Seoul Metropolitan Police say a seven-member gang, led by a former penetration tester, breached more than 90 South Korean organizations starting in September 2025 and stole 8.2 million records. The group used the ARTEX AI pentesting framework in most attacks and demanded ransom payments of 360 million won ($270,000) in 38 cases to avoid leaking stolen data. The leader was arrested on October 15 and referred to prosecutors on October 23; the other six suspects remain under investigation but not detained.
bleepingcomputer.com
· 2026-10-26
Capcom disclosed that a third party gained unauthorized access to its Capcom ID membership service, exposing email addresses for more than 11.7 million users. The company said personal details like birth dates, gender and nicknames were exposed for 43 accounts, and 196 account passwords were changed without authorization, though no credit card data was involved. Capcom said it detected the intrusion on October 19, blocked further access, and reported the incident to police and its security advisory board.
engadget.com
· 2026-10-24
Quest Diagnostics disclosed in an SEC 8-K filing that hackers breached its Quanum lab testing system on Wednesday, gaining unauthorized access to certain patient records. The company has notified law enforcement and is investigating but has not disclosed how many patients were affected or when the breach began.
techcrunch.com
· 2026-10-23
On July 24, 2025, Curaçao's Tax and Customs Administration detected ransomware that knocked out counter services, its call center and internal operations for over a week, requiring Dutch specialists to help restore systems. A day earlier, the Joint Court of Justice serving Curaçao, Aruba, Sint Maarten, Bonaire, Saba and Sint Eustatius was also taken offline, meaning one intrusion disrupted judicial functions across six jurisdictions simultaneously.
darkreading.com
· 2026-10-23
Germany's AfD party has confirmed a security breach in which a hacker copied internal mailboxes from its hosting provider in September. The leak site Hexane.cc has published AI-generated, categorized summaries of roughly 421,179 emails and over 100,000 files, with the full 281GB archive available via torrent.
bitdefender.com
· 2026-10-23
Quest Diagnostics disclosed in an SEC filing that it detected unauthorized access to its Quanum LSM lab-ordering platform on October 21, 2026. The company says some patient records were exposed, though the specific data types affected are still being determined, and it has notified law enforcement while external experts assist the investigation. Quest states its customer-facing operations and direct LIS/EMR interfaces were unaffected, and it has paused access to Quanum LSM, Essential Insights and LabHQ as a precaution.
bleepingcomputer.com
· 2026-10-23
State Bank of India disclosed to the National Stock Exchange that 3,897 customer records were leaked online, though it did not say whether this corresponds to that many individual customers. A hacker using the name 'Siriusim' had posted the data on BreachForums, including a 375,000-row table and over 2,700 PDF files, some containing handwritten personal details that Mumbai's Free Press Journal verified as genuine.
darkreading.com
· 2026-10-23
Cloud hosting provider Railway detected suspicious activity on systems storing customer environment variables and said an unauthorized third party may have accessed encrypted variables, obtaining decrypted contents in some cases. Railway linked the incident to a broader series of attacks on AI inference providers, who were notified and told to revoke their keys, and it paused deployments platform-wide during its investigation.
bleepingcomputer.com
· 2026-10-22
Quest Diagnostics has reported that an unauthorized party gained access to patient records held by the company. Details on the number of patients affected, the data exposed, and how the breach occurred have not been fully disclosed.
gizmodo.com
· 2026-10-22
Capcom has confirmed hackers accessed its CAPCOM ID membership system, exposing email addresses, account creation dates, last login times, and login IP addresses for over 11.7 million accounts. A small group of 43 accounts also had birthdates, gender, nicknames and country data leaked, while hackers changed login passwords on 196 accounts before Capcom reset them. The company says passwords for other accounts and all credit card data remain secure.
bleepingcomputer.com
· 2026-10-22
Railway, a cloud development platform, disclosed that attackers accessed encrypted environment variables and, in some cases, obtained their decrypted contents. The company said its initial analysis points to a subset of affected users but is urging all customers to revoke and rotate their keys, and has paused customer deployments while it investigates.
techcrunch.com
· 2026-10-22
A hack of the P3 Global Intel tip-management platform used by Canadian Crime Stoppers exposed more than 1.5 million tips spanning 25 years, a CBC investigation found. About 850,000 records contained personal details such as addresses, phone numbers, emails and license plates, and over 4,300 tipsters had given their full names. The data was stolen last March by a hacktivist group called Internet Yiff Machine and later shared with journalists via the nonprofit Distributed Denial of Secrets.
yro.slashdot.org
· 2026-10-21
GoKawiil