Japanese authorities confirmed that a Russian national wanted by Germany on an arrest warrant tied to a ransomware incident was detained upon entering Japan as a tourist and has now been extradited to Germany. The suspect is alleged to be a core member of the Qilin ransomware-as-a-service group, which has hit more than 2,350 organizations in 62 countries since emerging in 2022, including Nissan, Asahi, Lee Enterprises and Court Services Victoria.
bleepingcomputer.com
· 2026-10-09
Sen. Maggie Hassan sent a letter to Trump Mobile CEO Patrick O'Brien alleging the company has not obtained FCC authorization under Section 214 to provide international calling despite advertising service to over 230 countries. She also said Trump Mobile and partner Liberty Mobile Wireless failed to file a complete robocall-mitigation plan, and raised concerns tied to a reported breach exposing data on 3,615 customers.
arstechnica.com
· 2026-10-08
Asos has confirmed that hackers breached a third-party platform hosting customer communication data, stealing names, home addresses, phone numbers, emails, and profile notes such as search queries. The attackers, identifying themselves as the Xuanye Group, used Asos's own app notification system to alert customers directly, demanding the company engage with them or risk having the stolen data leaked online.
techcrunch.com
· 2026-10-08
Asos informed customers that hackers gained access to extensive personal data, including names, addresses, contact numbers, emails, customer IDs, and search queries on their platform. The breach was confirmed after cybercriminals contacted BBC News with samples of the stolen information, revealing the scope of the data compromised. The retailer emphasized that no payment or login details were accessed and warned customers to be vigilant against impersonation scams.
bbc.co.uk
· 2026-10-08
Advantest Corporation has notified affected individuals that a ransomware attack on February 15 resulted in theft of personally identifiable information, including Social Security numbers, national ID numbers, driver's licenses, passports, medical and financial data. The semiconductor test equipment maker had initially disclosed the breach without confirming data theft, but an October 6, 2026 notification confirms data was extracted from its servers. It remains unclear whether the stolen data belongs to customers, employees, or partners.
bleepingcomputer.com
· 2026-10-07
A 2025 cyberattack on Oracle Health compromised personal and medical records for almost 20 million people, including 3 million Texans, according to a Texas attorney general report cited by Bloomberg. The attacker allegedly used stolen credentials to access old Cerner servers before their data was migrated to Oracle's cloud, copying Social Security numbers, addresses and medical information. Oracle began notifying affected customers in March 2025, but neither Oracle nor the AG's office has named which hospitals or clinics were impacted.
cnet.com
· 2026-10-06
Asos customers received a push notification claiming hackers had fully compromised the retailer's Snowflake cloud instance and threatening to leak the data unless the company engaged with them. The message, addressed to Asos's data protection and IT teams, linked to a Telegram channel tied to a group calling itself Xuanye Group. Asos confirmed it is investigating unauthorised activity on third-party platforms used to communicate with customers, restricted access to the notification systems, and said names and contact details may have been exposed but payment data and passwords were not believed to be affected.
engadget.com
· 2026-10-06
ASOS confirmed unauthorized access to third-party platforms it uses to communicate with customers, after hackers sent rogue push notifications through the ASOS mobile app claiming to have breached its Snowflake data environment. The company says names and contact details may have been exposed, but has not verified the Snowflake compromise claim or disclosed how many customers are affected. ASOS says payment card data and account passwords do not appear to be impacted.
bleepingcomputer.com
· 2026-10-06
Meta's new Muse AI agent was developed with a critical security vulnerability that could have allowed unauthorized access to sensitive user data and internal systems. Although the flaw was reportedly patched before release, some employees remain concerned about lingering risks, especially given recent issues with virtual machine escapes. These internal worries highlight ongoing challenges in safeguarding user privacy amid rapid AI deployment.
futurism.com
· 2026-10-05
Denmark's government confirmed that hackers stole most of the contents of its Central Person Register, a database holding identity data on roughly 11 million people including the deceased and those living abroad. Minister Christina Egelund called it a "serious incident," saying attackers gained access by abusing a private Danish company's legitimate credentials to query the system. The breach occurred in September but wasn't discovered until October 2, and authorities have not named a suspect.
techcrunch.com
· 2026-10-05
Denmark's Central Population Register said attackers exploited a private company's legitimate system access to brute-force valid CPR numbers and extract names, addresses and identification data, affecting roughly 8.8 million of the registry's 11 million entries, including residents, émigrés and deceased individuals. The breach occurred in September 2026 but was discovered October 2, with the company's access now blocked and police investigating.
bleepingcomputer.com
· 2026-10-05
Denmark's Central Person Register (CPR) confirmed that unauthorized parties exploited a private company's legitimate access to the system to obtain names, addresses, CPR numbers and other personal data belonging to roughly 8.8 million registered citizens. Records of citizens who had opted for name and address protection were not affected. Authorities have cut off the company's access, reported the incident to the Danish Data Protection Agency, and police are investigating alongside other relevant agencies.
cpr.dk
· 2026-10-05
GoKawiil