Editor's Message

Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and PRiSM celebrated it's third anniversary. Both projects have made a huge impact on my life and I'd like to thank each and everyone of you who have supported me, with special thanks to those individuals and communities who have helped me build up my knowledge on cybercrime and ransomware over the years. Thanks again for all your continued support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.
0
Data-Leaking Ransomware Attacks Tracked This Month
0
Data-Leaking Ransomware Attacks Tracked This Year



Monday, 9 November 2026

Data Breaches Digest - Week 46 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 9th November and 15th November 2026.


📅 12th November

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

Bots pose as AI agents, AI agents pose as humans, and defenses believe both

CISOs say Operational Technology (OT) will survive a cyberattack, but their engineers aren’t so sure

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

GhostMap Android Flaw Can Leave Phones Stuck in Crash Loop

How dangerous are online ads?

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

Ukraine busts call center network behind €4.3 Million investment scam

Who collects the keys when an AI agent retires?

📅 11th November

Across Protocol Recover from Domain Hijacking Phishing Incident, Pledges Full Compensation to Victims

Across Protocol restores website after phishing attack, $350K in estimated losses

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones

Android Malware Poses as Casino App to Collect User Data

Anthropic's Glasswing Finds Many Vulnerabilities Yet Delivers Few Fixes, Researcher Says

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Armed Forces of the Philippines (AFP) probes alleged data breach involving Air Force

Australia: Victorian Curriculum and Assessment Authority (VCAA) investigating after website hacked during student exam period

Baker Tilly notifies clients of data breach at third-party provider

Bitget Wallet expands AI checks as phishing detections jump 7.4-fold

Bomb threats at schools via anonymous emails: “We will carry out a genocide of Italians”. Dozens of schools across Italy have been targeted

Britain, France set out first guidelines for commercial hacking firms

BYOD Ransomware Gang claims to have stolen Medical Records of Two Million Texas Residents

Chinese spies are hacking the services you rely on, and your data is the target

CISA flags Cisco BroadWorks flaw as actively exploited in attacks

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

CopperDragon Malware Supplier May Arm Chinese Hackers Who Breached Telecoms, Check Point Says

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

Dire Wolf ransomware: An apex predator stalking your data

Duck and coverage: The insurance impact of a cyber attack

eMudhra Revokes 8 More Certificate Authorities (CAs) It Previously Declared Unaffected by Key Compromise

eMudhra revokes 8 more Certificate Authority (CA) certificates after private key mishap

EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch

FBI-wanted North Korean hacker back in spotlight

Git fixes six vulnerabilities, including code execution during recursive clones

Grok's security blind spot exposed users and Musk's company secrets

Hacker takes over Australian high school exam authority's website to promote cheating scam

Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

Hackers use AntiFox AI agents in AWS credential-theft attacks

Huge European telecom leak exposes Swedbank, SEB, airBaltic and dozens of other companies’ clients

Iran’s Foreign Minister Seyed Abbas Araghchi hits back at France over cyber-attack allegations

KakaoTalk Blocks 176,000 Phishing Suspect Accounts as Investment Scams Triple

Korea Launches First Mandatory Probe Into GS E&C Data Breach

Korea's financial cybersecurity watchdog hacked just days after regulator's warning

Maersk confirms cyberattack after hackers access old IT system

Maersk confirms data breach as WhiteArmor ransomware demands $5 million

Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday

Microsoft Patches 1,235 Security Flaws: Outlook Zero-Day Already Under Attack

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft researchers demonstrate hidden backdoor technique for AI agents

Microsoft Researchers Reveal How Tiny Weight Edits Can Hijack AI Models

Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons

Microsoft Teams AI Phishing Detection: Rollout and Deepfake Warnings

MSP Ransomware Recovery: 12% Lost Clients

N-able releases security hotfixes for zero-day vulnerabilities

N-able Rushes Out N-central Fixes After 33 Zero-Days Go Public

Near AI Says Hacker May Have Seen Confidential AI Requests in Server Breach

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed

Notion says Fireworks breach exposed customer AI chat transcripts

OpenAI Deploys 35-Second Kill Switch to Stop Rogue AI Models

Operational Technology (OT) Incidents Hit a Third of Industrial Organizations

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Poland shuts down government services platform ePUAP following cyberattack

Railway Says Stolen Customer AI Keys Led to $740,000 in Estimated Unauthorized Usage Charges

Ransomware Gang Says It Hacked Vanderbilt University

Ransomware report: 78% of Australian victims pay up as businesses abandon negotiations

Russian hackers compromised Microsoft Exchange to steal NATO, EU emails

Scan and Sue - Your Website Is Talking to Strangers, and Someone Is Taking Notes

SEGA confirms data breach exposing 2.2 Million email addresses

Singapore: Fullerton Health hit by cyber attack, personal data of migrant workers exposed

Singapore: Meal ordering app Tappee hit by data breach; SATS says four schools affected

South Korea: Hacker Impersonates Financial Supervisory Service, Breaches Financial Security Institute

SPH Media confirms data breach affecting 9% of its database

SPH Media latest Singapore firm impacted by data breach

Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns

Tappee Data Breach Exposes Student Details at Four Singapore Schools

Thai Airways left reeling after major data breach over three years

The Philippines: Bureau of Internal Revenue (BIR) Data Breach - Taxpayer Profile Info May Have Been Exposed, Here’s What Taxpayers Should Do

The Philippines: Securities and Exchange Commission (SEC) confirms data breach on digital platforms

The Philippines: Securities and Exchange Commission (SEC) probes data breach; says no records affected

Whale phishing (whaling): what it is, how it works and what to do if you answered one

Why Backups alone cannot save Healthcare Providers from Ransomware

📅 10th November

350,000 SAS passengers may have had details leaked in major data breach

After clock change, clicks on phishing links rose by 13%

AI company Fireworks says hackers stole data, billing info during October breaches

AI phishing scams turn your social posts against you

AI, AI, Oh! The Fourth Amendment and the Machine That Reads Everything

AI-Powered Malware Analysis Uncovers Hidden Phishing Threats and Reduces SOC Workload

Amadeus breach compromises 116,000 Finnair bookings

Amplifon Americas discloses data breach affecting sensitive customer information

Amplifon Breach: 1,332,826 People, Some SSNs

Andover, Massachusetts, Still Reviewing Cyberattack Data, Offers No Timeline

Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities

Armed Forces of the Philippines (AFP) investigates alleged Philippine Air Force data breach

Armed Forces of the Philippines (AFP) probes alleged data breach on military systems

Armed Forces of the Philippines (AFP) probing into alleged Air Force data breach

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Australia announces mandatory AI safeguards following alleged OpenAI data breach

Baker Tilly Data Breach Exposes Social Security Numbers

Binance Investigates ShinyHunters Breach Claims

Binance warns of iOS flaw that could leak crypto wallet secrets

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

Blind Eagle threat group launches new phishing campaign in Latin America

Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America

Brazil’s Largest Port Hit by Major IT Outage Amid Suspected Ransomware Cyberattack

BYOD Ransomware Group Allegedly Claims Toyota Data Breach

Canada: Data breach at The Children’s Foundation

Canadian Investment Regulatory Organization (CIRO) to pay $8.3 Million to resolve data breach class action

Chevy Chase Club Data Breach Impacts 7,585 Individuals

Cirrus Aircraft Data Breach Exposes Sensitive Personal and Health Information

CISA Expands Incident Reporting Form While CIRCIA Mandate Waits

CISA tweaks cyber incident form to spot attacks that might be linked

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

Cloud Vulnerabilities Surge Fourfold in Less Than a Year

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

“Customer data leaked”: AI agents cause a security nightmare for companies

Cyber attack prompts Swiss pension funds to review software ties

Cyber Attack Targets Multiple European Supermarkets, Disrupting Cold Storage Systems

Cyberattacks threaten to make open-source AI a little less open, Hugging Face executive warns

Cybercriminals are increasingly infecting regular people with spyware

Cybercriminals Lure Victims with Fake Adobe Acrobat Document-Signing Pages

Cybercriminals target South Africa through stolen logins and unpatched devices

Default Admin Password Let Researchers Unlock and Start Cars

Doctor Anywhere Suffers Data Breach Exposing Identification and Bank Records

Dutch military police officer accused of stealing crypto from traveler

Emc CPAs Data Breach Exposes Info of 3,003 Individuals

FBI-wanted North Korean hacker back in spotlight

Finnair Announces Data Breach at Amadeus IT Group

Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights

Fireworks AI discloses new breach after cloud provider hack

Football Leaks hacker who sparked Man City probe in talks with Serious Fraud Office (SFO) over co-operation

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

France Blames Iran for Supermarket Fridge Hack, Requests International Arrest Warrants

France points the finger at Iran over fridge attacks. Were the Russians lying?

Frontier Airlines warning customers about phishing emails: Here's how to protect yourself

GhostFrame: A New ESXi Implant Linked to Settra Ransomware

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

Google patches eighth Chrome zero-day exploited in attacks this year

Hackers Claim Data on 1 Million People in Vanderbilt University Ransomware Attack

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

Hackers exploit trusted Amazon Web Services (AWS) access to breach multiple cloud environments

Hackers log in to Linux systems using any long password: CISA confirms active exploitation of SSHole

Hackers now exploit critical Barracuda ESG flaws to gain root access

Half of global companies vulnerable to cyber attack targeting AI systems

Healthcare company faces $10 Million penalty over failure to protect patient data

Hearing aid giant Amplifon reveals data breach hits thousands of US customers - Social Security numbers and medical information stolen

How AI security failures are endangering your supply chain - and what you can do

How scammers are targeting high school students through phishing emails

Iris Ohyama data breach may expose personal information of 7.7 million people

Is Iran Behind the Recent String of Refrigerator Cyberattacks?

Italy: Aviano mayor among Europeans in crosshairs of Russian hacker group

Japan’s data breach surge puts cyber insurance adequacy in focus

Japanese furniture giant Nitori says hackers stole 37.6 Million customer records

Keep Smiling Dental Group Data Breach Exposes PHI and PII

Lansing Urgent Care Data Breach Exposes Social Security Numbers

Legacy Cooperative Data Breach Exposes Data of 8,836 People

Malaysia: Election Commission steps up website security following suspected cyber-attack

Malaysia: Election Commission (EC) Working To Protect Website From Cyberattack After Recent Reports

Malaysia: Election Commission (EC), Malaysian Communications and Multimedia Commission (MCMC) take measures to protect website following reported cyber attack

Managed service providers face client trust challenges during ransomware recovery

Mavis Tire Data Breach Exposed Personal and Protected Health Info

Merrill Steel Data Breach Affects 4,118 Individuals

Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day

Microsoft Self-Service Password Reset (SSPR) Changes: What Are Your Options?

Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row

Minor Sleep Loss Raises Risk Of Falling For Phishing Scams, Study Finds

Mirae Asset Securities data breach exposes data of over 35,000 employees

Missoula school district suffers data breach through third-party education software

Musinsa Warns of Phishing Scams Impersonating Recruitment Staff

N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs

N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with Proof-of-Concept (PoC) Exploits

NEAR AI Reports Data Breach Affecting Around 100 Users After AI Server Hack

No charges against OpenAI for its data breach against Services Australia

Notion Confirms AI Chat Transcripts Exposed in Fireworks AI Breach, Affecting Customer Workspaces

Over 575 malicious OpenClaw skills delivered malware to Windows and macOS

Philippines Securities and Exchange Commission (SEC) confirms data breach as ureau of Internal Revenue (BIR) investigates 340K record leak claims

Point72 Asset Management Data Breach Exposes SSNs

Premise Health Data Breach Impacts 62K+ Individuals

Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials

Queens libraries still reeling from ransomware attack as some services return

Queens Public Library still recovering from ransomware attack

Railway breach leads to $740,000 in fraudulent AI charges

Ransomware recovery is now a client retention metric

Ransomware threat blares from Vanderbilt University computers during cyberattack

Refrigeration under cyber attack

Riverside Resort and Casino to pay $1.5 million to resolve data breach class action

Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails

Russian hackers compromised government email servers to steal NATO, EU correspondence

Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers

Santa Barbara Endodontics Data Breach: SSNs and Health Records Exposed

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

SAP patches ICM2SHELL and PROXYGATE maximum severity flaws

Security teams want to spot unusual AI agent behavior while they’re still defining normal

Security Through Obscurity Is Dead. Long Live the King

SEGA confirms 2.2 million email addresses exposed in newsletter data breach

SEGA Confirms Data Breach After Third-Party Email Provider Exposes 2.19 Million Customer Email Addresses

SEGA confirms newsletter data breach, exposing 2.2 million users

SEGA newsletter data breach has exposed 2.2 million email addresses

SEGA newsletter data breach sees 2.2 million email addresses exposed - gaming giant says it is investigating, but user financial data not affected

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

Shinhan Bank to insure data-breach victims and waive fees for one year

Singapore: M1 hit with data breach

Singapore: Meal ordering app Tappee suffers cyberbreach, says SATS; four schools affected

SM Entertainment confirms employee data breach following hacking attack on internal systems

South Korea: Prosecutors indict and detain six in Thailand-based voice phishing ring

South Korea: Voice Phishing Syndicate Members Indicted for Swindling W15.1 Billion from 705 Victims

SPH Media hit by data breach affecting 9% of its database

Taiwan: Data breach did not compromise credit card numbers, online travel agency says

Thai Airways confirms passenger data leak but credit card details safe

Thai Airways reports unauthorised access to passenger records

Thai Airways Reveals Data Breach Affecting 60,529 Bookings

The Binance Hack - The 6 Billion Dollar Man

The faces of the North Korean hacker army sought by the FBI

The Philippines: Department of the Interior and Local Government (DILG) probes reported possible data breach in Barangay Information System

The Philippines: National Privacy Commission (NPC) confirms data breach reports from 10 government agencies

The Philippines: National Privacy Commission (NPC) confirms breaches in 10 government agencies; warns public against phishing

The Philippines: National Privacy Commission (NPC) receives data breach reports from 10 agencies

The Philippines: Personal data breach reports filed by 10 government agencies

The Philippines: Securities and Exchange Commission (SEC) confirms data breach on its digital platforms

Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

Trump Mobile hackers target health records of 2 million Texans

Turla hackers use new Cereal malware to spy on government Exchange servers

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

US Army member arrested in UK over allegations of spying for Russia

US security firm N-able pulls the plug on N-central, its key platform, following disclosure of 33 zero-days

Vanderbilt University asked campus to shut down devices amid claimed ransomware attack

Vanderbilt University Battles Ransomware Attack on Campus Network

Vanderbilt University confirms cyberattack as BYOD ransomware gang claims theft of student and employee data

Vanderbilt University cyberattack hits campus devices, systems

Vanderbilt University hit by BYOD ransomware gang

Vanderbilt University Ransomware: BYOD Claims 1 Million+ SSNs

Vanderbilt University reels following ransomware attack claimed by BYOD group

Vanderbilt University reportedly targeted by BYOD Ransomware Group in Cyber Attack

Vanderbilt University responds to cyberattack by BYOD ransomware group

Vanderbilt University Takes Systems Offline After Cyber Incident

Vanderbilt University tells students to disconnect devices after ransomware gang claims theft of 1 million records

What a security leader should tell the CEO about leaked credentials

What the Midterm Results Could Mean for US Cybersecurity Policy

Who Gives a Crap mopping up after data breach

WireCo Data Breach Exposes Sensitive Employee Information

WM Data Breach Exposes Social Security Numbers of 8K+

📅 9th November

5 brands scammers impersonated most in Q3 2026 phishing

53% of Organizations Lack Definition For 'Normal' AI Agent Behavior

$133 million stolen from French bank via exploited service provider

150GB of data at risk as luxury furniture brand Ligne Roset hit by ransomware attack

AI agents are leaking their owners’ secrets on GitHub: thousands of files exposed

AI phishing scams turn your social posts against you

Alation Data Breach Exposes Social Security Numbers

Alleged AI-aided cyberattack exploits assistant interface to breach German web host

Amplifon Americas Data Breach Impacts 1.3 Million

An average of 8 minutes is all hackers need to log in with stolen credentials

Anti-Money Laundering Watchdog Financial Action Task Force (FATF) Targets Scam Compounds

Anubis Ransomware Hackers Deploy New Lindnor Backdoor and 13 Security-Killing Tools in U.S. Attack

ARTEX goes from pentesting tool to attacker staple in three months

Australian healthcare provider suffers ransomware attack, patient records stolen

Big Red Liquors Data Breach Impacts Over 7,000 Individuals

Binance calls ShinyHunters’ alleged 335 million user data breach a likely scam

Binance denies data breach after alleged ShinyHunters claims

Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia

CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

Companies seeking an MSP doubt their ability to spot cyberattacks

Confidence in surviving major cyber-attack plunges

Crédit Mutuel Arkéa Targeted in Reported $133m Heist

Crypto’s crime-tracking giant restores its main tools after hackers exposed every user’s login data

Cyber Criminals Move Toward More Targeted Phishing Attacks

Daishin Securities to Pay 10,000 Won to Hacking Victims, Cover Phishing Insurance

Daishin Securities to Provide "Free Enrollment in Voice Phishing Compensation Insurance" for Customers Affected by Hacking-Related Data Leak

Data breach at hearing aid giant Amplifon impacts thousands

Data breach at reservation partner exposes Singapore Airlines customer data

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

Den Hartog Industries Data Breach Affects 2,957 People

Edion Online Store Suffers Unauthorized Access, Potential Data Breach

Email Addresses of 2.2 Million Sega Customers Leaked in Vendor Breach

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

FBI agent stole $2.5 million in crypto from hackers under investigation

FBI Still Hunting North Korean Hacker Eight Years After Indictment

FBI warns of hacker attacks on cold chain systems

FBI-wanted North Korean hacker back in spotlight

Finnair Says 116,000 Reservations Have Been Compromised in Massive Data Breach

Five 'professional' hacker groups linked to foreign intelligence agencies, governments

Former FBI agent stole $2.5 Million in crypto to fund new life abroad

Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room

France accuses Iran of supermarket fridge hacking

France blames Iran for fridge cyber attacks as UK ‘hunt forces’ target hackers and blackout threat grows

France blames Iran for fridge cyberattacks, says some caused fires

France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks

France blames Iran for massive cyber attack on supermarket fridges

France blames Iranian hackers for supermarket attacks that sparked fires

Fraud and phishing behind 44% of Gallagher's New Zealand cyber claims

Google’s “zero-day”: Attackers say they have access to Gmail even after password change

Hackers abuse refrigeration controllers to send spam and route proxy traffic

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Hackers exploit SSHole OpenSSH flaw to breach Linux systems

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

Hackers Steal Around €100 Million From Crédit Mutuel Arkéa Through Supplier Platform

Hackers Use New Lindnor Backdoor to Target Microsoft SQL Servers in Anubis Ransomware Attack

Hong Kong: Police flag the use of AI by criminals

Hong Kong records nearly 18% rise in ransomware cases amid drop in tech crime

Hotel giant Wyndham exposed customer data after app security lapse

How Social Engineering and AI Can Enable Crypto Attacks

HTH Companies Data Breach Exposes Sensitive Personal and Health Information

In the AI Era, CIOs and CISOs Must Decide Together

Inside New Zealand’s Telco Data Breaches

Insight Credit Union discloses breach affecting 656 Texans after Storm ransomware group claimed attack

Iran rejects French claims it was behind supermarket fridge hacking

Iran was behind cyber-attack on French supermarket freezers, Paris says

Italy probes claims of anti-mafia agency data breach

Jailbroken AI Agent Ran Two-Week Attack on European Telecom

Japan: Arrest made in mobile phishing scheme targeting Chinese tourists

Japan prosecutes Chinese suspect over rogue cell tower, phishing

Kenya: Absa Bank Accused of Bribery, Extortion and Data Breach in Case Against Major Client

LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks

MediaLab Ventures discloses data breach that may have exposed Social Security numbers

Minor sleep loss increases risk of phishing scam traps

Mirae Asset Securities hit by data breach affecting 35,000 employees

MS&AD Data Breach Tops 1 Million Records as Japan Insurers Report New Leaks

N-able takes cloud platform offline after 30+ "zero-days" published

New Japan Cyber Regulation Changes Global Rulebook for Cyber Resilience

New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories

Nigeria: Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) advises bank customers against phishing scams

Nigeria: Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) Warns Bank Customers Against Phishing Scams, Cyber Fraud

North Korean Hacker Once Called “a Person Who Does Not Even Exist” Resurfaces Amid Binance’s $8 Billion Hack

November 2026 Android Security Update Fixes 3 Critical Remote Code Execution Flaws

Oregon woman pleads guilty in $82K phishing scam targeting Ohio dispensary

Over 3 Million People Hit by Frontline Education Data Breach

Pro-Kremlin group leaks EU officials’ private data, offers bounties for more info on family members

Pro-Russian hackers target European officials, offer rewards for personal information

Ransomware attack knocks out key Queens library services

Ransomware Attack Puts Vanderbilt University on Lockdown

Ransomware Group BYOD Claims It Stole Data on 1 Million People From Vanderbilt

Revolve Puts Data Breach Victim Count at 1.5 Million

Royal Cornwall Hospitals NHS Trust: Hospital staff faced 'significant distress' over data breach

Runaway AI agent hacks sign-in provider used by OpenAI, Anthropic

Russian cloud firm Beget rebuilds from scratch after data wiper attack

Securities and Exchange Commission (SEC) Philippines Confirms Data Breach on Digital Platforms

SEGA Confirms Data Breach of Over 2 Million Email Addresses

SEGA Data Breach: 2.19 Million Customer Emails Leaked in Arara Vendor Attack

SEGA newsletter data breach exposes 2.2 million email addresses

SEGA reports email data breach following third-party incident

Seminole County expects online services fully restored soon following cyberattack

SK Telecom receives insurance payout after massive SIM data breach

Sony Life Insurance Data Breach Grows to Over 3.2 Million Cases After Unauthorized Access Adds 2.9 Million More

South Korea: Financial Supervisory Service (FSS) and banks to aid voice-phishing victims with cash and counseling

South Korea: Voice Phishing Victims Targeted by Refund Scams

South Korea: "Why Haven't You Come After I Prepared the Money?" Police Officer's Quick Thinking Saves 6 Million Won

South Korea's Daishin Securities to Compensate 38,000 Data-Breach Victims: 10,000 Won Each, Full Fee Waivers

South Korea's Financial Supervisory Service (FSS) to Provide Up to 2 Million Won in Living Expenses and Counseling to Voice Phishing Victims

South Korea's Mirae Asset Securities Reports Data Breach Affecting 39,000; FSS Launches Emergency On-Site Inspection Amid Suspicions of Group-Wide Hacking

Taiwan: ezTravel says credit card numbers safe after data breach

Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records

The Center for Discovery Data Breach Exposes Social Security Numbers

The French fridge hacks were relatively unsophisticated. An AI-enabled attack would raise the stakes

The growing threat of identity compromise

The Philippines: Bureau of Internal Revenue (BIR) investigating alleged data breach

The Philippines: Bureau of Internal Revenue (BIR) launches probe into reported data breach

The Philippines: Data breach hits SEC digital platforms: Full names, email addresses, TINs exposed

The Philippines: Government Agencies Probe Alleged Bureau of Internal Revenue (BIR) Data Breach

The Philippines: Securities and Exchange Commission (SEC) confirms a data breach on its online platforms, exposing users’ names, phone numbers, and tax IDs

The Philippines: Securities and Exchange Commission (SEC) Confirms Data Breach Involving Platform Users, Notifies Privacy Commission

The Philippines: Securities and Exchange Commission (SEC) orders system-wide audit after data breach

The Philippines: Securities and Exchange Commission (SEC) probes data breach affecting online platform users

The Philippines: Securities and Exchange Commission (SEC) says company records unaffected after confirming data breach

Three Men Indicted for Using AI to Impersonate CEOs and Steal $129 Million

Three suspects arrested for AI-powered impersonation scheme costing victims $129 Million

Tired brains take the phishing bait

Toilet paper company knows where you live – and now hackers do too

Toilet Paper Delivery Service Who Gives a Crap Confirms Customer Data Breach

Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million

Two carmakers breached with “admin” password: researchers unlock, start and track customers’ cars

U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses

Ukraine arrests four in $5 million crypto scam targeting Germans

Ukraine dismantles crypto scam network that stole €4.3 million

US bans MEXC crypto exchange over sanctions evasion, cybercrime links

Vanderbilt University cybersecurity incident impacting campus devices and systems

Vanderbilt University hit in BYOD ransomware attack, data theft claimed

Vanderbilt University shuts down devices after cyber attack

Vanderbilt University suffers potential ransomware attack, data breach

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Who Gives A Crap: Data breach at ethical toilet paper company exposes customer information across UK, US and Australia

Who Gives A Crap knows where you live - and now hackers do too

Who Gives A Crap reports customer data breach via third-party provider

Why Australian Signals Directorate (ASD) new authentication guidance demands a closer look at passkeys

Wisconsin Company Offering Up To $5,000 Per Person in Data Breach Settlement Covering 578,699 People

WorkOS Says a Researcher’s Runaway AI Pentest Agent Copied Customer Sales Records

York University breach exposed personal information dating to 2007

York University data breach exposes student personal information

York University discloses data breach affecting departmental forms

Your Data Has Been Breached. Now What?

Z-Pentest: Who are the Russian GRU hackers behind the attacks on industrial systems?

Zelenkofske Axelrod Data Breach Exposed PHI and PII Data