Trending
Incidents with the most news coverage recently, including older incidents that are still drawing follow-up reports.
Hacking of supermarket refrigeration systems in Europe causes food losses and fires
Impact: Damage to refrigeration and freezing systems in nine European countries, with food losses and some fires at hundreds of supermarkets in France
In October 2026, cyberattacks targeting refrigeration and freezing systems at hundreds of supermarkets in France raised temperatures, causing food losses and fires. Similar incidents subsequently occurred in several other European countries, bringing the number of affected countries to nine. In November, French authorities identified Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps, as responsible for the attacks.
Related reports: 508 · last report →Financial Security Institute hack exposes data from 48 financial firms
350Impact: An estimated 130 or more files from 48 financial firms leaked, along with approximately 200 administrative forms, more than 300 personal information entries, and more than 350 system user information records
The Financial Security Institute detected a data leak from its continuous information security assessment system at around 3 p.m. on November 9, blocked access, and reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). An estimated 130 or more files from 48 financial firms were leaked, along with approximately 200 administrative forms, more than 300 personal information entries in those forms, and more than 350 system user information records. The attacker bypassed SMS verification to create an account impersonating the Financial Supervisory Service and exploited inadequate access authorization checks in an operational inspection feature. The institute blocked 246 attacking IP addresses, while the FSC launched an on-site inspection and announced a targeted audit.
Related reports: 169 · last report →Arara email service hack exposes 81.33 million email addresses
81.3MImpact: 81,329,467 email addresses and some customers' member information
Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also abused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and completely suspended its email delivery service.
Related reports: 20 · last report →MUJI warns of possible leak of 27.26 million customer records and 1.09 million card numbers
27.3MImpact: Possible exposure of up to approximately 27.26 million customer records and approximately 1.09 million card numbers
Unauthorized access to systems at MUJI operator Ryohin Keikaku may have exposed up to approximately 27.26 million app and online store customer records, including those of former members, and approximately 1.09 million card numbers. The customer information included email addresses, dates of birth, and gender, while the card numbers had been collected for a benefits program that ended in 2021 and were never deleted. The company acknowledged vulnerabilities in parts of its systems and shortcomings in information security and customer data management, reported the incident to the relevant authorities, and said it would strengthen internal controls. It also postponed reopening its online store because of possible unauthorized logins.
Related reports: 107 · last report →Vanderbilt University restricts system access after ransomware attack
1MImpact: Access to some systems restricted; unconfirmed claims of theft of more than 1 million Social Security numbers and research materials
Vanderbilt University in the United States confirmed an ongoing cyber incident on November 9 and instructed users to shut down university devices and disconnect from Wi-Fi. BYOD claimed to have stolen more than 1 million Social Security numbers, research materials, and other data, but the university did not confirm the claim. The university restored some networks, email, and registration systems while restricting access to the remaining systems, and a former student filed a class action lawsuit after the incident.
Related reports: 53 · last report →Japan’s Nitori warns hack may have exposed up to 37.62 million personal data records
37.6MImpact: Possible leak of up to 37.62 million personal data records concerning individual and corporate members and purchasers
Nitori confirmed unauthorized access to its systems on November 6 and disclosed on November 9 that up to 37.62 million personal data records may have been leaked. The potentially exposed data included the names, addresses, and phone numbers of individual and corporate members and product purchasers. Login passwords and credit card information were not included.
Related reports: 54 · last report →Amicus Lex hack exposes personal data of 20,028 users
20KImpact: Personal information of 20,028 LawForm users
A hack at Amicus Lex at 5:38 a.m. on November 11 exposed the names, phone numbers, and email addresses of 20,028 LawForm users. A SQL injection attack targeting the administrator page and a vulnerable API were identified, and the vulnerable API code was deleted. The Ministry of SMEs and Startups disclosed the incident approximately 60 hours after becoming aware of it.
Read on 헤럴드경제 ↗KB Capital hack exposes data of 1,811 customers, employees and others
1.8KImpact: Personal information of 1,811 people, including customers, employees, executives, and partner company personnel
KB Capital's employee system was hacked, exposing the personal information of 1,811 people, including customers, employees, executives, and partner company personnel. The exposed information included names, addresses, and vehicle registration numbers, and 20 customers were reportedly affected. KB Capital said it would fully compensate any resulting losses.
Related reports: 44 →About 46,000 TSMC employee records leaked and offered on black market
46KImpact: About 46,000 records containing employees’ personal information
About 46,000 records containing TSMC employees’ personal information were leaked, and a hacker attempted to sell them on the black market for 3 bitcoins. TSMC confirmed the leak and said its investigation found that the information matched data stored with a cloud service provider. No evidence of a breach of TSMC’s systems was found, and neither production nor customer information was involved.
Related reports: 43 · last report →Fireworks AI breached again, exposing customer data and model weights
Impact: Some customers’ account information, billing information, secrets, datasets, and unfinished model weights
Fireworks AI suffered renewed unauthorized access to its development systems on October 24 through a breach at an external cloud provider, 18 days after confirming the first breach. The investigation confirmed that customer account and billing information, along with some customers’ secrets, datasets, and unfinished model weights, were affected. The company revoked credentials, isolated systems, and notified all affected customers.
Related reports: 15 · last report →Amadeus reservation system breach exposes passenger data at multiple airlines
Impact: Passenger booking data exposed at multiple airlines
Unauthorized access to the reservation system of Spanish travel technology company Amadeus exposed passenger booking data at multiple airlines. In addition to names and itinerary details, some passport numbers and contact details were exposed, with Japan Airlines, ANA and Cathay Pacific among the affected airlines. Further reports followed from Korean Air, Asiana Airlines and others, while Thailand's aviation authorities confirmed that Thai Airways and Bangkok Airways were affected among seven major airlines.
Related reports: 9 · last report →Taiwan’s ezTravel hacked, exposing data of over 690,000 members
690KImpact: Personal data and order-related information of more than 690,000 members
Taiwanese travel company ezTravel suffered an abnormal network attack that exposed the personal data and order-related information of more than 690,000 members. The exposed data included names, email addresses, and order contact details, but did not include credit card, identity document, or passport numbers. The company apologized, notified consumers of the breach, and advised them to watch out for scams and suspicious links.
Related reports: 34 · last report →Anthropic breach exposes data from 112 Claude business accounts in South Korea
Impact: Information from 112 Claude business accounts in South Korea exposed
Unauthorized access to Anthropic's internal systems through a vulnerability in third-party business software exposed information from 112 Claude business accounts in South Korea. The exposed data included names, email addresses, account and organization identifiers, and usage and spending metrics, while the company said conversations and payment information were not accessed. The Personal Information Protection Commission (PIPC) launched a formal investigation on November 10, and it was subsequently confirmed that Anthropic reported the intrusion to South Korean authorities 21 days after detecting it and notified customer companies after 28 days.
Related reports: 33 · last report →Fireworks AI breach exposes client information
In October 2026, Fireworks AI, an AI service provider for Uber, was breached, leading to a leak of client information. The attacker stole the service provider’s internal credentials and used them to access Uber’s account with the provider. Uber is notifying US drivers that their personal information and driver’s license information were exposed.
Related reports: 4 · last report →GMO forex service hack leads to unauthorized trades and customer losses
Impact: Reported losses across 2,943 accounts totaling ¥2.99 billion; related costs, including compensation, of ¥3.05 billion
Unauthorized access to GMO's foreign exchange trading service resulted in a data leak and unauthorized trades. As of November 13, users had reported losses totaling ¥2.99 billion across 2,943 accounts, while costs including compensation for customer losses and goodwill payments totaled ¥3.05 billion. GMO conducted a group-wide review. It also emerged that vulnerabilities had been flagged and a system redesign proposed two years earlier, but no action had been taken.
Related reports: 36 · last report →Taiwan consular bureau hack exposes passport photos and powers of attorney
774Impact: 72,702 facial photographs for passport applications, 26,072 scanned power-of-attorney files, and photographs and application-related information from 774 ABTC applications
Some websites of Taiwan’s Bureau of Consular Affairs, under the Ministry of Foreign Affairs, were hacked, resulting in the theft of 72,702 facial photographs submitted for passport applications and 26,072 scanned power-of-attorney files from the representative office in New York. An investigation also confirmed that photographs and application-related information from 774 ABTC applications had been exposed. The bureau isolated and restored the affected servers and found no evidence that passport applicants’ names, dates of birth, identity card numbers or passport numbers had also been stolen. It said the validity of passports already issued was unaffected.
Related reports: 30 · last report →Maersk data breach traced to legacy IT systems inherited through acquisition
Impact: Data breach confirmed; attackers claim about 100 GB stolen
Maersk confirmed that attackers gained unauthorized access to legacy IT systems inherited from a company it had previously acquired and extracted data. WhiteArmor claimed to have stolen about 100 GB and demanded $5 million. While investigating the incident, Maersk denied claims that plaintext passwords had been stolen and said the codes obtained by the attackers were expired one-time codes.
Related reports: 28 · last report →DOUZONE BIZON server breach raises wider concerns over client data exposure
Impact: As of November 5, 28 companies and institutions had issued notices of possible personal data leaks; the actual scale of any leak remains unconfirmed
Two security breaches were confirmed at DOUZONE BIZON, raising the possibility that personal data belonging to client companies and third parties whose data those clients held may have been leaked. Historical records of companies whose services had ended may also have been affected, and as of November 5, 28 companies and institutions had issued notices of possible data leaks. DOUZONE BIZON voluntarily reported the incidents to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and disclosed progress on security investments totaling 16 billion won. The government deemed the incidents serious and launched a joint public-private investigation, while whether data was actually leaked and the scope of any leak remain under investigation.
Related reports: 27 · last report →Mirae Asset Securities breach affects about 3,800 customers and 35,255 personnel
35.3KImpact: Account numbers of about 3,800 customers and personal information of 35,255 employees, former employees, and outsourced staff
Mirae Asset Securities was attacked on November 4 and 5, resulting in the leak of account numbers belonging to about 3,800 customers and personal information belonging to 35,255 employees, former employees, and outsourced staff. The attacks targeted its mobile web login service using mobile phone authentication and its groupware, and the leaked personnel information included names, email addresses, mobile phone numbers, and encrypted passwords. The Financial Supervisory Service (FSS) launched an on-site inspection and confirmed links among multiple attacks.
Related reports: 119 · last report →Kakao Work hack exposes personal data and work emails of about 5,000 users
5KImpact: Personal data, work emails, attachments, and other information belonging to about 5,000 users at 44 client companies
On November 9, an external attacker gained unauthorized access to Kakao Work systems, exposing the personal data of about 5,000 users at 44 client companies. The exposed data included names, contact details, departments, email subjects and bodies, original attachments, and encrypted chat messages. The company and the Personal Information Protection Commission (PIPC) are investigating the exact scope and circumstances of the incident, and users have been advised to change their passwords and watch out for impersonation.
Related reports: 24 →SMBC Nikko Securities shareholding association system breach affects up to 56,487 people
56.5KImpact: Personal information of up to 56,487 people exposed or potentially exposed
Unauthorized access to SMBC Nikko Securities’ employee shareholding association management system was found to have exposed or potentially exposed the personal information of up to 56,487 people. The affected information includes names, addresses, shareholding balances and transfer account details, and may also include information on investment holdings. The company blocked access to the system on November 9.
Related reports: 24 →Hack at four Samyang Group companies exposes 149,767 people's personal information
149.8KImpact: Approximately 850,000 files totaling 1.3 TB containing 149,767 people's personal information were leaked, including the resident registration numbers of 82,750 people
In July 2022, approximately 850,000 files totaling 1.3 TB and containing the personal information of 149,767 employees, shareholders, and other associated individuals were leaked from four Samyang Group companies. The attacker exploited a mail server vulnerability to gain administrator privileges, stole file server credentials, and exfiltrated data, which included the resident registration numbers of 82,750 people. The Personal Information Protection Commission (PIPC) found that a server no longer in use had been left connected to an external network and that resident registration numbers had been inadequately encrypted, among other shortcomings, and approved sanctions including an administrative fine of KRW 552 million; Samyang Group said it had strengthened its security systems after the incident.
Related reports: 23 · last report →Daishin Securities hack exposes information on over 38,000 customers
38KImpact: Personal information of over 38,000 customers
A hacking incident at Daishin Securities on October 27 exposed information on over 38,000 customers. The exposed information included addresses and encrypted account numbers, and Daishin Securities said there had been no resulting harm. On November 9, the company announced support measures for affected customers, including one year of insurance covering up to KRW 10 million in losses from voice phishing and smishing, a waiver of trading fees for Korean stocks in December, and a cash payment of KRW 10,000.
Related reports: 81 · last report →Malware on Quantum Systems servers prompts German military to halt drone operations
Impact: Temporary suspension of the German armed forces’ operations of the manufacturer’s drones
German drone manufacturer Quantum Systems detected a cyberattack on its internal servers in late October 2026. Update files containing malware had been planted on the servers, reportedly in an attempt to affect drone operations through updates. The company launched a joint investigation with the authorities, and the German armed forces temporarily suspended operations of the manufacturer’s drones as a precaution.
Related reports: 12 · last report →About 2.2 million Sega newsletter email addresses leaked
2.2MImpact: 2,196,044 newsletter subscriber email addresses
Unauthorized access to the systems of Arara, Sega’s newsletter delivery provider, resulted in the leak of 2,196,044 subscriber email addresses. Sega investigated the incident and advised users to watch out for phishing emails. Sega accounts and users’ financial information were not affected.
Related reports: 21 · last report →Japan Chamber of Commerce and Industry exam system breach may expose 980,000 people’s data
2MImpact: Potential leak of personal information on up to approximately 980,000 people and around 1.97 million exam records
Unauthorized access and the installation of malicious files were confirmed on an external online exam management server used by the Japan Chamber of Commerce and Industry. Information on up to approximately 980,000 people and around 1.97 million exam records may have been leaked, including names, dates of birth, addresses, contact details, pass/fail results, and scores. The chamber announced the incident on November 10, but no actual data leak or misuse has been confirmed.
Related reports: 21 · last report →Kang Chiao International School’s Linkou campus hacked, personal data leaked
Impact: Some personal data leaked
The academic administration system at Kang Chiao International School’s Linkou campus in Taiwan was breached, exposing some personal data. The school, staff, and parents received emails threatening to disclose personal information and harm students, with some emails containing private details such as parents’ workplaces and job titles. The school disconnected its network, began recovery work with cybersecurity experts, and reported the incident to police.
Related reports: 21 →SPH Media breach of five systems exposes about 9% of customer database
Impact: About 9% of the customer database and employee email addresses exposed
Singapore's SPH Media detected cyberattacks on five systems between November 4 and 8, 2026, with about 9% of its customer database exposed. The exposed data consisted mainly of email addresses, along with some names, postal addresses and phone numbers, and also included employee email addresses, but financial information and customer account credentials were not affected. A combination of software bugs and system configuration issues contributed to the breach, and the company is investigating whether the same attacker used AI. The company investigated the breach with a specialist cybersecurity firm and strengthened its cyber defenses.
Related reports: 21 · last report →GS E&C apartment community system hacked, exposing residents’ data
Impact: Personal information of some apartment residents; affected complexes and number of people under investigation
GS Engineering & Construction’s apartment community facility reservation and management system was hacked, exposing some residents’ personal information. The affected complexes and number of people are under investigation, with addresses, encrypted passwords, administrator IDs and RF card numbers among the information potentially exposed. After GS E&C declined to consent to an investigation by the Korea Internet & Security Agency (KISA), citing its own investigation, the Ministry of Science and ICT decided on November 11 to launch an ex officio investigation into the cause and scale of the incident.
Related reports: 58 · last report →EDION online store breach may have exposed customer and payment data
13.7KImpact: Possible exposure of personal information belonging to up to 13,685 people, card details entered in up to 556 transactions, 5,360 gift cards and login information belonging to up to 1,141 people
Unauthorized access to server logs and the insertion of malware into the desktop checkout page were confirmed at EDION’s online store in Japan. Personal information belonging to up to 13,685 people and newly entered card details from up to 556 transactions may have leaked, with 5,360 gift cards and login information belonging to up to 1,141 people also potentially exposed. The company suspended online store operations at 10 p.m. on November 7 and launched an investigation.
Related reports: 20 · last report →