Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and 
Dentons Senior Analyst, Washington D.C.
Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 19th October and 25th October 2026.📅 20th October
South Korea: Account-Freezing Scam Prolongs Unfreeze Times Up to 18.6 Days
📅 19th October
2.76 million pieces of customers' information at Hollys leaked in cyber attack
A Chinese hacker used AI agents to break into more than 100 company websites - Deere and SharkNinja among websites hit by open-source AI-powered problem-solving platform demo
A Lone Hacker Used AI Agents to Breach More Than 100 Companies
Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands
AI Agent Hacker Breaches 100+ Firms for $5,000
AI agents broke into 100+ sites for one hacker at $50 each, researcher says
AI Streaming Scam: Fake Songs Hijack Real Artists’ Profiles on Spotify and Apple Music
Australia: Accounting firm investigating ransomware attack
Australia ranked 11th in Microsoft's Digital Defence Report as phishing rises
Australia's nuclear agency targeted with ads linked to spyware that infect devices without a click
Australian software giant Canva confirms third-party data incident
BAE Systems Cyberattack Halts Bankruptcy Notices at Every U.S. Federal Court
Bullhorn takes staffing platform offline to contain cyberattack
Burger King Japan Confirms Data Breach Exposing 11.18 Million Customer Records
Burger King Japan Data Breach Exposes 11.18 Million Records
Calendar Invite Phishing Is Surging. Here’s How to Spot It Before You Click
California student records exposed in data breach involving testing provider Educational Testing Service (ETS)
Check Point Q3 2026 Audit: Microsoft Impersonated in 33% of Global Brand Phishing Attacks
Conduent Agrees to Pay $80 million to Settle Data Breach Class Action
ConnectWise breach puts more than 300 companies’ secrets at risk
ConnectWise SkyKick Credential Abused to Access 160+ Microsoft 365 Tenants
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks
Data Breach at Hankyu Hanshin Department Store Common ID System Affects Nearly All 1.26 Million Members
Data Breach at Japanese Karaoke System Maker Daiichi Kosho Affects More Than 8.7 Million People
Delek US Energy Data Breach Compromises Social Security Numbers
Department of Homeland Security (DHS) Banning DeepSeek from US Federal Civilian Agencies
Educational Testing Service (ETS) Breach Hits California Students: 4-Month Gap
Educational Testing Service (ETS) data breach exposes California students’ personal information
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
F5 releases out-of-band patches for critical NGINX vulnerabilities
Fairlife Data Breach Exposed Social Security Numbers
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
FANCL and Attenir Suffer Data Breach Affecting 780,000 Customers, Exposing Addresses, Names, Phone Numbers
FBI and CISA Warn of AI-Written Phishing Before the 2026 Midterms
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Fiji: Government urges cybersecurity vigilance after suspected China-linked cyber attack in Suva
Florida announces massive data breach weeks after ‘malicious actor’ accessed DMV driver license records
Florida confirms driver’s licence and motor vehicle data breach by ‘malicious actor’
Florida Data Breach Involved Personal Driver Information
Florida DMV hacked after police department insecurely stored login info
Frontier settles data breach affecting 59K Connecticut residents for $625K
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
Global cyberattacks jump 48% as Africa faces heavy threat burden
Google Expands Android AI Security to Combat Scam Calls, Phishing and OTP Theft
Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy?
Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft
Hacker Accesses Personal Data of Millions of California Students
Hacker Steals Data on Millions of California Students From Testing Vendor
Hacker's AI agents broke into 100+ sites, including John Deere and SharkNinja
Hacker’s Cyberattack Shuts Down Jerome Schools
Hackers claim producer of “Friends” and “The Office”: next big hits may have been stolen
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Hackers steal customer data from major Russian hosting provider FirstVDS
Half the AI bot traffic hammering your website comes from Meta
Healthcare Workers Claim Authentication Errors Delay Patient Care
Hollys Breach Exposes 2.76 Million Records in Korea
How a Booking Phishing Email Can Shut a Hotel Down
How one hacker used AI agents and a few thousand dollars to break into scores of sites
Indiana University Health (IU Health) Data Breach Compromises Medical Information
Interpol’s new campaign shows how anyone can fall victim to deepfake scams
iRhythm Data Breach Affects 8.2 Million Individuals
Japan's Hankyu Hanshin Department Stores Says 1.26 Million Member Records May Have Leaked via Booking Site Breach
Jerome School District Cyberattack Cancels Monday Classes in Idaho
Keio Corporation Investigates Ransomware Attack Linked to Cybercrime Group Qilin
Korean Coffee Chain Hollys Suffers Major Data Breach, 2.76 Million Customers Affected
Microsoft accounts for 33% of brand phishing attacks in Q3, Apple, Google trail
Microsoft behind a third of brand phishing
Microsoft Tops Brand Phishing Attacks in Q3, Apple and Google Trail
Microsoft tops phishing list as attackers turn to AI tools
Microsoft, Apple, Google, LinkedIn and Amazon Lead Phishing Attacks in Q3 2026
Milk Dragon phishing kit makes online fraud easier to scale
Moldova warns of phishing campaign targeting state agencies
Moroccan Police Arrest Two Suspects in Telecom Hacking, National Road Safety Agency (NARSA) Phishing Scheme
New York and Connecticut Attorney Generals settle $2.7 million breach case
One Compromised Login Exposed Millions of California Students’ Records
One Hacker Used AI Agents to Breach More Than 100 Websites
One Hacker Used AI Agents to Break Into John Deere, SharkNinja, and Cummins
One hacker’s AI agents broke into John Deere and SharkNinja sites for $50 each
OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
OpenCode Breach Could Affect OpenAI, Anthropic and Google
OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
OpenCode hack exposes API keys amid AI distillation attacks
Over 390,000 phishing attacks exploit legitimate cloud platforms in 12 months
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Qilin Claims Responsibility for Ransomware Attack on Keio Railway Subsidiaries
Ransomware drives up insurance costs for nearly half of Singapore firms
Ransomware pressure now reaches employees’ homes and families
Secret Broadcom chip flaw lets nearby hackers take over millions of routers
Security Leaders Discuss BAE Cyberattack
Singapore: Organisations face ransomware attacks at 1.5 times the global rate
South Korea: Account-Tying Scam Freezes 6,500+ Accounts, Unfreeze Delays Up to 18.6 Days
State Bank of India (SBI) Customer Data Leak Claim Appears Online, Still Unverified
State Bank of India (SBI) data breach reported, hacker claims sensitive info including KYC records of 3.75 lakh users at risk
Stitch Connect Data Breach Impacts 4,062 Texans: Medical Info Exposed
The FBI Issues an Urgent Warning Over Midterm Election Scams
The Fear of a One-Man-Band Weaponizing AI Agents Is Becoming Reality
The Money Store Data Breach Exposes Personal and Financial Information
The Right Steps After a Phishing Scare at Work
Ticketmaster Confirms Brazil Customer Data Breach as Scope, Timing Remain Unclear
Two more Serbian opposition figures targeted with spyware, researchers say
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
Vishing (voice phishing): how the attack works and how to stop it
Watch out - these are the phishing scams experts say are most likely to catch your workers out
What next? Canva’s most recent data breach a ‘textbook case’ of supply chain risk
Whopper of a data breach sees Burger King Japan expose over 11 million customer records
With open-weight AI, more of the security burden falls on enterprises
Your AI assistant could fall for phishing scams
Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next?
