MediumData breachActive
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
100 results
OTC-listed Shen's (8921) said in a November 10 filing that customers of its Jcolor e-commerce platform reported that a third party appears to have improperly obtained data and contacted them by email .
The Roundcube team released Webmail security updates 1.
BleepingComputer reports that a threat actor using the ShinyHunters handle, believed to be impersonating the extortion gang, is selling what they claim are records of 335 million Binance users on a new underground forum and asking $900,000 .
Taiwan Fund for Children and Families (TFCF) announced on November 7 that starting November 6, donors reported receiving fraudulent messages impersonating the foundation and directing them to add a fake official LINE account .
The Record reports that pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, offering cryptocurrency rewards for more details about them and their families .
According to fuitededonnées.
Japan's Doutor Coffee said on November 6 that its payment processor reported suspicious activity on its official online shop on October 28, and an investigation by its outsourced developer found a third party had accessed the site's admin panel on October 24-25 and exported and viewed member data .
York University in Toronto announced that an unauthorized actor accessed some online forms used by its departments and stole personal information, an incident it became aware of on October 25, 2026 .
Semiconductor packaging firm Xintec (3374) said in a Nov 6 MOPS filing that an unknown IP address intruded into its internal information systems .
The Japan Network Security Association (JNSA) announced on November 6 that its "Information Security Comprehension Test Service" suffered unauthorized third-party access, potentially exposing personal data for up to approximately 15,128 users .
According to iThome, on the evening of November 3, OTC-listed Microbio Co.
According to iThome, listed household cleaning products manufacturer Mao Bao Inc.
According to iThome, on November 4, restaurant group Wowprime (2727) issued a material announcement on the Market Observation Post System (MOPS), stating that the outsourced shopping website vendor for its subsidiary Wan Hsien experienced an information security incident .
According to Security NEXT, Denny's Japan discovered on October 30, 2026 that application-related systems had been breached by a third party, potentially exposing personal data of legacy app customers .
Kyocera Communication Systems (KCCS) issued a second update on November 6 stating that a web server operated by its subsidiary MOTEX suffered unauthorized access, potentially exposing customer information including company names, personal names, email addresses, and phone numbers .
According to Security NEXT, istyle confirmed on October 28, 2026, that @cosme suffered an intrusion exposing data for some shared-ID members .
Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .
According to Security NEXT, the Aichi Prefectural Mental Health and Welfare Center lost 79 mental disability certificate applications and 154 medical care for services and supports for persons with disabilities certificate applications, affecting 172 individuals after deduplication .
According to Security NEXT, Japan's Ministry of Economy, Trade and Industry (METI) announced that the Dentrinet website associated with the Electricity and Gas Market Surveillance Commission suffered a cyberattack in the early hours of October 27, 2026 .
According to Security NEXT, the official Fuji-Q Highland app and CLUB Fuji-Q membership website suffered a password list (credential stuffing) attack between September 4 and 7, 2026 .