Trending
Incidents with the most news coverage recently, including older incidents that are still drawing follow-up reports.
Hacking of supermarket refrigeration systems in Europe causes food losses and fires
Impact: Damage to refrigeration and freezing systems in nine European countries, with food losses and some fires at hundreds of supermarkets in France
In October 2026, cyberattacks targeting refrigeration and freezing systems at hundreds of supermarkets in France raised temperatures, causing food losses and fires. Similar incidents subsequently occurred in several other European countries, bringing the number of affected countries to nine. In November, French authorities identified Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps, as responsible for the attacks.
Related reports: 508 · last report →Binance hack steals $6.3 billion in crypto assets
Impact: $6.3 billion in crypto assets stolen
Around October 29, 2026, $6.3 billion in crypto assets was stolen from Binance. A subsequent investigation revealed how North Korean attackers tricked an employee through a fake job interview into installing malware and compromised wallet infrastructure. Binance resumed withdrawals and completed full reimbursement of affected customer assets, while the US government pursued freezing and seizure proceedings for some of the stolen assets.
Related reports: 303 · last report →Series of hacks exposes about 100,000 records at 16 Korean financial firms
100KImpact: 16 financial firms breached and about 100,000 records leaked
A series of hacks and data leaks hit South Korea's financial sector, including banks, securities firms and capital finance companies. As of October 14, 16 financial firms had been affected and about 100,000 records had been leaked. Financial authorities held an emergency meeting across the financial sector to assess the damage, and an emergency review meeting was held on October 28 to prevent secondary harm.
Related reports: 454 · last report →Financial Security Institute hack exposes data from 48 financial firms
350Impact: An estimated 130 or more files from 48 financial firms leaked, along with approximately 200 administrative forms, more than 300 personal information entries, and more than 350 system user information records
The Financial Security Institute detected a data leak from its continuous information security assessment system at around 3 p.m. on November 9, blocked access, and reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). An estimated 130 or more files from 48 financial firms were leaked, along with approximately 200 administrative forms, more than 300 personal information entries in those forms, and more than 350 system user information records. The attacker bypassed SMS verification to create an account impersonating the Financial Supervisory Service and exploited inadequate access authorization checks in an operational inspection feature. The institute blocked 246 attacking IP addresses, while the FSC launched an on-site inspection and announced a targeted audit.
Related reports: 169 · last report →Bithumb groupware hack exposes data of 1,559 customers and staff
1.6KImpact: Personal data of 1,559 people exposed, including 844 customers and 715 employees and partner company staff
Bithumb announced a breach of its internal mobile system and a personal data leak on October 28. Files containing information on 6,444 customers and 715 employees and partner company staff were exfiltrated through an intrusion into Daou Office, but data on 5,600 customers was encrypted, bringing the confirmed number of people whose personal data was exposed to 1,559, including 844 customers. Some customers' resident registration numbers, bank account numbers and copies of identification documents were exposed, and Bithumb's CEO apologized and pledged assistance and compensation for those affected.
Related reports: 148 · last report →Personal data of 168 presidential aircraft passengers, including president and spouse, leaked
168Impact: Personal information of 168 passengers aboard Air Force One, including the president and spouse
Personal information, including passport numbers, of 168 passengers aboard the presidential aircraft, Air Force One, including the president, the president’s spouse, and cabinet members, was posted on VirusTotal and exposed for approximately five months. The Ministry of Foreign Affairs took steps to remove the posted information and reissue passports for all passengers, and completed the reissuance of passports for the president and spouse. Police launched a formal investigation and are examining how the leak occurred, including the possibility that the ministry’s contracted security monitoring provider uploaded an email attachment to an external scanning site.
Related reports: 133 · last report →Mirae Asset Securities breach affects about 3,800 customers and 35,255 personnel
35.3KImpact: Account numbers of about 3,800 customers and personal information of 35,255 employees, former employees, and outsourced staff
Mirae Asset Securities was attacked on November 4 and 5, resulting in the leak of account numbers belonging to about 3,800 customers and personal information belonging to 35,255 employees, former employees, and outsourced staff. The attacks targeted its mobile web login service using mobile phone authentication and its groupware, and the leaked personnel information included names, email addresses, mobile phone numbers, and encrypted passwords. The Financial Supervisory Service (FSS) launched an on-site inspection and confirmed links among multiple attacks.
Related reports: 119 · last report →DOUZONE BIZON server breach raises wider concerns over client data exposure
Impact: As of November 5, 28 companies and institutions had issued notices of possible personal data leaks; the actual scale of any leak remains unconfirmed
Two security breaches were confirmed at DOUZONE BIZON, raising the possibility that personal data belonging to client companies and third parties whose data those clients held may have been leaked. Historical records of companies whose services had ended may also have been affected, and as of November 5, 28 companies and institutions had issued notices of possible data leaks. DOUZONE BIZON voluntarily reported the incidents to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and disclosed progress on security investments totaling 16 billion won. The government deemed the incidents serious and launched a joint public-private investigation, while whether data was actually leaked and the scope of any leak remain under investigation.
Related reports: 27 · last report →Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorized access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. In addition to names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →MUJI warns of possible leak of 27.26 million customer records and 1.09 million card numbers
27.3MImpact: Possible exposure of up to approximately 27.26 million customer records and approximately 1.09 million card numbers
Unauthorized access to systems at MUJI operator Ryohin Keikaku may have exposed up to approximately 27.26 million app and online store customer records, including those of former members, and approximately 1.09 million card numbers. The customer information included email addresses, dates of birth, and gender, while the card numbers had been collected for a benefits program that ended in 2021 and were never deleted. The company acknowledged vulnerabilities in parts of its systems and shortcomings in information security and customer data management, reported the incident to the relevant authorities, and said it would strengthen internal controls. It also postponed reopening its online store because of possible unauthorized logins.
Related reports: 107 · last report →Arara email service hack exposes 81.33 million email addresses
81.3MImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also abused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and completely suspended its email delivery service.
Related reports: 20 · last report →Daishin Securities hack exposes information on over 38,000 customers
38KImpact: Personal information of over 38,000 customers
A hacking incident at Daishin Securities on October 27 exposed information on over 38,000 customers. The exposed information included addresses and encrypted account numbers, and Daishin Securities said there had been no resulting harm. On November 9, the company announced support measures for affected customers, including one year of insurance covering up to KRW 10 million in losses from voice phishing and smishing, a waiver of trading fees for Korean stocks in December, and a cash payment of KRW 10,000.
Related reports: 81 · last report →Pravang hack steals about 100 million won and exposes seven users' data
7Impact: Approximately 100 million won in crypto assets stolen and seven users' personal and credit information exposed
A hack at cryptocurrency exchange Pravang resulted in the theft of approximately 100 million won in crypto assets. The investigation also confirmed the exposure of seven users' personal and credit information, including login passwords, OTP keys, asset balances, and personal wallet addresses. Pravang temporarily suspended its services and pledged to fully compensate customers for their losses.
Related reports: 81 · last report →GMO Internet cloud breach leaks customer data and causes trading losses
Impact: Up to 26,739 servers affected; loss compensation claims totaling 2.99 billion yen for 2,943 accounts
GMO Internet's Onamae.com Desktop Cloud suffered a malware attack that affected up to 26,739 servers, resulting in customer data leaks and asset losses from unauthorized trades. The company advised customers to shut down their PCs and offered a bounty to track down the attackers, while acknowledging that it had not adequately responded to earlier warnings about security vulnerabilities. By November 12, claims for loss compensation totaling 2.99 billion yen had been submitted for 2,943 accounts, while the final loss amount remained undetermined.
Related reports: 70 · last report →Data on over 41,000 Homeland Security employees leaked
41KImpact: Information on more than 41,000 employees
Information on more than 41,000 U.S. Department of Homeland Security employees was stolen and published online. The leaked material included information on Immigration and Customs Enforcement and Customs and Border Protection employees, as well as the identities of undercover agents. The Department of Homeland Security launched an investigation into the leak.
Related reports: 77 · last report →Hackers steal about €100 million from France’s Crédit Mutuel Arkéa
Impact: About €100 million of the bank’s own funds
French bank Crédit Mutuel Arkéa suffered a cyberattack in which about €100 million was stolen from its own accounts. The attackers gained access through an external service provider’s platform and transferred funds to other banks. The bank temporarily suspended some transactions and began efforts to recover the funds, saying customer assets were unaffected.
Related reports: 58 · last report →GS E&C apartment community system hacked, exposing residents’ data
Impact: Personal information of some apartment residents; affected complexes and number of people under investigation
GS Engineering & Construction’s apartment community facility reservation and management system was hacked, exposing some residents’ personal information. The affected complexes and number of people are under investigation, with addresses, encrypted passwords, administrator IDs and RF card numbers among the information potentially exposed. After GS E&C declined to consent to an investigation by the Korea Internet & Security Agency (KISA), citing its own investigation, the Ministry of Science and ICT decided on November 11 to launch an ex officio investigation into the cause and scale of the incident.
Related reports: 58 · last report →Japan’s Nitori warns hack may have exposed up to 37.62 million personal data records
37.6MImpact: Possible leak of up to 37.62 million personal data records concerning individual and corporate members and purchasers
Nitori confirmed unauthorized access to its systems on November 6 and disclosed on November 9 that up to 37.62 million personal data records may have been leaked. The potentially exposed data included the names, addresses, and phone numbers of individual and corporate members and product purchasers. Login passwords and credit card information were not included.
Related reports: 54 · last report →Vanderbilt University restricts system access after ransomware attack
1MImpact: Access to some systems restricted; unconfirmed claims of theft of more than 1 million Social Security numbers and research materials
Vanderbilt University in the United States confirmed an ongoing cyber incident on November 9 and instructed users to shut down university devices and disconnect from Wi-Fi. BYOD claimed to have stolen more than 1 million Social Security numbers, research materials, and other data, but the university did not confirm the claim. The university restored some networks, email, and registration systems while restricting access to the remaining systems, and a former student filed a class action lawsuit after the incident.
Related reports: 53 · last report →Amicus Lex hack exposes personal data of 20,028 users
20KImpact: Personal information of 20,028 LawForm users
A hack at Amicus Lex at 5:38 a.m. on November 11 exposed the names, phone numbers, and email addresses of 20,028 LawForm users. A SQL injection attack targeting the administrator page and a vulnerable API were identified, and the vulnerable API code was deleted. The Ministry of SMEs and Startups disclosed the incident approximately 60 hours after becoming aware of it.
Read on 헤럴드경제 ↗KB Capital hack exposes data of 1,811 customers, employees and others
1.8KImpact: Personal information of 1,811 people, including customers, employees, executives, and partner company personnel
KB Capital's employee system was hacked, exposing the personal information of 1,811 people, including customers, employees, executives, and partner company personnel. The exposed information included names, addresses, and vehicle registration numbers, and 20 customers were reportedly affected. KB Capital said it would fully compensate any resulting losses.
Related reports: 44 →About 46,000 TSMC employee records leaked and offered on black market
46KImpact: About 46,000 records containing employees’ personal information
About 46,000 records containing TSMC employees’ personal information were leaked, and a hacker attempted to sell them on the black market for 3 bitcoins. TSMC confirmed the leak and said its investigation found that the information matched data stored with a cloud service provider. No evidence of a breach of TSMC’s systems was found, and neither production nor customer information was involved.
Related reports: 43 · last report →Hanyang Securities groupware hack exposes 31 personal information records
31Impact: 31 personal information records involving customers, employees, and others, including three records exposing resident registration numbers
An external groupware platform used by Hanyang Securities was hacked, exposing 31 records in total: 15 containing customer information, two containing employee-related information, and 14 containing general personal information. The exposed information included names, resident registration numbers, driver's license numbers, and bank account numbers, with resident registration numbers exposed in three records. Hanyang Securities said an insufficient access control vulnerability in Daou Office was the direct cause and that the breach occurred before a patch was released. It is now considering building its own business system.
Related reports: 43 · last report →Yonsei University portal hack leaks personal data of about 15,000 people
15KImpact: Personal data of about 15,000 people, including current students, alumni and staff
Yonsei University's portal service was hacked, leaking the personal data of about 15,000 people, including current students, alumni and staff. The leaked data included student ID numbers, contact details, email addresses and login IP addresses. The university requested an investigation, and police opened a preliminary inquiry.
Related reports: 39 · last report →Mirae Asset Life Insurance hack exposes customer, retirement pension, and employee data
Impact: Customers' personal information, retirement pension transaction data, and employee information
A leak of customers' personal information following a hack at Mirae Asset Life Insurance was confirmed on October 26. In addition to names, resident registration numbers, and bank account numbers, retirement pension transaction data and employee information were also confirmed to have been exposed. The company carried out emergency response and recovery work, while the shutdown of its website disrupted access to some online services. The Financial Supervisory Service extended its on-site inspection as the scope of the damage changed.
Related reports: 38 · last report →Hacked Ukrainian air raid alert app sends false threat notifications
Impact: False alerts about nuclear and chemical threats and other dangers displayed in the air raid alert app
Ukraine's air raid alert app was hacked and displayed false alerts about nuclear and chemical threats, urban combat and missile deployments. Authorities explained that there was no actual radiation threat and announced about an hour later that the false notifications had been removed and the system restored to normal. Air raid sirens and separate alert channels continued to operate normally.
Related reports: 38 · last report →Florida student aid website breach may have exposed 4.9 million people's data
4.9MImpact: Possible exposure of personal information, including Social Security numbers, belonging to approximately 4.9 million people
A hack of the Florida Department of Education's student financial aid website may have exposed personal information, including Social Security numbers, belonging to approximately 4.9 million people. The department is investigating the data breach, and the website has been taken offline.
Related reports: 40 · last report →GMO forex service hack leads to unauthorized trades and customer losses
Impact: Reported losses across 2,943 accounts totaling ¥2.99 billion; related costs, including compensation, of ¥3.05 billion
Unauthorized access to GMO's foreign exchange trading service resulted in a data leak and unauthorized trades. As of November 13, users had reported losses totaling ¥2.99 billion across 2,943 accounts, while costs including compensation for customer losses and goodwill payments totaled ¥3.05 billion. GMO conducted a group-wide review. It also emerged that vulnerabilities had been flagged and a system redesign proposed two years earlier, but no action had been taken.
Related reports: 36 · last report →HYBE hack exposes employee and partner personal data
Impact: Personal information belonging to some current and former personnel and partner company representatives, as well as internal documents
Unauthorized access to HYBE’s internal systems occurred on two occasions, September 12–13 and October 3–5, exposing internal documents and personal information belonging to some current and former personnel and partner company representatives. Evidence of intrusion through an external document preview solution linked to the electronic approval system and through the expense processing system was confirmed, and the exposed information included resident registration numbers, passport numbers, bank account numbers, card numbers, and medical information. HYBE apologized, and police launched a preliminary inquiry on November 3.
Related reports: 36 · last report →Fireworks AI breached again, exposing customer data and model weights
Impact: Some customers’ account information, billing information, secrets, datasets, and unfinished model weights
Fireworks AI suffered renewed unauthorized access to its development systems on October 24 through a breach at an external cloud provider, 18 days after confirming the first breach. The investigation confirmed that customer account and billing information, along with some customers’ secrets, datasets, and unfinished model weights, were affected. The company revoked credentials, isolated systems, and notified all affected customers.
Related reports: 15 · last report →