Trending
Incidents with the most news coverage recently, including older incidents that are still drawing follow-up reports.
Gnosis Pay customer data exposed in personal card system breach
Impact: Customer personal data, card details and cryptocurrency wallet addresses exposed; number of people affected undisclosed
Unauthorised access to Gnosis Pay's legacy personal card system on 3 November exposed customer information. Notices to affected customers listed names, addresses, contact details, card numbers, expiry dates, CVVs and linked cryptocurrency wallet addresses. The company said customer funds and its corporate card platform were unaffected and made 3D authentication compulsory for card payments.
Related reports: 19 · last report →3AM ransomware encrypts 37 systems on UK school network
Impact: Approximately 37 systems encrypted
A UK school network suffered a 3AM ransomware attack, with approximately 37 systems encrypted. The attackers targeted approximately 50 systems accessed from an unmanaged host. Security researchers suggested that the cyber-attack may have combined human and artificial intelligence capabilities.
Related reports: 22 · last report →Around 15,000 drivers allowed to pursue Arnold Clark data breach claims
Arnold Clark suffered a personal data breach following a cyber-attack. In April 2026, around 15,000 drivers were allowed to proceed with claims relating to the incident.
Related reports: 4 · last report →NHS ransomware attack disrupts treatment and exposes patient data
5.4mImpact: 5.4 million patient records exposed, more than 1,100 operations postponed, and a contribution to a patient's death
A blood testing company serving London hospitals was hit by a ransomware attack, disrupting NHS blood transfusions and operations and exposing patient information. More than 1,100 operations were postponed, approximately 200 of which involved cancer treatment. The NHS confirmed the online publication of stolen data and investigated, and it later emerged that 5.4 million patient records had been exposed and that the attack had contributed to a patient's death.
Related reports: 29 · last report →UK Housing Ombudsman plans case management system recovery after October cyber-attack
Impact: Disruption to the case management system, online complaint forms, landlord portal and webchat. Whether personal information was compromised and the number of people affected remain unconfirmed.
The UK Housing Ombudsman confirmed unauthorised access to data in its case management system supplied by an external provider in October 2026 and took the system offline. In November, it said it would begin recovery work shortly after putting additional security measures in place. Whether personal information was compromised and the full extent of the damage remain under investigation.
Read on Inside Housing ↗South Lanarkshire Council faces group action over 2023 data leak
15kImpact: Personal information of approximately 15,000 current and former employees leaked
This is a follow-up on group litigation over an incident on 11 April 2023, when South Lanarkshire Council leaked the personal information of approximately 15,000 current and former employees while responding to a freedom of information request. The leaked information included names, salaries, National Insurance numbers, job titles and workplaces. On 9 July 2026, the court authorised a group action over the incident.
Read on Law Society of Scotland ↗TFG London cyber-attack leads to unauthorised access to customer and staff personal data
Impact: Customer and employee personal information, including customer contact details, delivery addresses, order information and the last four digits of some payment cards
TFG London, which operates Phase Eight, Hobbs and Whistles, confirmed unauthorised access to customers’ and employees’ personal information during its investigation into a cyber-attack. Customer contact details, delivery addresses, order information and the last four digits of some payment cards were affected, but no evidence was found that usable full card details or passwords had been leaked. Some IT systems remained unavailable on 30 October.
Related reports: 4 · last report →Security flaws expose information on UK government websites
Security flaws exposed information on several UK government websites. The specific types of information exposed, the scale of the impact and the response measures have not been confirmed.
Read on WIRED ↗Malware on Shelly Store UK website may have exposed payment information
Impact: Potential exposure of customers' payment information and personal data; scale unknown
British smart home device retailer Shelly Store UK found malicious software on its website and servers and notified customers that their payment information may have been exposed. Card information, names, billing addresses and contact details may have been affected, while whether any data was actually stolen and the period of exposure remain unconfirmed.
Related reports: 4 · last report →Royal Cornwall Hospitals NHS Trust exposes health data of 8,003 workers
8kImpact: Sick leave and health information of 8,003 employees and external workers
Sick leave and health information relating to 7,715 employees and 288 external workers remained in hidden pivot tables in an Excel file published by Royal Cornwall Hospitals NHS Trust in response to a freedom of information request, leaving it publicly accessible for around 33 months. No patient information was included. An independent investigation found failures in data sanitisation and review and approval procedures, and the trust acknowledged the emotional distress and loss of trust experienced by affected employees.
Related reports: 8 · last report →Marks & Spencer cyber-attack exposes customer data and disrupts trading
Impact: Customer data exposure and disruption to payments and online orders; estimated cost of £300 million
A cyber-attack in April 2025 disrupted contactless payments, online orders and click-and-collect services at Marks & Spencer, leading it to suspend online orders. In May, the company disclosed that customer data had been exposed and estimated the cost of the attack at £300 million. Its profit subsequently halved in the first half of 2025, while results published in November 2026 showed that profit had recovered following the cyber-attack.
Related reports: 113 · last report →British soldier faces court martial over Estonia mobile phone security incident
A mobile phone security incident occurred in Estonia. A British soldier has been referred to court martial in connection with the incident.
Read on SC Media ↗Kinross Eljamel campaigner faces administrative difficulties after data leak
An Eljamel campaigner in Kinross struggled with complex administrative procedures following a data leak. The types and volume of data leaked, the timing of the incident and the response have not been confirmed.
Read on The Courier ↗