October 2026.📅 13th October
14 Million Credentials Re-Exposed by AI Development Company
Ahold Delhaize Cyberattack Takes Giant, Food Lion, and Stop & Shop Websites Offline, Impacts European Online Orders
AI Is Now Fighting on Both Sides of the Cyber War, Singapore Warns
Albert Heijn outage very likely a cyber attack, experts say
All Souls St Gabriels School investigating cyber incident in wake of ransomware claims
Amazon Fire TV Cube Rooted Using Four-Year-Old Arm Mali Vulnerability
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Aviation Communications Security: Addressing Legacy Technology, Threat Detection, and Modernization Challenges
British Indian AI minister warns of 'inevitable' cyber-attack on UK
Calendar invites emerge as new phishing route targeting work meetings
Callback Phishing: No Link, No Attachment, Just A Phone Number
Coupang Data Breach Fine Reaches Record $466 Million: National Assembly Summons Executive Over Stolen Key
Cyber attack heats up hundreds of fridges at French supermarkets
Cyber attack hits 480-plus French supermarkets: Fridges overheated to 50°C, food spoiled, fires reported in several stores
Cyber attack hits Hobbs, Whistles and Phase Eight as customers warned of delays
Cyber attack hits hundreds of French supermarkets, heating fridges to 122°F and sparking fires
Cyber attack targets French supermarket refrigerators
Cyber incident hits grocery stores in US, Netherlands and Belgium
Cyberattack on TFG London Raises Data Security Concerns for Fashion Retailer
Data Breach at South Korea's MG Community Credit Cooperatives Exposes Info of 400 Insurance Customers, Including Account Numbers and Balances
Data Breach Threat against H&M by ShinyHunters raises Cybersecurity Concerns
Deepfakes Are Driving $40 Billion of Fraudulent Transactions
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password
Does Your CISO Have the Authority the Job Now Requires?
Empire Market operator sentenced to 40 years for $430 Million in illicit trade
EU Commissioner on Cyber Attack on French Supermarkets: Food Weaponization Now a 'Reality'
European Retail Firms Confirm Cyber Incidents
Fifth of CISOs Take Time Off to Avoid Patch Tuesday
Fiji: Minister for Policing and Communications Ioane Naivalurua reviewing suspected cyber attack on Suva-based regional organisation
Fiji: US Embassy informs Government of suspected cyber attack on Suva-based regional organisation
First Physical Robbery Potentially Linked to Revolut Data Breach
France Supermarket Cyberattack: Hackers Raise Fridge Temperatures to 50°C, Spoil Food and Trigger Fires at Hundreds of Stores
French supermarket fridges targeted in cyber attack
French Supermarkets Face Millions in Losses from Large-Scale Cyber Attack
French supermarkets targeted in ‘large scale’ hacker attacks
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
H&M investigates cyber attack claims as string of fashion brands hit by data breach just days after ASOS hack
H&M investigates data breach after ShinyHunters claims
Hackers Force French Supermarket Fridges to Heat Up to 50C in ‘Unprecedented’ Cyber-Attack
Hackers Heat French Supermarket Fridges, Possibly Due to Unpatched Danfoss Controller Flaw
Hobbs and Whistles owner apologises as fashion chains hit by cyber attack
Hobbs and Whistles owner struck by cyber attack
Hobbs, Whistles and Phase Eight struck by cyber attack as 'investigation' underway
IDARE Data Breach Affects 129,659 Users
Japan declares 'state of emergency in cyberspace' as AI unleashes mass ransomware waves
Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware
Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts
Korean Federation of Community Credit Cooperatives (KFCC) hack leaks 400 customers' data, promises full compensation
Ledger says hardware implant in cryptocurrency wallets stole recovery phrases
Lehigh Valley Data Breach Affects 17,892 People
LG smart TVs vulnerable: attackers can bypass webOS security and gain root
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Major fashion company sends warning to customers after data breach
MG Community Credit Cooperatives Federation insurance data breach includes ID and account numbers
Microsoft’s adtech firm Xandr faces record fine over sensitive Grindr user data
Millions Of Records, Dozens Of Companies: Inside Japan's Escalating Cyber Crisis
Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense
Most high-severity cloud security findings are downgraded once an AI agent checks the environment
North Korean hackers target Ukrainian experts for possible intelligence on Russia's war
Norway Fines Microsoft’s Ad Firm Xandr $9.6 Million Over Grindr User Data Sharing
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
OK Savings Bank data breach hits 183 customers via loan application page
Owner of fashion brands Hobbs and Phase Eight becomes the latest retailer to be hit by a cyber attack
Patch Tuesdays aren’t for everyone: 20% of cyber pros take time off to avoid them
Qilin ransomware: Japan extradites gang leader to Germany
Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
SAP warns of maximum severity OAuth2 SSRF security flaw
Singapore refreshes cyber strategy with new measure to block malware and phishing sites
Solutions30 Data Breach Claim: Hacker Offers 10+ Million Records for Sale
South African clothing retailer Foschini Group investigating cyberattack on British fashion brands
South Korea: Major Banks Block 3,273 Accounts Linked to Phishing Scams Via Easy Money Transfer Services in First Half of This Year
South Korea: Money Laundering Group Extorts 2.32 Billion Won from Gambling Sites
South Korea: Police Issue Nationwide Alert Text Over Fears of Voice Phishing Following Hacking Incidents
South Korea: Ring Involving Bank Workers Extorts 2.3 Billion Won from Gambling Sites Using Dummy Accounts
South Korea's Financial Supervisory Service (FSS) Launches On-Site Inspection of Yegaram Savings Bank Over Hacking Breach, Weighs Formal Probe
Switzerland: Tens of Thousands of Pension Fund Records Stolen - Here's What You Need to Do Now
The big melt: French supermarket refrigerators targeted in widespread cyber attack
The Data Breach Clock Starts Before You’re Ready
The latest phishing scam is targeting your calendar
The Philippines: Department of Trade & Industry (DTI) loses accounting records due to ransomware
TVING CEO Says AI Likely Used in Data Breach, Admits She Didn't Verify Whether Security Spending Was Sufficient
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
UK Regains Early Access to AI Models After Reported White House Reversal
UK Government Announces Sweeping New AI Security Plans
UK high street brands hit by cyber attack
Unmasking the ransomware 'savior': The double agent working with extortionists
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
📅 12th October
Admin Password “123456” Led to 8.8 Million Danish Central Person Register (CPR) Data Breach
AI Use Outpaces Governance in Small Businesses
AI vulnerability patching has a grading problem
Alleged Qilin ransomware leader extradited from Japan to face charges in Germany
Amazon Fire TV Cube hacked using 4-year-old bug: movie fans are not scared, they’re ecstatic
Anthropic Reveals Claude AI Exploited Server Flaws and Bypassed Security Restrictions
Anthropic takes risky AI tests offline after models breach government sites
ASOS Data Breach Highlights How Social Engineering Can Bypass Corporate Security
ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications
ASOS hackers claim responsibility for Air France-KLM data breach
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
Attackers Use Power BI Phishing to Install Multiple RMMs and Maintain Persistent Access
Bargain Android phones ship with preinstalled malware, and users can’t delete it
Beware of This New Phishing Scam Lurking in Your Work Calendar. Attacks Are Up 33,000 Percent
Bitcoin Hardware Wallet COLDCARD’s X Account Hacked to Post Phishing Link
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
Canadian Ransomware Negotiator Edward Dubrovsky Arrested on Extortion Charges Amid FBI ShinyHunters Crackdown
Check Point warns of 48% rise in cyber attacks worldwide
CISA Warns of Active Attacks Exploiting 10-Year-Old Apache Struts RCE Vulnerability
ClingSTUN Malware Threatens Your IoT Devices: Expert Advice on Detection, Prevention, and Recovery
Critical AnyDesk Linux Flaw Lets Attackers Execute Remote Code With Root Privileges
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Cyber Attack: Giant, Food Lion, Stop & Shop Websites Down
Cyber attack disables hundreds of French supermarket freezers
Cyber attack leaves hundreds of French supermarkets with millions of euros of food ruined
Cyber Attack on Refrigerators in French Supermarkets Suspected to Cause Million-Euro Damage
Cyber attack scare for H&M: Fashion giant probes claims it was targeted by same group that hacked Jaguar Land Rover (JLR)
Cyber-attack like OpenAI Medicare breach ‘seems likely’ in UK, says minister
Cyberattack disrupts refrigeration at hundreds of French supermarkets
Cyberattack shuts down refrigerators at French supermarkets
Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Daiichi Kosho data breach puts 8.7 million records at risk in Japan
Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison
Data breach at RohlÃk. Conversations with AI have also been revealed
Denmark CPR data breach exposes 8.75 million records via weak password
Did MoneyGram Get Hacked? Ransomware Gang Claims It Did
Dutch police take down malicious proxy network exploiting 178,000 devices
European supermarket giant limits operations amidst cyberattack
Fake Google Calendar entries give phishing scams a new way to reach consumers
Fake Power BI Documents Trick Users Into Installing Rogue ScreenConnect RMMs
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation
FBI seizes Chinese hacker tools targeting Taiwanese infrastructure and universities
Fridges in French supermarkets hit by cyber attack
Geopolitics and the cyber resilience gap belong in your threat model
Germany is the second most frequent ransomware target worldwide
GitLab warns of max severity code execution vulnerability
Global Online Retailer ASOS Has Been Hacked
Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time
H&M becomes latest retailer to investigate cyber attack
H&M investigates potential cyber-attack
H&M ‘investigating claims it was hit by cyber attack’
H&M Investigating Possible Data Breach
Hacker reveals how BYD Shark 6 was compromised on Four Corners
Hacker ‘Wenhao’ Claims Dominican Republic Electoral Registry Breach: 6.8 Million Records and 5.6 Million Photos
Hackers cause chaos as French supermarket fridges turned up to 50C
Hackers Exploit Palo Alto GlobalProtect Flaw to Gain VPN Access and Deploy Ransomware
Hackers Force French Supermarket Fridges to 50°C in Major Cyber Attack
Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack
Hackers heat French supermarket fridges to 50C in 'large-scale' cyber attack
Hackers Heat Supermarket Fridges to 50°C in France Cyberattack
Hackers threaten to expose KFC data, as breach allegations circulate
Hackers turn up supermarket fridges to 50°C, threatening millions in food losses
Hidden implant in Ledger hardware wallets linked to $93 Million theft
How DNS traffic exposes phishing domains before they go live
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
International money-laundering gang recruited 15,000 money mules to funnel hackers’ cash
iRhythm Data Breach Impacts at Least 360,000 People
iRhythm data breach may affect 8.2 million people, hackers stole patient information
Isle of Man Police officer dismissed over data breach
It’s time to take action on cybersecurity in agrifood
Japan declares 'cyber emergency' over massive hacker attacks. Stolen documents can be sold on the darknet for 15 cents
Japan Declares First Cyberspace Emergency as AI Turns Ransomware Into Carpet Bombing
Japanese karaoke maker Daiichi Kosho reports data breach affecting 8.7 million records
Karaoke Chain Breach Hits 8.7 Million as Supplier Hacked
Karaoke Giant Reveals Data Breach Impacting Eight Million
Karaoke giant warns 8.7 million customers exposed in supplier data breach
Kenya among EMEA’s most attacked countries as cyber attacks surge 48%
KFC Named in Gentlemen Ransomware Group’s Latest Breach Claim
L&Q warns web services may remain down ‘for some time’ following last month’s cyber-attack
Ledger confirms spy chip implant behind wallet crypto thefts
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Low-cost Android phones are arriving with malware that owners can’t uninstall
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
Luxembourg: Pension Insurance Fund warns of phishing text messages
Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted
Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
Microsoft Teams to Detect Malicious QR Codes and Warn Users of Phishing Attacks
MoneyGram under threat as hackers claim data breach
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
Net Closes Around ShinyHunters with Another FBI Arrest
New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
Norway fines Microsoft advertising firm $9.6 million over Grindr data sharing
One in five Brits encounter fake profiles or AI bots: the growing romance scam threat
Pentagon data breach exposes personal information of over 3 million people
Phishing emails are baiting your AI assistant
Prominent Ransomware Negotiator Faces Extortion Charges
Ransomware gang allegedly raids The Money Store, two class actions follow
Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections
Retail giant Ahold Delhaize takes systems offline after cyberattack
Seoul National University Faces 588 Hacking Attempts in 2026
ShinyHunters arrest number three: a Canadian ransomware negotiator
Shock and surprise after FBI arrests Canadian cybersecurity expert in ShinyHunters hacking case
SIM-swap fraudster jailed for stealing $265K in crypto to fund luxury lifestyle
SMBs lack AI governance
South Africa: Democratic Alliance (DA) exposes Lesufi government’s two-week delay in reporting e-Panic data breach to Information Regulator
South Africa: Gauteng e-Panic Data Breach - Democratic Alliance (DA) Demands Answers Over Two-Week Delay To Information Regulator
Supermarket Chains in Europe Feel the Heat of Cyberattacks
Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe
"The biggest change in ransomware is not simply that attacks are becoming more sophisticated, it's that AI is making them easier to scale and harder to predict": Two groups account for a third of UK ransomware attacks
The Gentleman Hacking Group Claims MoneyGram, Deloitte, and KFC Data Breaches
The new phishing trick aimed at the AI reading your inbox
The Philippines records 10 claimed ransomware victims in August
Thousands of European wind and solar systems exposed to potential cyberattacks
Two Face US Charges for Sextortion and Cyberstalking in Puerto Rico
UAT-11985 Uses Real-Time Google Phishing Kit to Steal Credentials and Session Tokens
UK: Supreme Court to Rule on Compensation in Data Breach Claims
US disrupts two cyber-espionage tools used by Flax Typhoon
Warlock Ransomware Hits 4 Sectors via SharePoint Bug
Windows PCs missing key updates could lose security fixes in 2027
World’s worst password “123456” linked to breach of 8.8 Million Danes
XRP Ledger Patches Flaw That Could Have Created Unlimited XRP
Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 28th September and 4th October 2026, kindly assisted by our partners.