Railway Says Intruder May Have Decrypted Customer Secrets
October 23, 2026
Railway detected anomalous activity on systems storing customer environment variables and urged all users to rotate secrets; crypto wallet thefts
Data Security
Railway Says Intruder May Have Decrypted Customer Secrets
Railway detected anomalous activity on systems storing customer environment variables and urged all users to rotate secrets; crypto wallet thefts were reported.
WhiteArmour Claims Breach of Disney Staff Directory
A hacker group called WhiteArmour says it holds Disney's internal staff directory and posted a sample of nearly 2,800 records. Disney has not commented.
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its extortion site.
23andMe Successor Settles With California for $6M Over Breach
Chrome Holding Company, formerly 23andMe, will pay California $6 million over a 2023 breach that exposed data on nearly 7 million people, pending approval.
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit data on 3,300 people, mostly ...
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has not confirmed.
State Bank of India Confirms Data Leak of 3,897 Customer Records
State Bank of India told stock exchanges it lost certain data after 3,897 customer records appeared on the dark web in a set of about ...
Conduent Agrees to $80M Settlement Over Breach of 62M People
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health data of about 62 million ...
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
An intruder reached a legacy OpenCode system, possibly exposing OpenAI, Anthropic and Google API keys saved by 1.4% of Console users; some report charges.
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
ConnectWise Cloud Backup and two linked services stay offline as Huntress confirms attackers signed in to 173 Microsoft 365 tenants with a stolen app secret.
WhiteArmour Claims Breach of Disney Staff Directory
October 22, 2026
A hacker group called WhiteArmour says it holds Disney’s internal staff directory and posted a sample of nearly 2,800 records.
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
October 21, 2026
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its
23andMe Successor Settles With California for $6M Over Breach
October 21, 2026
Chrome Holding Company, formerly 23andMe, will pay California $6 million over a 2023 breach that exposed data on nearly 7
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
October 21, 2026
The UK ICO reprimanded Data Cymru and Ogi Networks after a test account with the password Password1 let ransomware hit
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
October 21, 2026
An unverified claim on a hacker marketplace says NBCUniversal production plans, budgets and tax-credit applications were stolen; the company has
State Bank of India Confirms Data Leak of 3,897 Customer Records
October 21, 2026
State Bank of India told stock exchanges it lost certain data after 3,897 customer records appeared on the dark web
Conduent Agrees to $80M Settlement Over Breach of 62M People
October 21, 2026
Conduent will pay $80 million to settle a class action over a 2024 cyber incident that exposed personal and health
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
October 19, 2026
An intruder reached a legacy OpenCode system, possibly exposing OpenAI, Anthropic and Google API keys saved by 1.4% of Console
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
October 19, 2026
ConnectWise Cloud Backup and two linked services stay offline as Huntress confirms attackers signed in to 173 Microsoft 365 tenants
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.