Data Breaches Digest - Week 42 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th October and 18th October 2026.

📅 13th October

Albert Heijn outage very likely a cyber attack, experts say

Cyber attack hits Hobbs, Whistles and Phase Eight as customers warned of delays

Cyber attack hits hundreds of French supermarkets, heating fridges to 122°F and sparking fires

Data Breach at South Korea's MG Community Credit Cooperatives Exposes Info of 400 Insurance Customers, Including Account Numbers and Balances

Data Breach Threat against H&M by ShinyHunters raises Cybersecurity Concerns

Does Your CISO Have the Authority the Job Now Requires?

Empire Market operator sentenced to 40 years for $430 Million in illicit trade

First Physical Robbery Potentially Linked to Revolut Data Breach

French supermarket fridges targeted in cyber attack

H&M investigates cyber attack claims as string of fashion brands hit by data breach just days after ASOS hack

H&M investigates data breach after ShinyHunters claims

Hackers Force French Supermarket Fridges to Heat Up to 50C in ‘Unprecedented’ Cyber-Attack

Hobbs and Whistles owner struck by cyber attack

Hobbs, Whistles and Phase Eight struck by cyber attack as 'investigation' underway

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Major fashion company sends warning to customers after data breach

Microsoft’s adtech firm Xandr faces record fine over sensitive Grindr user data

Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense

Most high-severity cloud security findings are downgraded once an AI agent checks the environment

Owner of fashion brands Hobbs and Phase Eight becomes the latest retailer to be hit by a cyber attack

Qilin ransomware: Japan extradites gang leader to Germany

The latest phishing scam is targeting your calendar

UK high street brands hit by cyber attack

📅 12th October

Admin Password “123456” Led to 8.8 Million Danish Central Person Register (CPR) Data Breach

AI Use Outpaces Governance in Small Businesses

AI vulnerability patching has a grading problem

Alleged Qilin ransomware leader extradited from Japan to face charges in Germany

Amazon Fire TV Cube hacked using 4-year-old bug: movie fans are not scared, they’re ecstatic

Anthropic Reveals Claude AI Exploited Server Flaws and Bypassed Security Restrictions

Anthropic takes risky AI tests offline after models breach government sites

ASOS Data Breach Highlights How Social Engineering Can Bypass Corporate Security

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

ASOS hackers claim responsibility for Air France-KLM data breach

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers Use Power BI Phishing to Install Multiple RMMs and Maintain Persistent Access

Bargain Android phones ship with preinstalled malware, and users can’t delete it

Bitcoin Hardware Wallet COLDCARD’s X Account Hacked to Post Phishing Link

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

Canadian Ransomware Negotiator Edward Dubrovsky Arrested on Extortion Charges Amid FBI ShinyHunters Crackdown

Check Point warns of 48% rise in cyber attacks worldwide

CISA Warns of Active Attacks Exploiting 10-Year-Old Apache Struts RCE Vulnerability

ClingSTUN Malware Threatens Your IoT Devices: Expert Advice on Detection, Prevention, and Recovery

Critical AnyDesk Linux Flaw Lets Attackers Execute Remote Code With Root Privileges

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Cyber attack disables hundreds of French supermarket freezers

Cyber attack scare for H&M: Fashion giant probes claims it was targeted by same group that hacked Jaguar Land Rover (JLR)

Cyber-attack like OpenAI Medicare breach ‘seems likely’ in UK, says minister

Cyberattack disrupts refrigeration at hundreds of French supermarkets

Cyberattack shuts down refrigerators at French supermarkets

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison

Data breach at Rohlík. Conversations with AI have also been revealed

Did MoneyGram Get Hacked? Ransomware Gang Claims It Did

Dutch police take down malicious proxy network exploiting 178,000 devices

European supermarket giant limits operations amidst cyberattack

Fake Google Calendar entries give phishing scams a new way to reach consumers

Fake Power BI Documents Trick Users Into Installing Rogue ScreenConnect RMMs

FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach

FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation

FBI seizes Chinese hacker tools targeting Taiwanese infrastructure and universities

Fridges in French supermarkets hit by cyber attack

Geopolitics and the cyber resilience gap belong in your threat model

Germany is the second most frequent ransomware target worldwide

GitLab warns of max severity code execution vulnerability

Global Online Retailer ASOS Has Been Hacked

Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time

H&M becomes latest retailer to investigate cyber attack

H&M investigates potential cyber-attack

H&M Investigating Possible Data Breach

Hacker reveals how BYD Shark 6 was compromised on Four Corners

Hacker ‘Wenhao’ Claims Dominican Republic Electoral Registry Breach: 6.8 Million Records and 5.6 Million Photos

Hackers Exploit Palo Alto GlobalProtect Flaw to Gain VPN Access and Deploy Ransomware

Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack

Hackers heat French supermarket fridges to 50C in 'large-scale' cyber attack

Hackers Heat Supermarket Fridges to 50°C in France Cyberattack

Hackers threaten to expose KFC data, as breach allegations circulate

Hackers turn up supermarket fridges to 50°C, threatening millions in food losses

Hidden implant in Ledger hardware wallets linked to $93 Million theft

How DNS traffic exposes phishing domains before they go live

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

International money-laundering gang recruited 15,000 money mules to funnel hackers’ cash

iRhythm Data Breach Impacts at Least 360,000 People

Isle of Man Police officer dismissed over data breach

Japan declares 'cyber emergency' over massive hacker attacks. Stolen documents can be sold on the darknet for 15 cents

Japan Declares First Cyberspace Emergency as AI Turns Ransomware Into Carpet Bombing

Karaoke Giant Reveals Data Breach Impacting Eight Million

Karaoke giant warns 8.7 million customers exposed in supplier data breach

Kenya among EMEA’s most attacked countries as cyber attacks surge 48%

KFC Named in Gentlemen Ransomware Group’s Latest Breach Claim

L&Q warns web services may remain down ‘for some time’ following last month’s cyber-attack

Ledger confirms spy chip implant behind wallet crypto thefts

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Low-cost Android phones are arriving with malware that owners can’t uninstall

Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings

Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted

Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access

Microsoft Teams to Detect Malicious QR Codes and Warn Users of Phishing Attacks

MoneyGram under threat as hackers claim data breach

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

Net Closes Around ShinyHunters with Another FBI Arrest

New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing

Norway fines Microsoft advertising firm $9.6 million over Grindr data sharing

One in five Brits encounter fake profiles or AI bots: the growing romance scam threat

Phishing emails are baiting your AI assistant

Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections

Retail giant Ahold Delhaize takes systems offline after cyberattack

Seoul National University Faces 588 Hacking Attempts in 2026

SIM-swap fraudster jailed for stealing $265K in crypto to fund luxury lifestyle

South Africa: Democratic Alliance (DA) exposes Lesufi government’s two-week delay in reporting e-Panic data breach to Information Regulator

South Africa: Gauteng e-Panic Data Breach - Democratic Alliance (DA) Demands Answers Over Two-Week Delay To Information Regulator

Supermarket Chains in Europe Feel the Heat of Cyberattacks

Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe

"The biggest change in ransomware is not simply that attacks are becoming more sophisticated, it's that AI is making them easier to scale and harder to predict": Two groups account for a third of UK ransomware attacks

The Gentleman Hacking Group Claims MoneyGram, Deloitte, and KFC Data Breaches

The Philippines records 10 claimed ransomware victims in August

Thousands of European wind and solar systems exposed to potential cyberattacks

Two Face US Charges for Sextortion and Cyberstalking in Puerto Rico

UAT-11985 Uses Real-Time Google Phishing Kit to Steal Credentials and Session Tokens

UK: Supreme Court to Rule on Compensation in Data Breach Claims

US disrupts two cyber-espionage tools used by Flax Typhoon

Warlock Ransomware Hits 4 Sectors via SharePoint Bug

Windows PCs missing key updates could lose security fixes in 2027

World’s worst password “123456” linked to breach of 8.8 Million Danes

XRP Ledger Patches Flaw That Could Have Created Unlimited XRP