Ukraine's largest grocery chain ATB confirms cyberattack as extortionists demand $400,000
The DataSuckers group posted a ransom note on ATB's own website and claims to hold data on 7.9 million customers. ATB says customer data was not compromised.
Data Breaches
The latest cybersecurity news in Data Breaches.
Nikkei says hijacked employee account sent 9,000 phishing emails to contacts and sources
Japan's Nikkei disclosed that an attacker took over an employee's Microsoft 365 account and used it to send roughly 9,000 malicious emails. The Record reports a separate Google Workspace intrusion affected 1,646 people.
Denmark says 8.8 million people's records accessed in national population register breach
Danish authorities said unauthorized parties misused a private company's legitimate access to the Central Person Register to pull names, addresses and CPR numbers for about 8.8 million people.
Cyberattack on Polish invoicing platform Fakturownia exposes data of all accounts
Fakturownia, a Polish e-invoicing service with more than 600,000 customers, says an attacker exploited a vulnerability and copied account data, password hashes, API tokens and bank details.
Frontline Education breach exposes school district employee data
Edtech provider Frontline Education is notifying school districts that attackers exploited a third-party software flaw and stole employee data, including Social Security numbers.
MetaMask discloses infrastructure breach, exits Ethereum staking validators
MetaMask says a security incident hit part of its infrastructure and is exiting affected Ethereum validators in its non-custodial staking operations, while stating wallets face no immediate threat.
South Korea orders probe as data breaches hit Shinhan, KB Kookmin and other lenders
President Lee Jae Myung ordered a thorough investigation after a string of intrusions exposed data of more than 60,000 customers at South Korean banks and lenders.
Danish university DTU breach may expose CPR numbers of up to 200,000 people
Attackers used compromised accounts to access DTU's identity management system and download records going back to 2003, affecting up to 200,000 current and former users.
Akkoyunlar malware attack exposes data of an estimated 1,690 employees
Turkey's data protection authority KVKK says malware delivered through a third-party application hit Akkoyunlar, exposing employee identity, contact and audiovisual records.
Walke Sport reports breach at e-commerce provider affecting 3,642 customers
Turkey's data protection authority KVKK says a security incident at Walke's e-commerce infrastructure provider exposed customer names, emails, addresses and transaction data.
Unigen data breach exposes contact details and password values of 27,163 customers
Turkey's data protection authority says a flaw in third-party software libraries let attackers reach Unigen servers holding customer data, including stored password values.
Spirit Cultural Exchange breach exposes passports and criminal records of 7,591 applicants
KVKK says an unauthorized party used automated requests against unauthenticated URLs to download application documents, including passport details and criminal records, of 7,591 people.