Asos informed customers that hackers gained access to extensive personal data, including names, addresses, contact numbers, emails, customer IDs, and search queries on their platform. The breach was confirmed after cybercriminals contacted BBC News with samples of the stolen information, revealing the scope of the data compromised. The retailer emphasized that no payment or login details were accessed and warned customers to be vigilant against impersonation scams.
bbc.co.uk
· 2026-10-08
Advantest Corporation has notified affected individuals that a ransomware attack on February 15 resulted in theft of personally identifiable information, including Social Security numbers, national ID numbers, driver's licenses, passports, medical and financial data. The semiconductor test equipment maker had initially disclosed the breach without confirming data theft, but an October 6, 2026 notification confirms data was extracted from its servers. It remains unclear whether the stolen data belongs to customers, employees, or partners.
bleepingcomputer.com
· 2026-10-07
A 2025 cyberattack on Oracle Health compromised personal and medical records for almost 20 million people, including 3 million Texans, according to a Texas attorney general report cited by Bloomberg. The attacker allegedly used stolen credentials to access old Cerner servers before their data was migrated to Oracle's cloud, copying Social Security numbers, addresses and medical information. Oracle began notifying affected customers in March 2025, but neither Oracle nor the AG's office has named which hospitals or clinics were impacted.
cnet.com
· 2026-10-06
Asos customers received a push notification claiming hackers had fully compromised the retailer's Snowflake cloud instance and threatening to leak the data unless the company engaged with them. The message, addressed to Asos's data protection and IT teams, linked to a Telegram channel tied to a group calling itself Xuanye Group. Asos confirmed it is investigating unauthorised activity on third-party platforms used to communicate with customers, restricted access to the notification systems, and said names and contact details may have been exposed but payment data and passwords were not believed to be affected.
engadget.com
· 2026-10-06
ASOS confirmed unauthorized access to third-party platforms it uses to communicate with customers, after hackers sent rogue push notifications through the ASOS mobile app claiming to have breached its Snowflake data environment. The company says names and contact details may have been exposed, but has not verified the Snowflake compromise claim or disclosed how many customers are affected. ASOS says payment card data and account passwords do not appear to be impacted.
bleepingcomputer.com
· 2026-10-06
Meta's new Muse AI agent was developed with a critical security vulnerability that could have allowed unauthorized access to sensitive user data and internal systems. Although the flaw was reportedly patched before release, some employees remain concerned about lingering risks, especially given recent issues with virtual machine escapes. These internal worries highlight ongoing challenges in safeguarding user privacy amid rapid AI deployment.
futurism.com
· 2026-10-05
Denmark's government confirmed that hackers stole most of the contents of its Central Person Register, a database holding identity data on roughly 11 million people including the deceased and those living abroad. Minister Christina Egelund called it a "serious incident," saying attackers gained access by abusing a private Danish company's legitimate credentials to query the system. The breach occurred in September but wasn't discovered until October 2, and authorities have not named a suspect.
techcrunch.com
· 2026-10-05
Denmark's Central Population Register said attackers exploited a private company's legitimate system access to brute-force valid CPR numbers and extract names, addresses and identification data, affecting roughly 8.8 million of the registry's 11 million entries, including residents, émigrés and deceased individuals. The breach occurred in September 2026 but was discovered October 2, with the company's access now blocked and police investigating.
bleepingcomputer.com
· 2026-10-05
Denmark's Central Person Register (CPR) confirmed that unauthorized parties exploited a private company's legitimate access to the system to obtain names, addresses, CPR numbers and other personal data belonging to roughly 8.8 million registered citizens. Records of citizens who had opted for name and address protection were not affected. Authorities have cut off the company's access, reported the incident to the Danish Data Protection Agency, and police are investigating alongside other relevant agencies.
cpr.dk
· 2026-10-05
Reuters reports that Saif al-Din Khader, a teenager suspected of leading the ShinyHunters hacking group, is being detained in Jordan. The group claimed in September it had breached the FBI's job recruitment portal, stealing personal and medical data on roughly 5,000 employees and defacing the agency's logo. Sources told Reuters Khader is cooperating with FBI and international investigators to help identify other members of the group.
yro.slashdot.org
· 2026-10-05
The Technical University of Denmark disclosed that attackers used compromised credentials to access DTUBasen, its identity and access management system, downloading over two decades of user data. The system holds records for roughly 40,000 active users and 160,000 former users, including Danish civil registration numbers, addresses, profile pictures and next-of-kin contact details. DTU says it cannot yet determine exactly what data was taken or how many people are affected.
bleepingcomputer.com
· 2026-10-03
After a jury found Meta misled Facebook users about data privacy in connection with the Cambridge Analytica scandal, New Mexico's attorneys asked Judge Francis Mathew to impose penalties of $35 billion to $40 billion. The request follows a September 25 verdict in Santa Fe; Meta's lawyers argued the state's proposed sum is unconstitutional and urged a cap of $3.45 billion instead.
yro.slashdot.org
· 2026-10-03
GoKawiil