Hub: Ransomware & Cyber Attacks - Page 5

Travel site skyticket says about 14.64 million records were taken. Bookoff says up to about 6.43 million, and Times Car, Lawson, karaoke firm Daiichikosho, H.I.S. and resort operator Resorttrust have also disclosed leaks. What each company has confirmed, what Kyodo reports, and what it means for customers.

Three newly disclosed incidents: Ginkgo Bioworks says an outsider accessed data from cloud environments tied to its former biosecurity business; Turkey's data regulator says a ransomware attack on Yıldız Technical University may affect about 140,000 students and 4,500 staff; and Green Clinic in Ruston, Louisiana, is rebuilding after ransomware locked its records. What each organisation has confirmed.

A ransomware attack on SoftBank's IDC Frontier knocked out services for 495 customers, halting Nissui's logistics and Ibaraki's websites. Japan's police say Qilin has hit 53 Japanese firms. MrMax, GMO's infoQ and Nikkei disclosed breaches; Asos says hackers took detailed customer profiles; Oracle Health's count may near 20 million; and Denmark says its population register was looked up for 8.8 million people. What each organisation confirmed.

Arizona’s courts confirm data on 1.3 million people was copied; ccTLD registry hijacks let attackers obtain certificates for Google and other domains; exploitation attempts follow a public Atlassian PoC; Yoido Full Gospel Church confirms 850,000 members’ data exposed; the Double Counter Discord bot is breached; a MonsterCloud owner is charged; and the US offers $10m for accused HAFNIUM hacker Zhang Yu. Confirmed vs alleged, case by case.

From FortiBleed credential harvesting and ASOS customer notifications to UIC ransomware, Citrix NetScaler KEV deadlines and a new NetScaler flaw, CVE-2026-107406 (patch out; no known exploitation), Southern Company portal access and Advantest’s delayed PII notices — what is confirmed, what is alleged, and the patterns linking initial access to disclosure timing.

South Korea’s president ordered a full response after customer data was exposed at seven financial firms, saying some cases showed possible AI use. Police have formed a 28-member investigation team.

Chrome Holding, formerly 23andMe, will pay California $6.01m and drop out of consumer business for five years, if a bankruptcy judge approves the deal.

A US judge has ordered Meta to name everyone who approved obtaining shadow libraries used for AI training. It is a discovery order, not a liability ruling.

Matternet and Apian have started drone deliveries of children's pathology samples at Great Ormond Street Hospital, cutting delivery times by up to 90%.