{
 "response": [
  {
   "Event": {
    "uuid": "03d484ed-23ea-5bc4-8b24-689cc031a934",
    "info": "820,000 Sogo members at risk as department store, Chow Sang Sang hit by data breaches",
    "date": "2026-11-12",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/820000-sogo-members-at-risk-as-department-store-chow-sang-sang-hit-by-20261112/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.scmp.com/news/hong-kong/law-and-crime/article/3374260/hong-kong-sogo-data-breach-puts-personal-information-820000-members-risk",
      "comment": "South China Morning Post",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "e5be2210-f7e1-562b-8dc6-5c8f93a6d26a",
    "info": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns",
    "date": "2026-11-05",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"espionage\""
     },
     {
      "name": "misp-galaxy:threat-actor=\"Storm-0940\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"cambodia\""
     },
     {
      "name": "misp-galaxy:country=\"south korea\""
     },
     {
      "name": "misp-galaxy:country=\"thailand\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/hacking-on-autopilot-inside-artex-cybercrime-campaigns-20261105/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/",
      "comment": "Check Point Research",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/",
      "comment": "Microsoft Threat Intelligence",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (Check Point Research, Microsoft Threat Intelligence), Nov 5 to Nov 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea, Hong Kong, Thailand, Cambodia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "da6319a8-040d-543f-87ec-1541b38ab162",
    "info": "MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed",
    "date": "2026-11-03",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-p-20261103/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-potentially-exposed",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/moneysmart-data-breach-security-incident-6515356",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://hongkongfp.com/2026/11/04/finance-portal-moneysmart-apologises-after-users-sensitive-data-accessed-in-it-system-hack/",
      "comment": "HK Free Press",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 3 articles in 3 outlets (Channel News Asia, HK Free Press, The Straits Times), Nov 3 to Nov 4, 2026. Type: data breach; sectors: financial services, technology. Asia-Pacific countries affected: Singapore, Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "07652e75-0f2f-5b22-a09f-25d40652b3a2",
    "info": "HKEAA reports international exam data leak",
    "date": "2026-10-31",
    "threat_level_id": "3",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/hkeaa-reports-international-exam-data-leak-20261031/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://news.rthk.hk/rthk/en/component/k2/1876038-20261031.htm",
      "comment": "RTHK English News",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (RTHK English News), Oct 31, 2026. Type: data breach. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "a967416f-84ac-5091-9236-eec7739030c4",
    "info": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack",
    "date": "2026-10-30",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"japan\""
     },
     {
      "name": "misp-galaxy:country=\"malaysia\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:country=\"thailand\""
     },
     {
      "name": "misp-galaxy:sector=\"Transportation\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack",
      "comment": "South China Morning Post",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516",
      "comment": "Malay Mail",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.matichon.co.th/economy/news_5969157",
      "comment": "Matichon",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach",
      "comment": "Bangkok Post",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe",
      "comment": "The Thaiger",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.matichon.co.th/economy/news_5969937",
      "comment": "Matichon",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "cec9f081-da7e-5bf6-bac5-728ab8fa08b4",
    "info": "Over 1,600 affected in airline, retailer data breaches",
    "date": "2026-10-27",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:sector=\"Transportation\""
     },
     {
      "name": "misp-galaxy:sector=\"Retail\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/over-1600-affected-in-airline-retailer-data-breaches-20261027/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://news.rthk.hk/rthk/en/component/k2/1875475-20261027.htm",
      "comment": "RTHK English News",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://hongkongfp.com/2026/10/28/data-breach-at-hong-kong-airlines-yoho-and-broadway-affects-1600-customers/",
      "comment": "HK Free Press",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (HK Free Press, RTHK English News), Oct 27 to Oct 28, 2026. Type: data breach; sectors: transportation, retail. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "7860c037-4c4a-5d32-a1a7-51d89dcffff5",
    "info": "2,000 customers of Hong Kong Airlines, 2 appliance shops, get scam calls after data breach",
    "date": "2026-10-27",
    "threat_level_id": "2",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:sector=\"Transportation\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/2000-customers-of-hong-kong-airlines-2-appliance-shops-get-scam-calls-20261027/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.scmp.com/news/hong-kong/law-and-crime/article/3372248/2000-customers-hong-kong-airlines-2-appliance-shops-get-scam-calls-after-data-breach",
      "comment": "South China Morning Post",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 27, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  }
 ]
}