MediumData breachMonitoring· updated Nov 11
Nikkei Inc.
680 results
Nikkei Inc.
According to iThome, on October 16, e-commerce technology service provider 91APP (6741) issued a material announcement on the Market Observation Post System (MOPS), stating that its Commerce Cloud database was found two days earlier (October 14) to have suffered an automated attack in which attackers unlawfully scraped partial information; 91APP commissioned an independent third-party cybersecurity organization to assist with the investigation, filed a police report, implemented necessary protective measures to mitigate impact, and notified relevant regulatory authorities in accordance with the law, bringing the attack under control .
According to Impress Watch, Japanese software maker Sourcenext announced on October 15 that a third party gained unauthorized access and that 22,519,960 customer records may have leaked .
According to Impress Watch, BK Japan, which runs Burger King in Japan, announced on October 15 that a third party accessed its official app member system without authorization, leaking about 11.
Taiwanese cloud deployment platform Zeabur published its preliminary investigation report: between October 14 and 15 (UTC), attackers used leaked internal credentials to access shared clusters, certain dedicated servers, and internal systems, ultimately reading the platform database and exposing 3,218,965 service environment variables and 321,810 user account records .
Dutch retail group Ahold Delhaize announced on October 12, 2026, that it had detected a security issue within its network and taken precautionary measures, including taking certain systems offline to protect its infrastructure, while noting that physical stores remained open .
An alert from France's CERT-FR warned of widespread compromises affecting Danfoss AK-SM/AK-SC and Copeland/Dixell XWEB refrigeration remote controllers, with attackers primarily exploiting internet-exposed management interfaces .
According to iThome, on October 9, IT services company Wistron ITS (4953) issued a material announcement on the Market Observation Post System (MOPS), stating that it detected abnormal access to internal systems on October 8 and confirmed through investigation that partial employee information and business contact details may have been exposed .
BOOKOFF Group announced on October 9 that a third party accessed its subsidiary's member management system without authorization, leaking up to about 6.
Switzerland's SMG group announced on October 9 that its marketplace Ricardo detected suspicious server activity on October 7 and found personal data of about 890,000 user accounts was exposed; the vulnerability that allowed the access has been fixed .
Japan's Adventure Inc.
Fireworks AI updated its October security incident bulletin on November 9, saying that beyond previously known stored secrets it found impact to account and billing information, plus secrets, datasets and incomplete models for a limited set of accounts, with evidence pointing to a financially motivated cybercriminal group engaged in LLMJacking .
According to The Business Standard, citing a statement from Pathao, a cybersecurity incident on October 4, 2026 disrupted platform services and allowed malicious actors to obtain certain user information .
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
Switzerland's FDPIC said PK Softech AG reported a cyberattack on its IT infrastructure on October 8, with data extracted from several pension funds including the federal pension fund Publica, and it opened a formal investigation on October 22 .
According to INTERNET Watch, Japan's Daiichi Kosho announced on October 8 that a PC of an employee at Nippon Columbia Group, which handles personal data on its behalf, was infected with malware on October 1-2, putting names, gender, birth dates, emails and phones of about 8,724,000 Big Echo and other store members and staff at risk, without passwords .
According to INTERNET Watch, Japanese convenience store chain Lawson announced on October 8 that an October 7 investigation found unauthorized access to Lawson ID from September 12 to 14 and to Lawson app reservations on September 17 .
According to iThome, after game software developer International Games System (IGS, 3293) announced in late September that its operational IT equipment was breached by an unknown IP address, the company issued a follow-up material announcement on the Market Observation Post System (MOPS) on October 7 explaining that the incident resulted in the leakage of game operational data, including partial player names, phone numbers, and email addresses; the company has notified personal data protection regulators in accordance with the law, informed affected individuals via email and SMS, and provided dedicated customer support contact information .
According to iThome, on the night of October 7, medical supplies retailer MedFirst Healthcare Services (4175) issued a material announcement on the Market Observation Post System (MOPS), stating that a small number of consumers reported suspected improper acquisition of data from a website platform managed by an outsourced vendor, followed by email contact with consumers .
Openwave Messaging says Webtop Media Transcoder before 1.