Trending
Incidents with the most news coverage recently, including older incidents that are still drawing follow-up reports.
Hacking of supermarket refrigeration systems in Europe causes food losses and fires
Impact: Damage to refrigeration and freezing systems in nine European countries, with food losses and some fires at hundreds of supermarkets in France
In October 2026, cyber-attacks targeting refrigeration and freezing systems at hundreds of supermarkets in France raised temperatures, causing food losses and fires. Similar incidents subsequently occurred in several other European countries, bringing the number of affected countries to nine. In November, French authorities identified Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps, as responsible for the attacks.
Related reports: 508 · last report →Financial Security Institute cyber-attack exposes data from 48 financial firms
350Impact: An estimated 130 or more files from 48 financial firms leaked, along with approximately 200 administrative forms, more than 300 personal information entries and more than 350 system user information records
The Financial Security Institute detected a data leak from its continuous information security assessment system at around 3 pm on 9 November, blocked access and reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). An estimated 130 or more files from 48 financial firms were leaked, along with approximately 200 administrative forms, more than 300 personal information entries in those forms and more than 350 system user information records. The attacker bypassed SMS verification to create an account impersonating the Financial Supervisory Service and exploited inadequate access authorisation checks in an operational inspection feature. The institute blocked 246 attacking IP addresses, while the FSC launched an on-site inspection and announced a targeted audit.
Related reports: 169 · last report →Arara email service cyber-attack exposes 81.33 million email addresses
81.3mImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also misused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and suspended its email delivery service entirely.
Related reports: 20 · last report →MUJI warns of possible leak of 27.26 million customer records and 1.09 million card numbers
27.3mImpact: Possible exposure of up to approximately 27.26 million customer records and approximately 1.09 million card numbers
Unauthorised access to systems at MUJI operator Ryohin Keikaku may have exposed up to approximately 27.26 million app and online shop customer records, including those of former members, and approximately 1.09 million card numbers. The customer information included email addresses, dates of birth and gender, while the card numbers had been collected for a benefits programme that ended in 2021 and were never deleted. The company acknowledged vulnerabilities in parts of its systems and shortcomings in information security and customer data management, reported the incident to the relevant authorities and said it would strengthen internal controls. It also postponed reopening its online shop because of possible unauthorised logins.
Related reports: 107 · last report →Vanderbilt University restricts system access after ransomware attack
1mImpact: Access to some systems restricted; unconfirmed claims of theft of more than 1 million Social Security numbers and research materials
Vanderbilt University in the United States confirmed an ongoing cyber incident on 9 November and instructed users to shut down university devices and disconnect from Wi-Fi. BYOD claimed to have stolen more than 1 million Social Security numbers, research materials and other data, but the university did not confirm the claim. The university restored some networks, email and registration systems while restricting access to the remaining systems, and a former student brought a class action lawsuit after the incident.
Related reports: 53 · last report →Japan’s Nitori warns cyber-attack may have exposed up to 37.62 million personal data records
37.6mImpact: Possible leak of up to 37.62 million personal data records relating to individual and corporate members and purchasers
Nitori confirmed unauthorised access to its systems on 6 November and disclosed on 9 November that up to 37.62 million personal data records may have been leaked. The potentially exposed data included the names, addresses and telephone numbers of individual and corporate members and product purchasers. Login passwords and credit card information were not included.
Related reports: 54 · last report →Amicus Lex hack exposes personal data of 20,028 users
20kImpact: Personal information of 20,028 LawForm users
A hack at Amicus Lex at 5:38 am on 11 November exposed the names, phone numbers and email addresses of 20,028 LawForm users. An SQL injection attack targeting the administrator page and a vulnerable API were identified, and the vulnerable API code was deleted. The Ministry of SMEs and Startups disclosed the incident approximately 60 hours after becoming aware of it.
Read on 헤럴드경제 ↗KB Capital cyber-attack exposes data of 1,811 customers, staff and others
1.8kImpact: Personal information of 1,811 people, including customers, employees, executives and partner company personnel
KB Capital's employee system was hacked, exposing the personal information of 1,811 people, including customers, employees, executives and partner company personnel. The exposed information included names, addresses and vehicle registration numbers, and 20 customers were reportedly affected. KB Capital said it would fully compensate any resulting losses.
Related reports: 44 →Around 46,000 TSMC employee records leaked and offered on black market
46kImpact: Around 46,000 records containing employees’ personal information
Around 46,000 records containing TSMC employees’ personal information were leaked, and a hacker attempted to sell them on the black market for 3 bitcoins. TSMC confirmed the leak and said its investigation found that the information matched data held by a cloud service provider. No evidence of a breach of TSMC’s systems was found, and neither production nor customer information was involved.
Related reports: 43 · last report →Fireworks AI breached again, exposing customer data and model weights
Impact: Some customers’ account information, billing information, secrets, datasets and unfinished model weights
Fireworks AI experienced further unauthorised access to its development systems on 24 October through a breach at an external cloud provider, 18 days after confirming the initial breach. The investigation confirmed that customer account and billing information, as well as some customers’ secrets, datasets and unfinished model weights, were affected. The company revoked credentials, isolated systems and notified all affected customers.
Related reports: 15 · last report →Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorised access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. Alongside names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →Taiwan’s ezTravel hacked, exposing data of over 690,000 members
690kImpact: Personal data and order-related information of more than 690,000 members
Taiwanese travel company ezTravel suffered an abnormal network attack that exposed the personal data and order-related information of more than 690,000 members. The exposed data included names, email addresses and order contact details, but did not include credit card, identity document or passport numbers. The company apologised, notified consumers of the breach and advised them to watch out for scams and suspicious links.
Related reports: 34 · last report →Anthropic breach exposes data from 112 Claude business accounts in South Korea
Impact: Information from 112 Claude business accounts in South Korea exposed
Unauthorised access to Anthropic's internal systems through a vulnerability in third-party business software exposed information from 112 Claude business accounts in South Korea. The exposed data included names, email addresses, account and organisation identifiers, and usage and spending metrics, while the company said conversations and payment information were not accessed. The Personal Information Protection Commission (PIPC) launched a formal investigation on 10 November, and it was subsequently confirmed that Anthropic reported the intrusion to South Korean authorities 21 days after detecting it and notified customer companies after 28 days.
Related reports: 33 · last report →Fireworks AI breach exposes client information
In October 2026, Fireworks AI, an AI service provider for Uber, was breached, leading to a leak of client information. The attacker stole the service provider’s internal credentials and used them to access Uber’s account with the provider. Uber is notifying US drivers that their personal information and driving licence information were exposed.
Related reports: 4 · last report →GMO forex service hack causes unauthorised trades and customer losses
Impact: Reported losses across 2,943 accounts totalling ¥2.99 billion; related costs, including compensation, of ¥3.05 billion
Unauthorised access to GMO's foreign exchange trading service led to a data leak and unauthorised trades. As at 13 November, users had reported losses totalling ¥2.99 billion across 2,943 accounts, while costs including compensation for customer losses and goodwill payments came to ¥3.05 billion. GMO carried out a group-wide review. It also emerged that vulnerabilities had been highlighted and a system redesign proposed two years earlier, but no action had been taken.
Related reports: 36 · last report →Taiwan consular bureau cyber-attack exposes passport photos and powers of attorney
774Impact: 72,702 facial photographs for passport applications, 26,072 scanned power-of-attorney files, and photographs and application-related information from 774 ABTC applications
Some websites of Taiwan’s Bureau of Consular Affairs, part of the Ministry of Foreign Affairs, were hacked, leading to the theft of 72,702 facial photographs submitted for passport applications and 26,072 scanned power-of-attorney files from the representative office in New York. An investigation also confirmed the exposure of photographs and application-related information from 774 ABTC applications. The bureau isolated and restored the affected servers and found no evidence that passport applicants’ names, dates of birth, identity card numbers or passport numbers had also been stolen. It said the validity of passports already issued was unaffected.
Related reports: 30 · last report →Maersk data breach linked to legacy IT systems inherited through acquisition
Impact: Data breach confirmed; attackers claim about 100 GB stolen
Maersk confirmed that attackers gained unauthorised access to legacy IT systems inherited from a company it had previously acquired and extracted data. WhiteArmor claimed to have stolen about 100 GB and demanded $5 million. While investigating the incident, Maersk denied claims that plaintext passwords had been stolen and said the codes obtained by the attackers were expired one-time codes.
Related reports: 28 · last report →DOUZONE BIZON server breach raises wider concerns over client data exposure
Impact: As of 5 November, 28 companies and institutions had issued notices of possible personal data leaks; the actual scale of any leak remains unconfirmed
Two security breaches were confirmed at DOUZONE BIZON, raising the possibility that personal data belonging to client companies and third parties whose data those clients held may have been leaked. Historical records of companies whose services had ended may also have been affected, and as of 5 November, 28 companies and institutions had issued notices of possible data leaks. DOUZONE BIZON voluntarily reported the incidents to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and disclosed progress on security investments totalling 16 billion won. The government deemed the incidents serious and launched a joint public-private investigation, while whether data was actually leaked and the extent of any leak remain under investigation.
Related reports: 27 · last report →Mirae Asset Securities breach affects about 3,800 customers and 35,255 personnel
35.3kImpact: Account numbers of about 3,800 customers and personal information of 35,255 employees, former employees and outsourced staff
Mirae Asset Securities suffered attacks on 4 and 5 November, exposing account numbers belonging to about 3,800 customers and personal information belonging to 35,255 employees, former employees and outsourced staff. The attacks targeted its mobile web login service using mobile phone authentication and its groupware, with the leaked personnel information including names, email addresses, mobile phone numbers and encrypted passwords. The Financial Supervisory Service (FSS) began an on-site inspection and confirmed connections between several attacks.
Related reports: 119 · last report →Kakao Work hack exposes personal data and work emails of around 5,000 users
5kImpact: Personal data, work emails, attachments and other information belonging to around 5,000 users at 44 client companies
On 9 November, an external attacker gained unauthorised access to Kakao Work systems, exposing the personal data of around 5,000 users at 44 client companies. The exposed data included names, contact details, departments, email subjects and bodies, original attachments, and encrypted chat messages. The company and the Personal Information Protection Commission (PIPC) are investigating the precise scope and circumstances of the incident, and users have been advised to change their passwords and remain alert to impersonation.
Related reports: 24 →SMBC Nikko Securities shareholding association system breach affects up to 56,487 people
56.5kImpact: Personal information of up to 56,487 people exposed or potentially exposed
Unauthorised access to SMBC Nikko Securities’ employee shareholding association management system was found to have exposed or potentially exposed the personal information of up to 56,487 people. The affected information includes names, addresses, shareholding balances and transfer account details, and may also include information on investment holdings. The company blocked access to the system on 9 November.
Related reports: 24 →Hack at four Samyang Group companies exposes 149,767 people's personal information
149.8kImpact: Approximately 850,000 files totalling 1.3 TB containing 149,767 people's personal information were leaked, including the resident registration numbers of 82,750 people
In July 2022, approximately 850,000 files totalling 1.3 TB and containing the personal information of 149,767 employees, shareholders and other associated individuals were leaked from four Samyang Group companies. The attacker exploited a mail server vulnerability to gain administrator privileges, stole file server credentials and exfiltrated data, which included the resident registration numbers of 82,750 people. The Personal Information Protection Commission (PIPC) found that a server no longer in use had been left connected to an external network and that resident registration numbers had been inadequately encrypted, among other shortcomings, and approved sanctions including an administrative fine of KRW 552 million; Samyang Group said it had strengthened its security systems after the incident.
Related reports: 23 · last report →Daishin Securities hack exposes information on over 38,000 customers
38kImpact: Personal information of over 38,000 customers
A hacking incident at Daishin Securities on 27 October exposed information on over 38,000 customers. The exposed information included addresses and encrypted account numbers, and Daishin Securities said there had been no resulting harm. On 9 November, the company announced support measures for affected customers, including one year of insurance covering up to KRW 10 million in losses from voice phishing and smishing, a waiver of trading fees for Korean shares in December, and a cash payment of KRW 10,000.
Related reports: 81 · last report →Malware on Quantum Systems servers prompts German military to halt drone operations
Impact: Temporary suspension of the German armed forces’ operations of the manufacturer’s drones
German drone manufacturer Quantum Systems detected a cyber-attack on its internal servers in late October 2026. Update files containing malware had been planted on the servers, reportedly in an attempt to affect drone operations through updates. The company began a joint investigation with the authorities, and the German armed forces temporarily suspended operations of the manufacturer’s drones as a precaution.
Related reports: 12 · last report →Around 2.2 million Sega newsletter email addresses leaked
2.2mImpact: 2,196,044 newsletter subscriber email addresses
Unauthorised access to the systems of Arara, Sega’s newsletter distribution provider, resulted in the leak of 2,196,044 subscriber email addresses. Sega investigated the incident and advised users to be alert to phishing emails. Sega accounts and users’ financial information were not affected.
Related reports: 21 · last report →Japan Chamber of Commerce and Industry exam system breach puts 980,000 people’s data at risk
2mImpact: Potential leak of personal information relating to up to approximately 980,000 people and around 1.97 million examination records
Unauthorised access and the installation of malicious files were confirmed on an external online examination management server used by the Japan Chamber of Commerce and Industry. Information relating to up to approximately 980,000 people and around 1.97 million examination records may have been leaked, including names, dates of birth, addresses, contact details, pass/fail results and scores. The chamber announced the incident on 10 November, but no actual data leak or misuse has been confirmed.
Related reports: 21 · last report →Personal data leaked in cyber-attack on Kang Chiao International School’s Linkou campus
Impact: Some personal data leaked
The academic administration system at Kang Chiao International School’s Linkou campus in Taiwan was breached, resulting in the leak of some personal data. The school, staff and parents received emails threatening to publish personal information and harm students, and some messages included private details such as parents’ workplaces and job titles. The school disconnected its network, began recovery work with cyber security experts and reported the incident to the police.
Related reports: 21 →SPH Media breach of five systems exposes about 9% of customer database
Impact: About 9% of the customer database and employee email addresses exposed
Singapore's SPH Media detected cyber-attacks on five systems between 4 and 8 November 2026, with about 9% of its customer database exposed. The exposed data consisted mainly of email addresses, along with some names, postal addresses and telephone numbers, and also included employee email addresses, but financial information and customer account credentials were not affected. A combination of software bugs and system configuration issues contributed to the breach, and the company is investigating whether the same attacker used AI. The company investigated the breach with a specialist cyber security firm and strengthened its cyber defences.
Related reports: 21 · last report →Binance hack sees $6.3 billion in cryptoassets stolen
Impact: $6.3 billion in cryptoassets stolen
Around 29 October 2026, $6.3 billion in cryptoassets was stolen from Binance. A subsequent investigation revealed how North Korean attackers deceived an employee through a fake recruitment interview into installing malware and compromised wallet infrastructure. Binance resumed withdrawals and completed full reimbursement of affected customer assets, while the US government pursued freezing and seizure proceedings for some of the stolen assets.
Related reports: 303 · last report →GS E&C apartment community system hacked, exposing residents’ data
Impact: Personal information of some apartment residents; affected complexes and number of people under investigation
GS Engineering & Construction’s apartment community facility booking and management system was hacked, exposing some residents’ personal information. The affected complexes and number of people are under investigation, with addresses, encrypted passwords, administrator IDs and RF card numbers among the information potentially exposed. After GS E&C declined to consent to an investigation by the Korea Internet & Security Agency (KISA), citing its own investigation, the Ministry of Science and ICT decided on 11 November to launch an ex officio investigation into the cause and scale of the incident.
Related reports: 58 · last report →