Topic
Incidents where attackers gain unauthorized access to personal, financial, or organizational data, often followed by theft, exposure, or extortion.
Block's $15 million Cash App security settlement starts paying claimants in October 2026 after approving about 40,380 of more than 667,000 claims. Approved claims are valued at about $5.6 million so far, little more than a third of the fund Block agreed to.
Reality
FBI Director Kash Patel says agents arrested another ShinyHunters suspect, at least the third detained in two weeks since the FBIjobs.gov breach. The group says it is leaving Telegram as members are arrested, and it has promised not to publish the FBI staff data it stole.
Perspective Coverage
10 publishersReality
President Lee Jae Myung says AI appears to have been used in hacks on South Korean banks that leaked data on at least 25,000 Shinhan customers. If his claim that AI removes the need for specialized skills holds up, banks should plan for many more attackers.
Perspective Coverage
18 publishersReality
Japan's FSA asked banks and crypto exchanges to swap photographed-ID checks for IC-chip reading now, ahead of an April 1, 2027 deadline. The request follows a Times Car breach of about 1.6 million license images, Cryptopolitan reported, and leaves each firm to decide whether to pay for the switch this year or wait for the law.
Reality
Asos says hackers took detailed profiles of potentially millions of customers, after first telling investors only basic contact details may have been accessed. The revision followed the attackers' approach to the BBC, so the people holding the records set the timing of the fuller disclosure.
Reality
Revolut will pay to replace identity documents for the 680 customers whose data it sent to a hijacked Italian government email address. The bank has not put a price on the pledge, and it disagrees with Italy's interior minister over whose check let the request through.
Reality
JPCERT/CC says attackers abused mobile-app APIs and exploited a known Metabase flaw in a leak run Macnica puts at 119 Japanese incidents this year. Some leaks came from BI tools and staff systems their owners never expected outsiders to reach, so the alert asks for access control on every endpoint, public or not.
Reality
Oasis Security says attackers' servers held about 960,000 Yoido Full Gospel Church member records with resident registration numbers. The church is still verifying, but the cache shows how much identity and donation data sits behind one administrator account at a large congregation.
Perspective Coverage
3 publishersReality
Denmark says hackers used a Danish company's search access to the Central Person Register to reach names, addresses and ID numbers of 8.8 million people. Because that access is a service offered to businesses by design, every partner account with search rights is part of the register's security perimeter.
Perspective Coverage
15 publishersReality
Kai Wegner has ruled out paying, which leaves a seven-day clock running on 5.79 terabytes the group says it holds. Two Berlin department networks were already offline for days, and the city still cannot say what was in the files.
Perspective Coverage
3 publishersReality
Arizona's Supreme Court says attackers copied over 150,000 foster-care review reports dating to 2010 from backups after an employee clicked a phishing link. The court kept those copies to recover from ransomware, so the store meant to survive an attack is the one that leaked.
Perspective Coverage
6 publishersReality
UK education software supplier Bromcom says unauthorized access to a legacy SSO registration feature exposed users' email addresses and reference numbers. Its school records system was not reached, so the question for schools is which older login features suppliers still run.
Reality
Southern Company is notifying about 400,000 customers that an intruder accessed their account details, including partial SSNs, through its online portal. Those fields give a scammer what they need to pose as the customer's own power company.
Reality
South Korea's financial regulator gave lenders until Thursday to check every internet-facing system after hackers breached at least seven banks. Attackers entered through tools built for loan recruiters and staff, so the repair falls on how much credit data banks let outsiders see.
Reality
Scammers text people a fake Facebook Marketplace listing naming them as seller to provoke a 'that isn't me' reply, Malwarebytes reports. Any answer tells a sender who likely already has the name and number that the line is live.
Reality
Victims of breaches at seven Korean lenders, Shinhan Bank among them, are recruiting members for class-action damages suits. With suspects in earlier Korean data cases still uncaught, the lenders look like the only parties those suits can reach.
Reality
Korean regulators sent security orders to about 500 financial firms after the same attacker IP turned up in breaches at seven lenders. Almost every firm doing the emergency reviews has no reported breach, so the cost is shared across the sector.
Reality
Korea's Financial Services Commission ordered a sector-wide security review after suspected AI-agent hackers hit the country's five largest banks. The three biggest leaks ran through employee, sales and broker tools, so the review's cost lands on systems customers never see.
Reality
FSC chairman Lee Eok-won told Korean financial firms they will be held strictly accountable under law if the hacks that hit six lenders happen again. The threat covers future breaches, so for the firms already hit the cost so far is five requests, including security checks and customer compensation.
Reality
South Korea's Financial Services Commission will block outside access to staff and loan-broker web pages by default after leaks at six firms. Every page a firm keeps reachable now has to be justified as indispensable to services or work.
Reality
Invest · October 3, 2026 · Confirmed2 publishers
Security · September 29, 2026 · Confirmed7 publishers
Product · October 1, 2026 · Confirmed2 publishers
Security · October 1, 2026 · One report1 publisher
Security · October 1, 2026 · Confirmed2 publishers
Security · September 30, 2026 · One report1 publisher
Security · September 30, 2026 · Confirmed4 publishers
Security · September 28, 2026 · One report1 publisher
Security · September 29, 2026 · One report1 publisher
Security · September 28, 2026 · One report1 publisher
Security · September 28, 2026 · One report1 publisher
Security · September 28, 2026 · One report1 publisher
Invest · September 26, 2026 · One report1 publisher
Security · August 14, 2026 · Confirmed2 publishers
Security · August 14, 2026 · Confirmed3 publishers
Product · August 16, 2026 · Confirmed3 publishers
Security · August 17, 2026 · Confirmed5 publishers
Security · August 16, 2026 · Confirmed8 publishers
Security · August 18, 2026 · Confirmed5 publishers
Invest · September 26, 2026 · One report1 publisher
Product · September 2, 2026 · Confirmed7 publishers
Security · August 28, 2026 · Confirmed6 publishers
Security · September 1, 2026 · Confirmed7 publishers
Security · September 25, 2026 · One report1 publisher
Security · September 6, 2026 · Confirmed3 publishers
Product · September 11, 2026 · Confirmed5 publishers
Security · September 11, 2026 · Confirmed2 publishers
Product · September 12, 2026 · Confirmed2 publishers
Invest · September 12, 2026 · Confirmed5 publishers
Security · September 16, 2026 · Confirmed6 publishers
Security · September 17, 2026 · Confirmed6 publishers
Product · September 23, 2026 · One report1 publisher
Invest · September 21, 2026 · Confirmed2 publishers
Security · September 10, 2026 · One report1 publisher
Leadership · September 7, 2026 · Confirmed4 publishers
Security · August 26, 2026 · One report1 publisher