Week 7, 2026 security incident report

Mega MGC Coffee denies external leak of customer data, fixes management lapses

Mega MGC Coffee said there had been no external leak of customer information. It said it had immediately finished correcting shortcomings in how the information was managed.

DDoS attacks on Shinhan Bank and Hana Financial prompt alert for financial sector

A Muslim hacking group attacked Shinhan Bank and Hana Financial. A DDoS alert was issued for the financial sector, whilst the date of the attacks, whether services were disrupted and the extent of the damage have not been confirmed.

Signs of hack at Samkwang raise fears of 452GB internal data leak

Impact: Concerns over leak of 452GB of internal data

Signs of a hack were raised at electronics and components manufacturer Samkwang. There are concerns that 452GB of internal data may have leaked, but whether data was actually leaked, when the incident occurred and what response was taken have not been confirmed.

Dutch telecoms firm Odido breach exposes data of 6.2 million customers

6.2mImpact: Personal data of about 6.2 million customers

Dutch telecoms operator Odido warned on 12 February that a cyber-attack had exposed the personal data of about 6.2 million customers. The leaked data included names, addresses, contact details, IBANs, dates of birth and ID-related information. After the company refused to pay, the attackers began publishing the stolen data, and police tracked a suspected local accomplice during the investigation.

Figure phishing breach exposes data of about 1 million customers

1mImpact: Customer data of about 1 million people

Blockchain-based lender Figure confirmed a breach via phishing and a leak of customer data. ShinyHunters claimed the attack and published data including names, addresses, dates of birth and phone numbers. Figure said a limited number of files were affected, but the scale of the breach was later reported at about 1 million people.

Photo ID app leak believed to affect more than 150,000 users

150kImpact: Estimated data leak affecting more than 150,000 users

User data was leaked from photo ID apps, with more than 150,000 users estimated to be affected. The specific apps involved, the timing of the leak and response measures have not been confirmed.

SmarterTools hit by ransomware via flaw in its own mail product

Impact: Twelve office Windows servers and a secondary data centre for testing, QA and hosting affected

The Warlock ransomware group broke into the internal network of developer SmarterTools through an unpatched SmarterMail virtual machine. Twelve Windows servers on the office network and a secondary data centre used for testing, quality assurance and hosting were affected.

European Commission cyber breach exposes staff information

Impact: Staff information exposed

A cyber breach at the European Commission exposed staff information. The Commission disclosed the breach and is investigating the cyber-attack.