Tag

Data Breach

All articles tagged with #data breach

Japan Declares Cyber Emergency as AI-Enabled Attacks Hit Major Firms
technology1 hour ago

Japan Declares Cyber Emergency as AI-Enabled Attacks Hit Major Firms

Japan has declared a cybersecurity emergency following a surge in attacks on major corporations, with experts linking the escalation to AI-enabled hacking. Over 20 firms, including Lawson and Times Car, have reported breaches exposing tens of millions of customer records. Regulators are now restricting ID verification methods, while police report a 50% rise in suspicious pre-attack scans. The crisis mirrors recent AI-driven banking breaches in South Korea.

cybersecurity2 days ago

FBI Arrests Canadian Cyber Negotiator in ShinyHunters Data Breach Case

Federal authorities arrested Edward Dubrovsky, a Canadian cybersecurity executive, in connection with the ShinyHunters hacking group’s recent breach of FBI personnel data. Dubrovsky, who previously advised victims on ransomware negotiations, faces charges for conspiracy to extort and interfering with commerce. While the timing aligns with a major FBI data leak, it remains unclear if he is directly linked to that specific incident or other ongoing investigations.

South Korea declares AI-assisted bank breaches a national security priority
cybersecurity4 days ago

South Korea declares AI-assisted bank breaches a national security priority

South Korean President Lee Jae Myung warned that AI models were likely used in a recent wave of cyberattacks against seven financial institutions, exposing customer data but not stealing funds. Authorities suspect attackers targeted less secure third-party portals rather than core banking systems, with evidence pointing to the use of the open-source AI tool Artex. The government has launched a full-scale police investigation and a 24-hour emergency response, urging the sector to develop AI-based defensive measures to counter this 'completely new kind of crisis.'

BYOD hackers claim live access to Trump Mobile after exposing 3,615 users' data
security5 days ago

BYOD hackers claim live access to Trump Mobile after exposing 3,615 users' data

A hacking group called BYOD claims to have breached Trump Mobile, exposing the personal data of 3,615 individuals. The leaked information includes names, home addresses, email addresses, phone numbers, and order details. The group states they gained access by installing a remote access trojan on an employee of Liberty Mobile, the carrier powering Trump Mobile's network. Cybernews researchers confirmed the leaked samples appear legitimate and are not linked to previous breaches. Notably, the data includes information for Eric Brunnett, the chief information technology officer at The Trump Organization. Trump Mobile has not yet responded to requests for comment.

FBI Blames Accenture Contractor for ShinyHunters Breach of Employee Data
cybersecurity5 days ago

FBI Blames Accenture Contractor for ShinyHunters Breach of Employee Data

The FBI has removed an Accenture contractor after a failure to apply a security patch allowed the ShinyHunters hacking group to breach the bureau's job portal. The incident exposed sensitive personal data of nearly all FBI employees and over 8,000 local law enforcement officials. While the FBI attributes the breach to a third-party platform failure, internal sources describe it as an act of incompetence involving misconfigured internet-facing systems.

Asos shares plunge 14% after hackers blast 'compromise' alert to millions of app users
technology5 days ago

Asos shares plunge 14% after hackers blast 'compromise' alert to millions of app users

UK fashion giant Asos is investigating a cyber incident after an unauthorised push notification warned customers that its data storage system had been 'fully compromised.' The retailer confirmed that basic personal details, such as names and contact information, may have been accessed, but stated that payment card data and passwords were not affected. The incident, which involved a link to a Telegram channel operated by a group calling itself the 'Xuanye Group,' caused Asos shares to drop by nearly 10% by the close of trading. The National Cyber Security Centre is assisting the investigation, while experts warn of potential follow-up phishing attacks.

Asos App Hijacked for Public Extortion, Triggering 10% Share Drop
technology-and-cybersecurity5 days ago

Asos App Hijacked for Public Extortion, Triggering 10% Share Drop

Asos confirmed that hackers sent an unauthorized notification to its app users, claiming to have compromised its Snowflake data instance. The message, which demanded engagement via a Telegram channel, caused a 10% drop in share value. The retailer states that basic personal information may have been accessed, but payment details and passwords remain secure. The National Cyber Security Centre is assisting with the investigation.

Southern Company Breach Exposes Data of 400,000 Utility Customers
cybersecurity6 days ago

Southern Company Breach Exposes Data of 400,000 Utility Customers

Southern Company confirmed that an unauthorized third party accessed limited personal data for approximately 400,000 customers across its utility subsidiaries. The breach affected roughly 300,000 Georgia Power accounts and 100,000 Alabama Power accounts. Exposed information included names, addresses, phone numbers, emails, and the last four digits of Social Security numbers, but not bank or payment card details. The company has stopped the intrusion, engaged law enforcement, and is offering one year of free credit monitoring through Equifax.

Pentagon breach exposed sensitive data of nearly 3 million people
security13 days ago

Pentagon breach exposed sensitive data of nearly 3 million people

A nine-month data breach at the Defense Manpower Data Center (DMDC) exposed the unencrypted personal information of nearly 3 million current and former US military personnel. The intrusion began in October 2025 but was not discovered until July 2026. While the Pentagon states there is no evidence of data misuse, experts warn the exposed 'occupational specialty' data could aid foreign adversaries in targeting US troops, particularly amid ongoing conflicts in the Middle East.

Cloudflare patches cross-tenant flaw that exposed residual disk data to paying customers
cybersecurity14 days ago

Cloudflare patches cross-tenant flaw that exposed residual disk data to paying customers

Cloudflare has patched a vulnerability in its Containers and Sandboxes services that allowed customers with a Workers Paid plan to read residual data from other customers' containers on the same physical host. The flaw, reported by security researcher Oren Yomtov of Accomplish on September 4, 2026, stemmed from a shared storage pool that skipped zeroing reused 64 KiB blocks. While the researchers found leftover data on 18 of 24 container placements, Cloudflare confirmed no actual customer data was exposed and that no malicious exploitation occurred. The company completed mitigation by September 19, 2026, requiring no action from users.

Pentagon admits nine-month breach exposed unencrypted military data
national-security15 days ago

Pentagon admits nine-month breach exposed unencrypted military data

A nine-month data breach at the Defense Manpower Data Center (DMDC) exposed the unencrypted personal information, including Social Security numbers, of potentially four million current and former US military personnel. The intrusion began in October 2025 but was not discovered until July 2026. While the Pentagon states there is no evidence of data misuse, experts warn the exposed 'occupational specialty' data could aid foreign adversaries in targeting US troops, particularly amid ongoing conflicts in the Middle East.