HighData breachMonitoringMedia reported· updated Nov 7
According to Security NEXT, Matsuya Foods discovered on October 28, 2026, that its official app management system was breached by a third party, resulting in a leak of member information .
314 results
According to Security NEXT, Matsuya Foods discovered on October 28, 2026, that its official app management system was breached by a third party, resulting in a leak of member information .
US fashion e-retailer Revolve said in an SEC 8-K filed Oct 29 that an unauthorized actor accessed its systems and may have obtained, through automated means, names, contact details, payment card numbers and expiration dates of customers who saved payment information in their accounts .
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
On October 30, Taiwan Broadband Communications (TBC) issued a material information filing on MOPS stating that IT systems of the company and its subsidiary were attacked by unknown external hackers, resulting in malicious encryption of files on certain servers and affecting some internal operational systems .
According to ITmedia, Iris Plaza announced on November 5 that following unauthorized access to an external cloud service used by the company, personal data of approximately 7.
According to Security NEXT, Doutor Coffee detected a system intrusion on October 20, 2026, potentially exposing personal data of current and former employees .
PayCloud Holdings subsidiary Arara said its email delivery service Arara Message suffered unauthorized access; it first disclosed the incident on Oct 29, and its Nov 6 third report put the deduplicated number of taken (or possibly taken) email addresses at 81,329,467 .
According to CNBC, crypto exchange Binance said a security incident affected about $6.
According to Security NEXT, the official Fuji-Q Highland app and CLUB Fuji-Q membership website suffered a password list (credential stuffing) attack between September 4 and 7, 2026 .
According to Security NEXT, Giftee Group announced that its subsidiary Giftee suffered unauthorized access exploiting a system vulnerability on October 25, 2026, resulting in a third party illicitly issuing electronic gift vouchers .
Japanese flower-delivery operator Hana Cupid (花キューピット) said on October 28 that a third party gained unauthorized access to its management system on October 14-15, and that it confirmed during its investigation on October 19 that member data had leaked .
According to iThome, apparel and textile distributor Collins Co.
According to Security NEXT, Sony Network Communications announced that the So-net member database suffered an external intrusion on October 19, 2026, which was confirmed on October 23 .
According to Security NEXT, Rakuten Travel Xchange detected anomalies on certain overseas hotel booking pages on September 10, 2026, and an investigation confirmed a compromise .
On October 28, Orange Electronic issued a material information filing on MOPS stating that some of its local area network storage devices had been hit by a ransomware attack, and its cybersecurity team immediately activated defense mechanisms and network isolation .
Mirae Asset Life said it detected anomalies in some systems on October 25, 2026, recognised a cyber intrusion, and confirmed a personal data leak early on October 26 after analysis with an outside firm .
On 2026-11-06, TWCERT/CC reported multiple high-risk vulnerabilities in HPE Networking AOS-10 and AOS-8, including authentication bypass, buffer overflow, SQL injection, command injection, and sensitive information disclosure .
Quest Diagnostics told the SEC it learned on October 21, 2026 of unauthorized access to its Quanum LSM system, which clients use to place test orders and look up results, and believes an unauthorized party accessed certain patient records .
According to ITmedia, Capcom announced on October 22 that its CAPCOM ID membership service suffered unauthorized access that leaked 11,774,247 records worldwide, after it found traces on the 19th and blocked the source .
According to iThome, on October 21, Gourmet Master Co.