20 results
According to FTV News, Kang Chiao International School's Linkou campus confirmed to parents that its network systems were breached, and several parents and staff received threatening emails signed by the "Osiris ransomware group" .
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
Vanderbilt University said on Nov 9 it is responding to an active cybersecurity incident that may impact university devices, systems and cloud-based services, and that its IT team is investigating and working to contain it .
York University in Toronto announced that an unauthorized actor accessed some online forms used by its departments and stole personal information, an incident it became aware of on October 25, 2026 .
Security firm Todyl says that since Nov 1 an attacker has been using stolen, still-valid credentials to sign in to MSPs' Microsoft 365 and Azure environments as their own applications, targeting about 45 app registrations at roughly 18 organizations with more than 33 authenticating successfully .
According to reports by the United Daily News and China Times, a written operational report submitted by the National Security Bureau (NSB) to the Legislative Yuan on October 20 stated that through September, Taiwan's Government Service Network (GSN) experienced an average of over 2.
Mathspace said attackers exploited a vulnerability in its self-hosted Metabase internal reporting system to gain admin access, with access dating back to August 10 and data downloaded from its Australian reporting database on August 27; Metabase had released patches on August 6, but Mathspace only updated on August 29 .
According to fuitededonnées.
According to Yonhap News TV, Day One Company, operator of Fastcampus and other online education brands, said a GitHub master account key was stolen and used for a first intrusion into its services on May 9, 2026 .
ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system .
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .
According to BleepingComputer, ShinyHunters leaked data from 13.
i-Scream Media said it confirmed on March 8, 2026 that some members' personal data had leaked, reported it to KISA and the PIPC, and is still investigating when and how .
According to LOG, citing a notification from Turkey's Personal Data Protection Authority (KVKK), systems at a company processing data on behalf of Istanbul Gedik University suffered unauthorized access .
According to Security NEXT, on the evening of December 17, 2024, a prefectural high school in Saitama Prefecture uploaded a seminar video intended only for students but mistakenly set its visibility permissions to public .
According to Security NEXT, Schoo announced that an error in trial account management for the group learning feature of Schoo for Business allowed certain users to view personal information of other users .
According to Security NEXT, JPCERT/CC warned in 2024 against focusing solely on VPN vulnerabilities, citing a 2023 watering hole attack targeting university-affiliated individuals .
According to Infobae, the Peruvian University of Applied Sciences (UPC) experienced a security incident involving student personal data .
According to Computer Weekly, the City of Helsinki municipal government announced in 2024 that a database belonging to its Education Division had been breached .
Nordic IT services provider Tietoevry announced that one of its data centers in Sweden was hit by a ransomware attack during the night of January 19–20, 2024 .