Trending
Incidents with the most news coverage recently, including older incidents that are still drawing follow-up reports.
Hacking of supermarket refrigeration systems in Europe causes food losses and fires
Impact: Damage to refrigeration and freezing systems in nine European countries, with food losses and some fires at hundreds of supermarkets in France
In October 2026, cyber-attacks targeting refrigeration and freezing systems at hundreds of supermarkets in France raised temperatures, causing food losses and fires. Similar incidents subsequently occurred in several other European countries, bringing the number of affected countries to nine. In November, French authorities identified Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps, as responsible for the attacks.
Related reports: 508 · last report →Binance hack sees $6.3 billion in cryptoassets stolen
Impact: $6.3 billion in cryptoassets stolen
Around 29 October 2026, $6.3 billion in cryptoassets was stolen from Binance. A subsequent investigation revealed how North Korean attackers deceived an employee through a fake recruitment interview into installing malware and compromised wallet infrastructure. Binance resumed withdrawals and completed full reimbursement of affected customer assets, while the US government pursued freezing and seizure proceedings for some of the stolen assets.
Related reports: 303 · last report →Series of hacks exposes about 100,000 records at 16 Korean financial firms
100kImpact: 16 financial firms breached and about 100,000 records leaked
A series of hacks and data leaks affected South Korea's financial sector, including banks, securities firms and capital finance companies. As of 14 October, 16 financial firms had been affected and about 100,000 records had been leaked. Financial authorities held an emergency meeting across the financial sector to assess the damage, and an emergency review meeting took place on 28 October to prevent secondary harm.
Related reports: 454 · last report →Financial Security Institute cyber-attack exposes data from 48 financial firms
350Impact: An estimated 130 or more files from 48 financial firms leaked, along with approximately 200 administrative forms, more than 300 personal information entries and more than 350 system user information records
The Financial Security Institute detected a data leak from its continuous information security assessment system at around 3 pm on 9 November, blocked access and reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). An estimated 130 or more files from 48 financial firms were leaked, along with approximately 200 administrative forms, more than 300 personal information entries in those forms and more than 350 system user information records. The attacker bypassed SMS verification to create an account impersonating the Financial Supervisory Service and exploited inadequate access authorisation checks in an operational inspection feature. The institute blocked 246 attacking IP addresses, while the FSC launched an on-site inspection and announced a targeted audit.
Related reports: 169 · last report →Bithumb groupware hack exposes data of 1,559 customers and staff
1.6kImpact: Personal data of 1,559 people exposed, including 844 customers and 715 employees and partner company staff
Bithumb announced a breach of its internal mobile system and a personal data leak on 28 October. Files containing information on 6,444 customers and 715 employees and partner company staff were exfiltrated through an intrusion into Daou Office, but data on 5,600 customers was encrypted, bringing the confirmed number of people whose personal data was exposed to 1,559, including 844 customers. Some customers' resident registration numbers, bank account numbers and copies of identification documents were exposed, and Bithumb's chief executive apologised and pledged assistance and compensation for those affected.
Related reports: 148 · last report →Personal data of 168 presidential aircraft passengers, including president and spouse, leaked
168Impact: Personal information of 168 passengers on board Air Force One, including the president and spouse
Personal information, including passport numbers, of 168 passengers on board the presidential aircraft, Air Force One, including the president, the president’s spouse and cabinet members, was posted on VirusTotal and exposed for approximately five months. The Ministry of Foreign Affairs took steps to remove the posted information and reissue passports for all passengers, and completed the reissuance of passports for the president and spouse. Police launched a formal investigation and are examining how the leak occurred, including the possibility that the ministry’s contracted security monitoring provider uploaded an email attachment to an external scanning site.
Related reports: 133 · last report →Mirae Asset Securities breach affects about 3,800 customers and 35,255 personnel
35.3kImpact: Account numbers of about 3,800 customers and personal information of 35,255 employees, former employees and outsourced staff
Mirae Asset Securities suffered attacks on 4 and 5 November, exposing account numbers belonging to about 3,800 customers and personal information belonging to 35,255 employees, former employees and outsourced staff. The attacks targeted its mobile web login service using mobile phone authentication and its groupware, with the leaked personnel information including names, email addresses, mobile phone numbers and encrypted passwords. The Financial Supervisory Service (FSS) began an on-site inspection and confirmed connections between several attacks.
Related reports: 119 · last report →DOUZONE BIZON server breach raises wider concerns over client data exposure
Impact: As of 5 November, 28 companies and institutions had issued notices of possible personal data leaks; the actual scale of any leak remains unconfirmed
Two security breaches were confirmed at DOUZONE BIZON, raising the possibility that personal data belonging to client companies and third parties whose data those clients held may have been leaked. Historical records of companies whose services had ended may also have been affected, and as of 5 November, 28 companies and institutions had issued notices of possible data leaks. DOUZONE BIZON voluntarily reported the incidents to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and disclosed progress on security investments totalling 16 billion won. The government deemed the incidents serious and launched a joint public-private investigation, while whether data was actually leaked and the extent of any leak remain under investigation.
Related reports: 27 · last report →Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorised access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. Alongside names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →MUJI warns of possible leak of 27.26 million customer records and 1.09 million card numbers
27.3mImpact: Possible exposure of up to approximately 27.26 million customer records and approximately 1.09 million card numbers
Unauthorised access to systems at MUJI operator Ryohin Keikaku may have exposed up to approximately 27.26 million app and online shop customer records, including those of former members, and approximately 1.09 million card numbers. The customer information included email addresses, dates of birth and gender, while the card numbers had been collected for a benefits programme that ended in 2021 and were never deleted. The company acknowledged vulnerabilities in parts of its systems and shortcomings in information security and customer data management, reported the incident to the relevant authorities and said it would strengthen internal controls. It also postponed reopening its online shop because of possible unauthorised logins.
Related reports: 107 · last report →Arara email service cyber-attack exposes 81.33 million email addresses
81.3mImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also misused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and suspended its email delivery service entirely.
Related reports: 20 · last report →Daishin Securities hack exposes information on over 38,000 customers
38kImpact: Personal information of over 38,000 customers
A hacking incident at Daishin Securities on 27 October exposed information on over 38,000 customers. The exposed information included addresses and encrypted account numbers, and Daishin Securities said there had been no resulting harm. On 9 November, the company announced support measures for affected customers, including one year of insurance covering up to KRW 10 million in losses from voice phishing and smishing, a waiver of trading fees for Korean shares in December, and a cash payment of KRW 10,000.
Related reports: 81 · last report →Pravang cyber-attack steals about 100 million won and exposes seven users' data
7Impact: Approximately 100 million won in crypto assets stolen and seven users' personal and credit information exposed
A cyber-attack on cryptocurrency exchange Pravang resulted in the theft of approximately 100 million won in crypto assets. The investigation also confirmed the exposure of seven users' personal and credit information, including login passwords, OTP keys, asset balances and personal wallet addresses. Pravang temporarily suspended its services and pledged to fully compensate customers for their losses.
Related reports: 81 · last report →GMO Internet cloud breach leaks customer data and causes trading losses
Impact: Up to 26,739 servers affected; loss compensation claims totalling 2.99 billion yen for 2,943 accounts
GMO Internet's Onamae.com Desktop Cloud suffered a malware attack that affected up to 26,739 servers, resulting in customer data leaks and asset losses from unauthorised trades. The company advised customers to shut down their PCs and offered a bounty to track down the attackers, while acknowledging that it had not adequately responded to earlier warnings about security vulnerabilities. By 12 November, claims for loss compensation totalling 2.99 billion yen had been submitted for 2,943 accounts, while the final loss amount remained undetermined.
Related reports: 70 · last report →Data on over 41,000 Homeland Security employees leaked
41kImpact: Information on more than 41,000 employees
Information on more than 41,000 US Department of Homeland Security employees was stolen and published online. The leaked material included information on Immigration and Customs Enforcement and Customs and Border Protection employees, as well as the identities of undercover agents. The Department of Homeland Security launched an investigation into the leak.
Related reports: 77 · last report →Hackers steal around €100 million from France’s Crédit Mutuel Arkéa
Impact: Around €100 million of the bank’s own funds
French bank Crédit Mutuel Arkéa was hit by a cyber-attack in which around €100 million was stolen from its own accounts. The attackers accessed an external service provider’s platform and transferred funds to other banks. The bank temporarily suspended some transactions and began efforts to recover the money, stating that customer assets were unaffected.
Related reports: 58 · last report →GS E&C apartment community system hacked, exposing residents’ data
Impact: Personal information of some apartment residents; affected complexes and number of people under investigation
GS Engineering & Construction’s apartment community facility booking and management system was hacked, exposing some residents’ personal information. The affected complexes and number of people are under investigation, with addresses, encrypted passwords, administrator IDs and RF card numbers among the information potentially exposed. After GS E&C declined to consent to an investigation by the Korea Internet & Security Agency (KISA), citing its own investigation, the Ministry of Science and ICT decided on 11 November to launch an ex officio investigation into the cause and scale of the incident.
Related reports: 58 · last report →Japan’s Nitori warns cyber-attack may have exposed up to 37.62 million personal data records
37.6mImpact: Possible leak of up to 37.62 million personal data records relating to individual and corporate members and purchasers
Nitori confirmed unauthorised access to its systems on 6 November and disclosed on 9 November that up to 37.62 million personal data records may have been leaked. The potentially exposed data included the names, addresses and telephone numbers of individual and corporate members and product purchasers. Login passwords and credit card information were not included.
Related reports: 54 · last report →Vanderbilt University restricts system access after ransomware attack
1mImpact: Access to some systems restricted; unconfirmed claims of theft of more than 1 million Social Security numbers and research materials
Vanderbilt University in the United States confirmed an ongoing cyber incident on 9 November and instructed users to shut down university devices and disconnect from Wi-Fi. BYOD claimed to have stolen more than 1 million Social Security numbers, research materials and other data, but the university did not confirm the claim. The university restored some networks, email and registration systems while restricting access to the remaining systems, and a former student brought a class action lawsuit after the incident.
Related reports: 53 · last report →Amicus Lex hack exposes personal data of 20,028 users
20kImpact: Personal information of 20,028 LawForm users
A hack at Amicus Lex at 5:38 am on 11 November exposed the names, phone numbers and email addresses of 20,028 LawForm users. An SQL injection attack targeting the administrator page and a vulnerable API were identified, and the vulnerable API code was deleted. The Ministry of SMEs and Startups disclosed the incident approximately 60 hours after becoming aware of it.
Read on 헤럴드경제 ↗KB Capital cyber-attack exposes data of 1,811 customers, staff and others
1.8kImpact: Personal information of 1,811 people, including customers, employees, executives and partner company personnel
KB Capital's employee system was hacked, exposing the personal information of 1,811 people, including customers, employees, executives and partner company personnel. The exposed information included names, addresses and vehicle registration numbers, and 20 customers were reportedly affected. KB Capital said it would fully compensate any resulting losses.
Related reports: 44 →Around 46,000 TSMC employee records leaked and offered on black market
46kImpact: Around 46,000 records containing employees’ personal information
Around 46,000 records containing TSMC employees’ personal information were leaked, and a hacker attempted to sell them on the black market for 3 bitcoins. TSMC confirmed the leak and said its investigation found that the information matched data held by a cloud service provider. No evidence of a breach of TSMC’s systems was found, and neither production nor customer information was involved.
Related reports: 43 · last report →Hanyang Securities groupware hack exposes 31 personal information records
31Impact: 31 personal information records involving customers, employees and others, including three records exposing resident registration numbers
An external groupware platform used by Hanyang Securities was hacked, exposing a total of 31 records: 15 containing customer information, two containing employee-related information and 14 containing general personal information. The exposed information included names, resident registration numbers, driving licence numbers and bank account numbers, with resident registration numbers exposed in three records. Hanyang Securities said an insufficient access control vulnerability in Daou Office was the direct cause and that the breach occurred before a patch was released. It is now considering building its own business system.
Related reports: 43 · last report →Yonsei University portal hack leaks personal data of about 15,000 people
15kImpact: Personal data of about 15,000 people, including current students, alumni and staff
Yonsei University's portal service was hacked, leaking the personal data of about 15,000 people, including current students, alumni and staff. The leaked data included student ID numbers, contact details, email addresses and login IP addresses. The university requested an investigation, and police opened a preliminary inquiry.
Related reports: 39 · last report →Mirae Asset Life Insurance cyber-attack exposes customer, retirement pension and employee data
Impact: Customers' personal information, retirement pension transaction data and employee information
A leak of customers' personal information following a cyber-attack at Mirae Asset Life Insurance was confirmed on 26 October. In addition to names, resident registration numbers and bank account numbers, retirement pension transaction data and employee information were also confirmed to have been exposed. The company undertook emergency response and recovery work, while the closure of its website disrupted access to some online services. The Financial Supervisory Service extended its on-site inspection as the scope of the damage changed.
Related reports: 38 · last report →Ukraine air raid alert app hacked to send false threat notifications
Impact: False warnings of nuclear and chemical threats and other dangers displayed in the air raid alert app
Ukraine's air raid alert app was hacked and displayed false warnings of nuclear and chemical threats, urban combat and missile deployments. Authorities said there was no actual radiation threat and announced around an hour later that the false notifications had been removed and normal system operation restored. Air raid sirens and separate warning channels continued to function normally.
Related reports: 38 · last report →Florida student aid website breach may have exposed 4.9 million people's data
4.9mImpact: Possible exposure of personal information, including Social Security numbers, belonging to approximately 4.9 million people
A cyber-attack on the Florida Department of Education's student financial aid website may have exposed personal information, including Social Security numbers, belonging to approximately 4.9 million people. The department is investigating the data breach, and the website has been taken offline.
Related reports: 40 · last report →GMO forex service hack causes unauthorised trades and customer losses
Impact: Reported losses across 2,943 accounts totalling ¥2.99 billion; related costs, including compensation, of ¥3.05 billion
Unauthorised access to GMO's foreign exchange trading service led to a data leak and unauthorised trades. As at 13 November, users had reported losses totalling ¥2.99 billion across 2,943 accounts, while costs including compensation for customer losses and goodwill payments came to ¥3.05 billion. GMO carried out a group-wide review. It also emerged that vulnerabilities had been highlighted and a system redesign proposed two years earlier, but no action had been taken.
Related reports: 36 · last report →HYBE cyber-attack exposes employee and partner personal data
Impact: Personal information belonging to some current and former personnel and partner company representatives, as well as internal documents
Unauthorised access to HYBE’s internal systems occurred on two occasions, 12–13 September and 3–5 October, exposing internal documents and personal information belonging to some current and former personnel and partner company representatives. Evidence of intrusion through an external document preview solution linked to the electronic approval system and through the expense processing system was confirmed, and the exposed information included resident registration numbers, passport numbers, bank account numbers, card numbers and medical information. HYBE apologised, and police launched a preliminary inquiry on 3 November.
Related reports: 36 · last report →Fireworks AI breached again, exposing customer data and model weights
Impact: Some customers’ account information, billing information, secrets, datasets and unfinished model weights
Fireworks AI experienced further unauthorised access to its development systems on 24 October through a breach at an external cloud provider, 18 days after confirming the initial breach. The investigation confirmed that customer account and billing information, as well as some customers’ secrets, datasets and unfinished model weights, were affected. The company revoked credentials, isolated systems and notified all affected customers.
Related reports: 15 · last report →