Every published advisory, newest first. Use search to filter by vendor, industry, country or severity.
Sony Network Communications’ official FAQ says it confirmed on 23 October 2026 that the So-net member database had been accessed from outside, that registered customers’ personal data had leaked as a result, and that it then took the server offline and immediately blocked the source, with no further leak confirmed after that .
DreamHost says it discovered on October 23 that an unauthorized third party had accessed the server running its web-based File Manager at files.
According to ITmedia, Iris Plaza announced on November 5 that following unauthorized access to an external cloud service used by the company, personal data of approximately 7.
According to Security NEXT, Doutor Coffee detected a system intrusion on October 20, 2026, potentially exposing personal data of current and former employees .
Website performance monitoring firm DebugBear said an unauthorized third party gained access to its domain registrar account and replaced its monitoring script with malicious code for about two hours, in what it assesses was a targeted, financially motivated attack on one customer website .
In FreeSWITCH 1.
PayCloud Holdings subsidiary Arara said its email delivery service Arara Message suffered unauthorized access; it first disclosed the incident on Oct 29, and its Nov 6 third report put the deduplicated number of taken (or possibly taken) email addresses at 81,329,467 .
According to CNBC, crypto exchange Binance said a security incident affected about $6.
According to Security NEXT, the official Fuji-Q Highland app and CLUB Fuji-Q membership website suffered a password list (credential stuffing) attack between September 4 and 7, 2026 .
According to Security NEXT, Giftee Group announced that its subsidiary Giftee suffered unauthorized access exploiting a system vulnerability on October 25, 2026, resulting in a third party illicitly issuing electronic gift vouchers .
Japanese flower-delivery operator Hana Cupid (花キューピット) said on October 28 that a third party gained unauthorized access to its management system on October 14-15, and that it confirmed during its investigation on October 19 that member data had leaked .
According to BleepingComputer, Japan Airlines said Amadeus notified it on October 23 of unauthorized access to its Passenger Service System between August 10, 2023 and September 23, 2026, exposing booking codes, names and flight details of about 92,000 JAL customers, plus emails, phones and passport numbers for about 2,000; ANA, Asiana and Korean Air also confirmed impact .
According to iThome, on October 27, biotech company Tien Liang Biotech (4127) issued a material announcement on the Market Observation Post System (MOPS), stating that it recently received consumer reports of suspected personal data leakage and that an investigation revealed an automated attack on the database provided by its outsourced service platform vendor, in which partial information was unlawfully scraped .
According to iThome, apparel and textile distributor Collins Co.
According to Security NEXT, Sony Network Communications announced that the So-net member database suffered an external intrusion on October 19, 2026, which was confirmed on October 23 .
According to Security NEXT, Rakuten Travel Xchange detected anomalies on certain overseas hotel booking pages on September 10, 2026, and an investigation confirmed a compromise .
On October 28, Orange Electronic issued a material information filing on MOPS stating that some of its local area network storage devices had been hit by a ransomware attack, and its cybersecurity team immediately activated defense mechanisms and network isolation .
Stockholm open-air museum Skansen said its ticketing provider Visit suffered a data breach that also affected several of Visit's other customers, and it was informed on October 27, 2026 .
On 2026-11-06, TWCERT/CC reported two heap-based buffer overflow vulnerabilities in WatchGuard Fireware OS, tracked as CVE-2026-112709 and CVE-2026-112710 (CVSS 4.
According to iThome, on October 23, fitness service company Power Wind Health Industry (8462) issued a material announcement on the Market Observation Post System (MOPS), stating that the outsourced vendor for its e-commerce platform experienced a cybersecurity incident and that members reported suspected leakage of e-commerce order data .