./Data breachesMon, 19 Oct 2026 12:28:44 GMT https://therecord.media/russia-cyberattack-firstvds-cloudx8dvnxMon, 19 Oct 2026 11:45:00 GMTThe Record. Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers.VulnerabilityBreach https://www.malwarebytes.com/blog/data-breaches/2026/10/millions-of-california-students-sensitive-data-stolen-in-breachzuzmh1Mon, 19 Oct 2026 11:10:14 GMTMalwarebytes Labs. The California Department of Education notified students about a data breach at contractor Educational Testing Service.ResearchBreach https://news.google.com/rss/articles/CBMiZkFVX3lxTE9sdllPYVV6M0l4R1JKUzhVZjNPbEltRTlJa0NEZWNGaHVvNVlNNkVjc2NBVHJHcU9TcjRUZUlnT3kxRjZBZ1c1MTFua2VmUTlQOXhhYUYzNVBKT1hrRmlzR0xEemE5UdIBa0FVX3lxTE5jeUVSX2F1N1d1Tm9ibWN4V19ZMk82cUJ3bFhqWkV0S1Z1dExRUS1kalNxZ254OGplanBXbi1RbHYyVlZyWHV5bDRVeFVmbkFxT1pTZlFOZ0pZRGt6N3pxTENPMUdMb1VtVDZr?oc=5zq779bMon, 19 Oct 2026 10:14:01 GMTCybersecurity News. OpenCode Security Breach Exposes Third-Party API Keys of its Console Users CyberSecurityNewsBreach https://bsky.app/profile/hackmanac.com/post/3my7oq5q7lc2kdwf443Mon, 19 Oct 2026 08:19:00 GMTHackmanac Alerts. Italy - Mastelli The Qilin ransomware group claims to have breached Mastelli, a bio-pharmaceutical company based in Sanremo. Threat actor: Qilin Sector: Healthcare Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 18, 2026BreachRansomware https://bsky.app/profile/hackmanac.com/post/3my7oh7ggt22k1kjg65hMon, 19 Oct 2026 08:14:00 GMTHackmanac Alerts. Japan - First Brothers Co. Ltd The Qilin ransomware group claims to have breached First Brothers Co. Ltd.BreachRansomware https://bsky.app/profile/hackmanac.com/post/3my7ny5uqhs2k177pp5qMon, 19 Oct 2026 08:06:00 GMTHackmanac Alerts. Egypt: Telecom Egypt - We academy The n0n hacker group claims to have breached Telecom Egypt's training academy, allegedly stealing course materials, student records, programming projects, examination resources and the complete course database.Breach https://thehackernews.com/2026/10/opencode-console-breach-may-have.htmlynfx3xMon, 19 Oct 2026 06:07:08 GMTThe Hacker News. An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its…Breach https://www.stepsecurity.io/blog/opencode-security-breachegd7ejSun, 18 Oct 2026 20:14:18 GMTStepSecurity. OpenCode reported a breach affecting Console users with linked AI providers. Here is what the vendor has said, and how to find OpenCode on your developer machines.ResearchBreachAI https://cybersecuritynews.com/opencode-security-breach/j13n0lSun, 18 Oct 2026 04:20:16 GMTCybersecurity News. OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation…Breach https://databreaches.net/2026/10/17/ny-ag-james-and-ct-ag-tong-secure-2-7-million-from-boston-childrens-health-physicians-and-xtium-for-2024-data-breach/1b5a3z2Sat, 17 Oct 2026 22:22:10 GMTDataBreaches.net. NY’s Attorney General and CT’s Attorney General held both a provider and its IT company liable for a data breach. The settlement also includes a corrective action plan to improve data security. New York Attorney General Letitia James and Connecticut Attorney…Breach https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ye28rtSat, 17 Oct 2026 15:18:51 GMTBleepingComputer. ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]BreachSupply chain https://arstechnica.com/security/2026/10/openai-models-hacked-a-crypto-wallet-and-breached-more-websites/6ftyy2Fri, 16 Oct 2026 20:59:01 GMTArs Technica. The actions could have resulted in criminal charges had humans been behind the keyboard.Breach https://therecord.media/russia-datasuckers-hackers-arrested199jq7vFri, 16 Oct 2026 13:30:00 GMTThe Record (+1 more sources). Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.Breach https://therecord.media/anne-arundel-county-maryland-confirms-data-breachdlrdu5Fri, 16 Oct 2026 13:05:00 GMTThe Record. Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.BreachRansomware https://www.darkreading.com/insider-threats/ai-agents-breaches-humans-liablecdrajqFri, 16 Oct 2026 13:00:00 GMTDark Reading. As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.BreachAI https://cybersecuritynews.com/breach-440-papercut-servers/1g18xb3Fri, 16 Oct 2026 12:23:47 GMTCybersecurity News. A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440 instances linked to 395 organizations in 48 countries, according to GreyNoise. The operation paired OpenAI’s…BreachAI https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/ei53cgFri, 16 Oct 2026 12:01:29 GMTBleepingComputer (+1 more sources). Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...]Breach https://www.securityweek.com/bae-systems-security-incident-stalls-notices-from-us-bankruptcy-courts/1pbj0kvFri, 16 Oct 2026 11:46:40 GMTSecurityWeek. A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.BreachLaw & policy https://www.infosecurity-magazine.com/news/cyber-incident-bae-us-bankruptcy/2zixqeFri, 16 Oct 2026 09:05:00 GMTInfosecurity Magazine (+1 more sources). Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE SystemsBreachLaw & policy https://bsky.app/profile/hackmanac.com/post/3mxxxawi4tc2g1lbgcnpFri, 16 Oct 2026 06:30:00 GMTHackmanac Alerts. Australia - Canva The Seven Deadly Sins hacker group claims to have breached Canva and stolen over 200 million database rows. The allegedly compromised data includes 2 million Salesforce CRM records, enterprise licensing data, order-related PDFs, and data…Breach https://bsky.app/profile/hackmanac.com/post/3mxxwkhgces2gfmd6exFri, 16 Oct 2026 06:18:00 GMTHackmanac Alerts. Egypt - Luxor Drinking Water and Sanitation Company The LockBit 5.0 ransomware group claims to have breached Luxor Drinking Water and Sanitation Company.BreachRansomware https://bsky.app/profile/hackmanac.com/post/3mxxv6647d227g5fbxsFri, 16 Oct 2026 05:53:00 GMTHackmanac Alerts. Japan - Keio Corporation The Qilin ransomware group claims to have breached Keio Corporation, a major Japanese transportation company, and threatened to leak allegedly stolen confidential data.BreachRansomware https://dysruptionhub.com/heber-city-utah-cyberattack/1m6on30Fri, 16 Oct 2026 01:22:09 GMTDysruptionHub. Systems were back online by Thursday, and the city said essential services and online bill payments continued.Breach https://databreaches.net/2026/10/15/vibetech-database-exposes-13-7m-records-including-assortment-of-old-breaches/bltlewThu, 15 Oct 2026 16:21:40 GMTDataBreaches.net. Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records containing credentials and other sensitive information from previous data breaches. The repository was…Breach https://cybersecuritynews.com/burger-king-japan-data-breach/p19buyThu, 15 Oct 2026 15:55:01 GMTCybersecurity News. Burger King Japan has confirmed a data breach that exposed about 11.18 million records linked to members of its official app. BK Japan, which operates the chain in Japan, said an outside party gained unauthorized access to the system used to manage app member…Breach https://news.google.com/rss/articles/CBMibEFVX3lxTFBRWGRFZUpLWlFweWZSRDFrSEhlZGZ5R09Gdmt2ckxnbGxfNXAwY3ZqVnVIb1VxaTlhSVRhR3JBMkkxOWtRUzV0a2RQQTNONlpZZFRaOUc4QWdBb3ljUFdMclFkVkd6SDlybXRTOdIBckFVX3lxTFA2R01yRGRqTlQyb2Y2S2NPUG5xRmtLQ0lRNEg5U1N1c045Q1Y2VURyalhfQzV2SXRTX2dYNlp0MWczZkdTdWpPdTBpbGJYX0NtOUhUZzlwa3cyZDFHVFdXS1pyVzB3b2JJc1ozeW1uUmotdw?oc=5194c2aaThu, 15 Oct 2026 15:55:01 GMTCybersecurity News. Burger King Japan Confirms Data Breach Exposing 11.18M User Records CyberSecurityNewsBreach https://databreaches.net/2026/10/15/legal-aid-agency-cyberattack-compromised-data-goes-back-to-1978/1i6h41zThu, 15 Oct 2026 12:18:13 GMTDataBreaches.net. Tevye Markson has an update on the April 2025 breach of the UK’s Legal Aid Agency, previously reported on this site: A new update on the Legal Aid Agency data breach has revealed that the data which was compromised in a cyberattack in 2025 goes back as far as…Breach https://cybersecuritynews.com/firefox-enterprise-adds-dlp-and-ai-controls/9rva7mThu, 15 Oct 2026 12:14:59 GMTCybersecurity News. Mozilla released Firefox Enterprise 158.0 on October 13, 2026, introducing its first dedicated enterprise browser with built-in data loss prevention and AI-use controls. The browser combines Firefox with a self-hosted Admin Console, giving security teams…BreachAI https://www.securityweek.com/centerpoint-energy-data-breach-impacts-1-million-texans/1lofr2dThu, 15 Oct 2026 09:55:19 GMTSecurityWeek (+1 more sources). Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.Breach https://www.infosecurity-magazine.com/news/ico-reprimands-met-over-thirdparty/gqdrwvThu, 15 Oct 2026 08:30:00 GMTInfosecurity Magazine. The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platformBreach https://www.bleepingcomputer.com/news/security/uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978/13fcq7nThu, 15 Oct 2026 08:06:47 GMTBleepingComputer (+3 more sources). The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978. [...]Breach https://www.helpnetsecurity.com/2026/10/15/product-showcase-guardos/tcpowkThu, 15 Oct 2026 04:00:08 GMTHelp Net Security. GuardOS is an iPhone application that combines device security checks, VPN access, Safari content filtering, QR link scanning, and storage cleanup. It is available through the App Store. Getting started The home dashboard organizes tools into individual…Breach https://dysruptionhub.com/senture-kentucky-cyberattack-fmcsa-phones/1brzbujThu, 15 Oct 2026 00:07:24 GMTDysruptionHub. Drivers and carriers lost phone help with federal registration. Online tickets and chat remained available, and DOT said agency data was not compromised.Breach https://www.schneier.com/blog/archives/2026/10/cyberattack-on-connected-fridges-in-france.html88h8t7Wed, 14 Oct 2026 14:10:22 GMTSchneier on Security. Another IoT cyberattack , this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. […] Normally,…Breach https://news.google.com/rss/articles/CBMiekFVX3lxTFBiejBtb3E2TmwyNTNqRU9LaVhMUkVEQXZEbHhxdTBlOEtERlhYSzRCcGZnZHdyQVZUcDRTM0Y1czczNkZkQV9pcjhYazhhQ3hBVGRXVW5VRndGQXdqRzZCcWpDZUd3bWhEWEdRQ2YzSWF4anRfZVphVC1R0gF_QVVfeXFMTkhobkFKaENXQ182R0ZJRjEyMndlVTdQVkE0aGFZejFlemxOUEIxUkp2X3VzVkJMME80cnAxTVp6VkxsbU40UmJBaW1hUWpVUzJCZ19hU1p0c2k2UFBHMGJsMWdsWU9fY0tKWVQ5eTdQN1J6dEVYcW1zTzAzV0ZNSQ?oc=51opixnWed, 14 Oct 2026 09:25:56 GMTCybersecurity News. Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People CyberSecurityNewsBreach https://cybersecuritynews.com/hackers-breach-meta-github-repositories/s5klpnWed, 14 Oct 2026 08:49:41 GMTCybersecurity News. Hackers used an employee’s stolen credentials to access some of Meta’s GitHub repositories, taking product source code and personal information linked to roughly 1,500 people. Most affected individuals are Meta employees in the United States, according to the…Breach https://news.google.com/rss/articles/CBMibkFVX3lxTE02YmRWc1VQNGwzRk54ZU1WTE10NmJXOE91eGNiZXVBaFU1QnV2b1l0c2xPcFNraTdmbld6Y2pWMHEyTGFfQ0ZNTkc1eGhiM01kaXNjbnd5b1JNd2psbEdUbEVTVEtmbTVlYmlGWVFB0gFzQVVfeXFMTl93aU5fNXMxY1NNRFJzU3prT0lUV0tTcE1MR0ZsbkxTdlBMTEhod3dtcG9QSGNDbmRCTnRKcEdjYTVyWFQ5VGVZRmpDNnlFU0NUWFNXT0F2cld4SDRDakN3TGNUZFN1UVpfWEE1VUF5bmRZRQ?oc=51cfym47Wed, 14 Oct 2026 08:37:02 GMTCybersecurity News. Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server CyberSecurityNewsBreach https://cybersecuritynews.com/attackers-breach-european-bank/1umeovwWed, 14 Oct 2026 08:33:31 GMTCybersecurity News. A European bank was breached through a poorly secured, third-party gateway before an attacker tried to exploit its Windows Server Update Services (WSUS) infrastructure. The case shows how stolen login details and weak access controls can put a bank’s central…Breach https://securityaffairs.com/200910/malware/how-a-leaked-builder-of-xworm-turned-a-remote-access-trojan-into-a-surveillance-kit.html248pc0Wed, 14 Oct 2026 05:46:19 GMTSecurity Affairs. Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm since September 2024, and its latest report shows the malware…Zero-dayBreachMalware https://databreaches.net/2026/10/13/attackers-claim-to-have-stolen-80-million-south-african-patient-records-in-massive-ampath-laboratories-data-breach/1d2l6eoTue, 13 Oct 2026 20:49:32 GMTDataBreaches.net. Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrated. Threat actor ByteToBreach, which…Breach https://www.bleepingcomputer.com/news/security/uk-housing-ombudsman-service-investigates-security-incident/ulktuzTue, 13 Oct 2026 18:19:44 GMTBleepingComputer. The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. [...]Breach https://therecord.media/sandbox-vulnerability-gives-rogue-ai-agents-path-out1kv2kqjTue, 13 Oct 2026 16:18:00 GMTThe Record. The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved…VulnerabilityBreachAI https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/1sh1sy4Tue, 13 Oct 2026 16:01:00 GMTSecurityWeek. Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.Breach https://databreaches.net/2026/10/13/uk-commercial-market-research-and-data-gathering-firm-in-the-medical-space-leaked-health-data/1cwitnaTue, 13 Oct 2026 13:00:46 GMTDataBreaches.net. UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard contacted DataBreaches.net to report a data leak they discovered containing sensitive medical…Breach https://therecord.media/foschini-group-south-africa-cyber1k12fwyTue, 13 Oct 2026 13:00:00 GMTThe Record. The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some services unavailable.Breach https://www.theregister.com/security/2026/10/13/123456-password-linked-to-denmark-data-breach-affecting-88m-people/530272616h6mqbTue, 13 Oct 2026 11:14:00 GMTThe Register. Local media reports three weakly protected accounts at small IT biz whose access to national register was abusedBreach https://www.infostealers.com/article/first-physical-robbery-potentially-linked-to-revolut-data-breach/qc2uagTue, 13 Oct 2026 07:34:19 GMTInfoStealers. First Physical Robbery Potentially Linked to Revolut Hack First Physical Robbery Potentially Linked to Revolut Data Breach Following the recent Revolut hack we reported on, we are now…ResearchBreach https://www.bleepingcomputer.com/news/security/anthropic-takes-risky-ai-tests-offline-after-models-breach-govt-sites/1g7g4m2Mon, 12 Oct 2026 18:51:59 GMTBleepingComputer. Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations" no longer have internet access following incidents involving U.S. government websites at the federal, state, and local levels. [...]BreachAI https://www.infosecurity-magazine.com/news/luna-moth-leaks-ransomware-playbook/17umulwMon, 12 Oct 2026 15:15:00 GMTInfosecurity Magazine. Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a single targetBreachRansomware https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/1nutuwdMon, 12 Oct 2026 13:51:07 GMTBleepingComputer (+1 more sources). Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it had to take some systems offline in response to a "cybersecurity incident" affecting its network. [...]Breach https://www.infosecurity-magazine.com/news/french-supermarket-chains/1l6uh7bMon, 12 Oct 2026 11:57:00 GMTInfosecurity Magazine. The CEO of Cooperative U confirmed a cyber-attack affected the food stock in several stores from October 11Breach https://www.securityweek.com/irhythm-data-breach-impacts-over-360000-people/1w0dz48Mon, 12 Oct 2026 11:05:43 GMTSecurityWeek. Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.Breach https://www.welivesecurity.com/en/how-to/what-to-do-when-a-data-breach-notice-tells-you-almost-nothing/ttwpyrMon, 12 Oct 2026 09:00:00 GMTWeLiveSecurity (ESET). Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.ResearchBreach https://www.infosecurity-magazine.com/news/karaoke-giant-data-breach-eight/t9qnxnMon, 12 Oct 2026 08:35:00 GMTInfosecurity Magazine. Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customersBreachSupply chain https://bsky.app/profile/hackmanac.com/post/3mxmfrpj5mc2i1kh1owfSun, 11 Oct 2026 16:18:00 GMTHackmanac Alerts. United States - KFC The Gentlemen ransomware group claims to have breached KFC. Threat actor: The Gentlemen Sector: Hospitality Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 10, 2026 Status: Pending verification ESIX©: 5.23BreachRansomware https://bsky.app/profile/hackmanac.com/post/3mxmfofuntc2i14bnba3Sun, 11 Oct 2026 16:16:00 GMTHackmanac Alerts. United States - Confluent The Gentlemen ransomware group claims to have breached Confluent. Threat actor: The Gentlemen Sector: ICT Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 10, 2026 Status: Pending verification ESIX©: 5.60BreachRansomware https://bsky.app/profile/hackmanac.com/post/3mxmfkts7es2io7by7pSun, 11 Oct 2026 16:14:00 GMTHackmanac Alerts. United States - MoneyGram The Gentlemen ransomware group claims to have breached MoneyGram. Threat actor: The Gentlemen Sector: Financial Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 10, 2026 Status: Pending verification…BreachRansomware https://databreaches.net/2026/10/11/the-luna-moth-files-werent-hacked-heres-how-they-leaked/kkpm59Sun, 11 Oct 2026 13:51:15 GMTDataBreaches.net. When asked about the “Luna Moth Files” that had mysteriously appeared online, Silent Ransom Group called them “fake” and insisted they hadn’t had any leak or breach. But they had. Here’s what we know. When the “Luna Moth Files” appeared on an onion site…BreachRansomware https://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.html1dw7824Sun, 11 Oct 2026 04:24:34 GMTThe Hacker News. Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet…Breach https://databreaches.net/2026/10/10/123456-password-used-in-massive-danish-cpr-data-breach/1so6z9cSat, 10 Oct 2026 20:42:22 GMTDataBreaches.net. Ritzau has more on the Denmark Central Person Register (CPR) breach that affected more than 5 million living Danes and 3 million deceased: At least three accounts at the company linked to a major breach of Denmark’s CPR register reportedly used the password…Breach