{ "type": "bundle", "id": "bundle--06718424-b7db-4491-bf86-58b0a7dadff2", "objects": [ { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "identity", "spec_version": "2.1", "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "SecurityStudies.info", "identity_class": "organization", "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8ad2b15f-6e0f-5e73-81aa-0bd1fb461e66", "created": "2026-11-12T00:02:27.472Z", "modified": "2026-11-13T00:02:47.876Z", "name": "Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise", "description": "Detected automatically from 1 article in 1 outlet (Dark Reading), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japan-pushes-emergency-funding-for-cybersecurity-as-ai-assisted-breach-20261112/" }, { "source_name": "Dark Reading", "url": "https://www.darkreading.com/cybersecurity-operations/japan-emergency-funding-cybersecurity-ai-assisted-breaches", "description": "Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Japan", "country": "JP" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--25ef2135-bc18-5c14-80f2-725b0754109a", "created": "2026-11-12T00:02:27.472Z", "modified": "2026-11-12T00:02:27.472Z", "relationship_type": "related-to", "source_ref": "incident--8ad2b15f-6e0f-5e73-81aa-0bd1fb461e66", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4a720040-e5b1-5086-a514-068810e13af7", "created": "2026-11-12T00:02:27.460Z", "modified": "2026-11-13T00:02:47.866Z", "name": "Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Nov 11, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattacks-hit-a-third-of-japan-firms-or-their-service-providers-thi-20261111/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/cyberattacks-hit-third-japan-firms-or-their-service-providers-year-reuters-poll-6544086", "description": "Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e3ea6da-f9c3-5280-b115-1ea114fa0246", "created": "2026-11-12T00:02:27.460Z", "modified": "2026-11-12T00:02:27.460Z", "relationship_type": "related-to", "source_ref": "incident--4a720040-e5b1-5086-a514-068810e13af7", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--256e7afa-4394-5775-a2d4-f24fe398aecb", "created": "2026-11-10T16:32:08.709Z", "modified": "2026-11-13T00:02:47.722Z", "name": "Unauthorized access to Nitori; possibility of up to 37.62 million pieces of personal information leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 9, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 37,620,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/3762-20261109/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261109de73045", "description": "ニトリに不正アクセス 最大3762万件の個人情報が流出の可能性" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--33baf61a-c778-576a-8422-34d65d60cfc1", "created": "2026-11-10T16:32:08.709Z", "modified": "2026-11-10T16:32:08.709Z", "relationship_type": "related-to", "source_ref": "incident--256e7afa-4394-5775-a2d4-f24fe398aecb", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bbdd10ae-6a90-5348-a4bb-88035c120d7e", "created": "2026-11-10T16:32:08.724Z", "modified": "2026-11-13T00:02:47.738Z", "name": "SEGA newsletter data breach exposes 2.2 million email addresses", "description": "Detected automatically from 1 article in 1 outlet (BleepingComputer), Nov 9, 2026. Type: data breach; sectors: media. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 2,200,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sega-newsletter-data-breach-exposes-22-million-email-addresses-20261109/" }, { "source_name": "BleepingComputer", "url": "https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/", "description": "SEGA newsletter data breach exposes 2.2 million email addresses" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Media" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--97e89335-0775-5af3-96fd-c79e32ff584b", "created": "2026-11-10T16:32:08.724Z", "modified": "2026-11-10T16:32:08.724Z", "relationship_type": "related-to", "source_ref": "incident--bbdd10ae-6a90-5348-a4bb-88035c120d7e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da67f9be-8ce0-5fe9-ab46-4b945ed323fa", "created": "2026-11-10T16:32:08.704Z", "modified": "2026-11-13T00:02:47.711Z", "name": "Unauthorized access to 'RAKSUL'; risk of leakage of printing data and other information", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 9, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261109/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261109de72879", "description": "「ラクスル」に不正アクセス 印刷データなど漏えいおそれ" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7f919939-6c72-5c15-a114-f64fba4ee1bd", "created": "2026-11-10T16:32:08.704Z", "modified": "2026-11-10T16:32:08.704Z", "relationship_type": "related-to", "source_ref": "incident--da67f9be-8ce0-5fe9-ab46-4b945ed323fa", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--40183757-45cf-5388-99e8-de1c0b33bf46", "created": "2026-11-11T20:36:59.807Z", "modified": "2026-11-13T00:02:47.689Z", "name": "Iris Ohyama data cloud breach exposes info of 7.7 million customers", "description": "Detected automatically from 1 article in 1 outlet (BleepingComputer), Nov 8, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 7,700,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers-20261108/" }, { "source_name": "BleepingComputer", "url": "https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/", "description": "Iris Ohyama data cloud breach exposes info of 7.7 million customers" } ], "x_securitystudies_occurred_on": "2026-11-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c810fc0e-9a74-5dfe-af44-1f9764a95c9a", "created": "2026-11-11T20:36:59.807Z", "modified": "2026-11-11T20:36:59.807Z", "relationship_type": "related-to", "source_ref": "incident--40183757-45cf-5388-99e8-de1c0b33bf46", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e1bce9d5-7544-5ad3-9509-b73b2b07b962", "created": "2026-11-10T16:32:08.673Z", "modified": "2026-11-13T00:02:47.662Z", "name": "Double Trouble: Japan Data Breaches Expose 260 Million Personal Info Records", "description": "Detected automatically from 1 article in 1 outlet (Nippon.com), Nov 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 260,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/double-trouble-japan-data-breaches-expose-260-million-personal-info-re-20261106/" }, { "source_name": "Nippon.com", "url": "https://www.nippon.com/en/articles/-/56881", "description": "Double Trouble: Japan Data Breaches Expose 260 Million Personal Info Records" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5de1800f-de37-5381-80bf-2f571954e44a", "created": "2026-11-10T16:32:08.673Z", "modified": "2026-11-10T16:32:08.673Z", "relationship_type": "related-to", "source_ref": "incident--e1bce9d5-7544-5ad3-9509-b73b2b07b962", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9db6fd6d-46ec-50fe-bc83-1670e3002c43", "created": "2026-11-10T16:32:08.638Z", "modified": "2026-11-13T00:02:47.620Z", "name": "Possibility of unauthorized access to Docomo; online services suspended", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 5, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261105/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261105de70776", "description": "ドコモに不正アクセスの可能性 オンラインサービス停止" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d0da8cdf-7461-5985-b508-bcb6c1772d30", "created": "2026-11-10T16:32:08.638Z", "modified": "2026-11-10T16:32:08.638Z", "relationship_type": "related-to", "source_ref": "incident--9db6fd6d-46ec-50fe-bc83-1670e3002c43", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--25313f72-c634-51e7-8da5-ef48f0cd9f4a", "created": "2026-11-11T20:35:29.858Z", "modified": "2026-11-13T00:02:47.609Z", "name": "Japan Post partially suspends overseas delivery service 'UGX' due to cyberattack", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 4, 2026. Title machine-translated from Japanese. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japan-post-partially-suspends-overseas-delivery-service-ugx-due-to-cyb-20261104/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261105de70691", "description": "日本郵便 サイバー攻撃で海外向け配送「UGX」一部停止" } ], "x_securitystudies_occurred_on": "2026-11-04", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3351c250-50a5-58f0-a06f-0fea99ae13ce", "created": "2026-11-11T20:35:29.858Z", "modified": "2026-11-11T20:35:29.858Z", "relationship_type": "related-to", "source_ref": "incident--25313f72-c634-51e7-8da5-ef48f0cd9f4a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--39d3f6b1-b126-5c8e-b9cb-e4794959e4bb", "created": "2026-11-10T16:32:08.577Z", "modified": "2026-11-13T00:02:47.564Z", "name": "More data breaches hit Japan, including leak of 77 million email addresses", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Nov 3, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 77,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-data-breaches-hit-japan-including-leak-of-77-million-email-addres-20261103/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/11/03/japan/society/japan-firms-report-more-data-breaches/", "description": "More data breaches hit Japan, including leak of 77 million email addresses" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--31dcaae4-37ab-5ba6-903a-98120c000eae", "created": "2026-11-10T16:32:08.577Z", "modified": "2026-11-10T16:32:08.577Z", "relationship_type": "related-to", "source_ref": "incident--39d3f6b1-b126-5c8e-b9cb-e4794959e4bb", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1cf42061-42fa-5d7a-a7d3-9c6273a9b946", "created": "2026-11-10T16:32:08.533Z", "modified": "2026-11-13T00:02:47.499Z", "name": "Nojima leaks approximately 7 million pieces of personal information due to unauthorized access", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 2, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 7,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/700-20261102/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261102de69780", "description": "ノジマ 不正アクセスで約700万件の個人情報漏えい" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a7931946-861b-5501-9929-d0c2e95d1133", "created": "2026-11-10T16:32:08.533Z", "modified": "2026-11-10T16:32:08.533Z", "relationship_type": "related-to", "source_ref": "incident--1cf42061-42fa-5d7a-a7d3-9c6273a9b946", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b63138ca-e9ab-53b1-bff9-5c5113d97398", "created": "2026-11-10T16:32:08.542Z", "modified": "2026-11-13T00:02:47.518Z", "name": "Potential leak of personal information for up to approximately 5.49 million 'NetMile' users", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 2, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,490,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/549-20261102/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261102de69784", "description": "「ネットマイル」 最大で約549万人分の個人情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6b4a6cf0-573b-5895-9ed8-7bc42718856f", "created": "2026-11-10T16:32:08.542Z", "modified": "2026-11-10T16:32:08.542Z", "relationship_type": "related-to", "source_ref": "incident--b63138ca-e9ab-53b1-bff9-5c5113d97398", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d8d6da77-9ccb-5d99-b369-7daa49c6ed19", "created": "2026-11-10T16:32:08.564Z", "modified": "2026-11-13T00:02:47.552Z", "name": "Suntory, other companies report personal data leaked", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/suntory-other-companies-report-personal-data-leaked-20261102/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/business/suntory-holdings-says-personal-data-of-around-100-000-people-leaked", "description": "Suntory, other companies report personal data leaked" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1dcba1bf-2ab7-501a-8a9c-32ab911330dc", "created": "2026-11-10T16:32:08.564Z", "modified": "2026-11-10T16:32:08.564Z", "relationship_type": "related-to", "source_ref": "incident--d8d6da77-9ccb-5d99-b369-7daa49c6ed19", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3", "created": "2026-11-10T16:32:08.225Z", "modified": "2026-11-13T00:02:47.484Z", "name": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds", "description": "Detected automatically from 2 articles in 2 outlets (NHK, South China Morning Post), Nov 1 to Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-behind-cyberattacks-in-japan-security-firm-20261020/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/east-asia/china-ai-tool-artex-japan-cyberattack-6474611", "description": "Chinese AI tool behind cyberattacks in Japan: Security firm" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update2-security-firm-finds-china-linked-ai-agent-behind-japan-cyberattacks", "description": "Security firm finds China-linked AI agent behind Japan cyberattacks" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261021de62520", "description": "岩井コスモ証券 不正アクセスで顧客が意図しない売買注文" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/world/archives/2026/10/21/2003866365", "description": "China-made AI tool behind cyberattacks in Japan, GMO says" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261023de64076", "description": "GMO FX取引のサーバーに不正アクセス 口座で不正操作の相談も" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261024de64764", "description": "GMO 不正アクセス問題で政府に「能動的サイバー防御」を要請" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5618952", "description": "日本GMO外匯交易伺服器遭駭 股價重挫逾15％" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/28/japan/crime-legal/gmo-hacker-website-shutdown/", "description": "Website used by hackers to leak info shut down, GMO says" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261101de69281", "description": "GMO傘下 顧客情報漏えい 9年近く外部から取得可能な状態" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/asia/east-asia/article/3372913/north-korea-hackers-behind-japans-massive-gmo-data-leak-investigation-finds", "description": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds" } ], "x_securitystudies_occurred_on": "2026-11-01", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ee74280c-8486-5030-b349-8f43972feab0", "created": "2026-11-10T16:32:08.225Z", "modified": "2026-11-10T16:32:08.225Z", "relationship_type": "related-to", "source_ref": "incident--b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6930bf9a-1ff8-573e-aeef-2212c782a9a9", "created": "2026-11-10T16:32:08.510Z", "modified": "2026-11-13T00:02:47.460Z", "name": "Foreign ministry says 3,600 sets of personal information may have been leaked", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 31, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/foreign-ministry-says-3600-sets-of-personal-information-may-have-been-20261031/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/31/japan/foreign-ministry-data-leak/", "description": "Foreign ministry says 3,600 sets of personal information may have been leaked" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--41beea79-ac6b-5b81-bc8e-f8707a5531d1", "created": "2026-11-10T16:32:08.510Z", "modified": "2026-11-10T16:32:08.510Z", "relationship_type": "related-to", "source_ref": "incident--6930bf9a-1ff8-573e-aeef-2212c782a9a9", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8e9aad2c-d131-54b1-bb70-6b20db312106", "created": "2026-11-10T16:32:08.520Z", "modified": "2026-11-13T00:02:47.471Z", "name": "Club Tourism: Approximately 4.32 million pieces of personal information leaked due to unauthorized access", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 31, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,320,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/432-20261031/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261031de69034", "description": "クラブツーリズム 不正アクセスで約432万件の個人情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--578ee69e-6900-56a5-833f-72180daa9277", "created": "2026-11-10T16:32:08.520Z", "modified": "2026-11-10T16:32:08.520Z", "relationship_type": "related-to", "source_ref": "incident--8e9aad2c-d131-54b1-bb70-6b20db312106", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fc7fbe34-117f-5a56-9dc8-93808d7a4222", "created": "2026-11-10T16:32:08.515Z", "modified": "2026-11-13T00:02:47.466Z", "name": "Unauthorized access to NTT Data contractor; possibility of corporate bond purchaser information leak", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 31, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ntt-20261031/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261031de68967", "description": "NTTデータ委託先に不正アクセス 社債購入者情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5b04f353-6866-5f00-83f6-4dfb716c0f1c", "created": "2026-11-10T16:32:08.515Z", "modified": "2026-11-10T16:32:08.515Z", "relationship_type": "related-to", "source_ref": "incident--fc7fbe34-117f-5a56-9dc8-93808d7a4222", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a967416f-84ac-5091-9236-eec7739030c4", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-13T00:02:47.442Z", "name": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack", "description": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack", "description": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516", "description": "Malaysia Airlines warns customers of data exposure in Amadeus cybersecurity breach" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus", "description": "46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151", "description": "About 46,000 SIA booking records accessed in data breach involving travel tech company Amadeus" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/economy/news_5969157", "description": "การบินไทย รับถูกแฮก ข้อมูลรั่ว 6 หมื่นรายการ แต่ไม่กระทบข้อมูลบัตรเครดิต" }, { "source_name": "Bangkok Post", "url": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach", "description": "THAI passenger data compromised in Amadeus security breach" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe", "description": "Thai Airways confirms passenger data leak but credit card details safe" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/economy/news_5969937", "description": "การบินไทย แจ้ง ไซเบอร์โจมตี ข้อมูล 6 หมื่นรายการรั่วไหล ไชยชนก ถก ‘แอปเปิ้ล’ สกัด" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Hong Kong", "country": "HK" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d8dcd32a-245a-5e4c-b9bc-e5e43b9093eb", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--317010bf-0058-51a9-b822-d6d704efbe31", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Malaysia", "country": "MY" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a3ed75f2-2699-5840-b35c-27be8a40c0cc", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Singapore", "country": "SG" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dc48e5ec-d80c-5cbd-bea5-0fd84c8f8607", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Thailand", "country": "TH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dac9bd3-fa51-5640-8e1c-99147e4a1ad5", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da4486a6-8e50-55a2-ac09-6542436a1c4e", "created": "2026-11-10T16:32:08.501Z", "modified": "2026-11-13T00:02:47.449Z", "name": "Foreign Ministry hit by hacking, along with ANA, Muji brand operator", "description": "Detected automatically from 4 articles in 3 outlets (Japan Today, NHK, New Talk), Oct 30 to Nov 12, 2026. Type: data breach; sectors: government, media. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 1,090,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/foreign-ministry-hit-by-hacking-along-with-ana-muji-brand-operator-20261030/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update3-japan-foreign-ministry-hit-by-hacking-along-with-ana-muji-brand-operator", "description": "Foreign Ministry hit by hacking, along with ANA, Muji brand operator" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-04/1069337", "description": "日本無印良品爆個資外洩 109萬筆信用卡資料恐遭存取" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261112de74562", "description": "無印良品 展開の良品計画 不正アクセスを受けた会見で陳謝" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-12/1070830", "description": "日無印良品爆個資外洩! 逾百萬會員資料流出 社長致歉 : 全額補償損失" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Media" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fc4020b6-2b21-5da5-8bad-468eaa960904", "created": "2026-11-10T16:32:08.501Z", "modified": "2026-11-10T16:32:08.501Z", "relationship_type": "related-to", "source_ref": "incident--da4486a6-8e50-55a2-ac09-6542436a1c4e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b9a7f62c-9600-5e71-b370-f255d6e26170", "created": "2026-11-10T16:32:08.434Z", "modified": "2026-11-12T00:02:27.005Z", "name": "Matsuya Foods detects unauthorized access, suspends website and app", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hp-20261029/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261029de67623", "description": "松屋フーズ 不正アクセス検知 HPとアプリを停止" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c454c012-3ff9-5fd6-98cc-acb8d9caaa1a", "created": "2026-11-10T16:32:08.434Z", "modified": "2026-11-10T16:32:08.434Z", "relationship_type": "related-to", "source_ref": "incident--b9a7f62c-9600-5e71-b370-f255d6e26170", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1419d5f6-ca36-59a0-b0c1-9a2e6853f659", "created": "2026-11-10T16:32:08.458Z", "modified": "2026-11-12T12:05:11.543Z", "name": "Asahi Shimbun: Unauthorized access to email distribution company may have leaked over 70,000 items", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 70,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/7-20261029/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261030de68144", "description": "朝日新聞 メール配信会社不正アクセスで7万件余漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--76b531b6-9220-5b57-b76e-966e68831c24", "created": "2026-11-10T16:32:08.458Z", "modified": "2026-11-10T16:32:08.458Z", "relationship_type": "related-to", "source_ref": "incident--1419d5f6-ca36-59a0-b0c1-9a2e6853f659", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e888d447-941b-5631-b34e-86281a40d8ca", "created": "2026-11-11T20:35:29.587Z", "modified": "2026-11-12T00:02:27.000Z", "name": "Life Card: Over 330,000 customer email addresses and other data potentially leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 330,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/life-card-over-330000-customer-email-addresses-and-other-data-potentia-20261029/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261029de67594", "description": "ライフカード 顧客のメールアドレスなど33万件余 漏えい可能性" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8cfa4674-6d0c-5f32-86de-09b5ce828e7d", "created": "2026-11-11T20:35:29.587Z", "modified": "2026-11-11T20:35:29.587Z", "relationship_type": "related-to", "source_ref": "incident--e888d447-941b-5631-b34e-86281a40d8ca", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6eaedb7e-8c4f-5584-8536-a70622bc04a5", "created": "2026-11-10T16:32:08.424Z", "modified": "2026-11-11T20:40:49.675Z", "name": "Unauthorized access to Japan Airlines reservation system, information of over 90,000 people may have been leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 28, 2026. Title machine-translated from Japanese. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 90,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/9-20261028/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261028de67365", "description": "日本航空 予約システムに不正アクセス 9万人超の情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a514b271-2dfc-5c1f-9dd6-510e10a55127", "created": "2026-11-10T16:32:08.424Z", "modified": "2026-11-10T16:32:08.424Z", "relationship_type": "related-to", "source_ref": "incident--6eaedb7e-8c4f-5584-8536-a70622bc04a5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a70aa50a-1738-5065-a9a1-263628d23813", "created": "2026-11-10T16:32:08.375Z", "modified": "2026-11-11T20:40:49.636Z", "name": "Okinawa Tourist announces leak of personal information of up to approximately 730,000 people", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 27, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 730,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/73-20261027/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261027de66245", "description": "沖縄ツーリスト 最大約73万人分の個人情報漏えいと発表" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6926b6bd-eea8-5fc4-96c1-accd21e23c31", "created": "2026-11-10T16:32:08.375Z", "modified": "2026-11-10T16:32:08.375Z", "relationship_type": "related-to", "source_ref": "incident--a70aa50a-1738-5065-a9a1-263628d23813", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--52d70ddd-bbea-5586-8bd5-27cab8296f37", "created": "2026-11-10T16:32:08.340Z", "modified": "2026-11-11T20:40:49.595Z", "name": "Government holds urgent cybersecurity meeting in response to recent data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 26, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/government-holds-urgent-cybersecurity-meeting-in-response-to-recent-da-20261026/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/26/japan/japan-government-cybersecurity/", "description": "Government holds urgent cybersecurity meeting in response to recent data breaches" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9d1a9b8b-c265-5a09-9fb0-452ecf519afa", "created": "2026-11-10T16:32:08.340Z", "modified": "2026-11-10T16:32:08.340Z", "relationship_type": "related-to", "source_ref": "incident--52d70ddd-bbea-5586-8bd5-27cab8296f37", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--59ebb471-b4d4-58cb-b59c-f41ac1ee87f6", "created": "2026-11-10T16:32:08.349Z", "modified": "2026-11-11T20:40:49.605Z", "name": "Email distribution company 'Yumirlink' confirms data leak of 51 million records", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 26, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 51,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/5100-20261026/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de65955", "description": "メール配信会社「ユミルリンク」のべ5100万件の情報漏えい確認" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7b45e231-ac56-5613-92c3-656b5bef4792", "created": "2026-11-10T16:32:08.349Z", "modified": "2026-11-10T16:32:08.349Z", "relationship_type": "related-to", "source_ref": "incident--59ebb471-b4d4-58cb-b59c-f41ac1ee87f6", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--66ec61b2-f799-5529-afed-903797854930", "created": "2026-11-10T16:32:08.355Z", "modified": "2026-11-11T20:40:49.610Z", "name": "Unauthorized access to electronic gift company; 550 million yen worth issued fraudulently", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 26, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 550,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/55000-20261026/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de66013", "description": "電子ギフト会社に不正アクセス 5億5000万円分が不正発行" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e0ccd0e2-c7ea-52f9-a26f-3236d5181f24", "created": "2026-11-10T16:32:08.355Z", "modified": "2026-11-10T16:32:08.355Z", "relationship_type": "related-to", "source_ref": "incident--66ec61b2-f799-5529-afed-903797854930", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--644befdd-5b3c-5b4f-ae85-c29a0e8a8661", "created": "2026-11-10T16:32:08.326Z", "modified": "2026-11-11T20:40:49.585Z", "name": "Japan companies to compensate customers after major cyberattacks", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 26, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japan-companies-to-compensate-customers-after-major-cyberattacks-20261026/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/asia/east-asia/article/3372105/japan-companies-compensate-customers-after-major-cyberattacks", "description": "Japan companies to compensate customers after major cyberattacks" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--36abeda4-db08-5b02-9f17-5a51d5e9fbf8", "created": "2026-11-10T16:32:08.326Z", "modified": "2026-11-10T16:32:08.326Z", "relationship_type": "related-to", "source_ref": "incident--644befdd-5b3c-5b4f-ae85-c29a0e8a8661", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bd8f0c80-f7a9-50b7-b14d-80e3d02bffdf", "created": "2026-11-10T16:32:08.331Z", "modified": "2026-11-11T20:40:49.590Z", "name": "Japanese companies offer compensation as cyberattacks hit economy", "description": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Oct 26, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japanese-companies-offer-compensation-as-cyberattacks-hit-economy-20261026/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/10/26/japanese-companies-offer-compensation-as-cyberattacks-hit-economy", "description": "Japanese companies offer compensation as cyberattacks hit economy" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b3014e33-2ec4-5919-959b-8be9bf8422ca", "created": "2026-11-10T16:32:08.331Z", "modified": "2026-11-10T16:32:08.331Z", "relationship_type": "related-to", "source_ref": "incident--bd8f0c80-f7a9-50b7-b14d-80e3d02bffdf", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--251710a8-cc76-570b-8480-1ee0da4704db", "created": "2026-11-10T16:32:08.359Z", "modified": "2026-11-11T20:40:49.615Z", "name": "Rakuten Travel suffers unauthorized access, leaking names and partial credit card numbers", "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, NHK), Oct 26 to Oct 27, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261026-2/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de66040", "description": "楽天トラベル 不正アクセスで氏名やクレカ番号の一部など流出" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/society/breakingnews/5620678", "description": "日樂天旅遊爆大規模個資外洩 業者回應了" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--64c0253d-56d6-5c3e-8f8e-af8760980e5a", "created": "2026-11-10T16:32:08.359Z", "modified": "2026-11-10T16:32:08.359Z", "relationship_type": "related-to", "source_ref": "incident--251710a8-cc76-570b-8480-1ee0da4704db", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6d097008-fb4e-529b-a797-43c5ddb5a93f", "created": "2026-11-10T16:32:08.312Z", "modified": "2026-11-11T20:40:49.569Z", "name": "Park24 to pay ¥3,000 to Times Car users hit by data breach", "description": "Detected automatically from 3 articles in 2 outlets (NHK, The Japan Times), Oct 24 to Oct 28, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,500,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/park24-to-pay-3000-to-times-car-users-hit-by-data-breach-20261024/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/24/park24-3000-yen-compensation/", "description": "Park24 to pay ¥3,000 to Times Car users hit by data breach" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de65793", "description": "「タイムズカー」個人情報漏えい問題 被害者が集団提訴へ" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/28/companies/data-breach-business-risk/", "description": "Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout" } ], "x_securitystudies_occurred_on": "2026-10-24", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ebf45b5d-0e77-5f78-85f6-82143b45e363", "created": "2026-11-10T16:32:08.312Z", "modified": "2026-11-10T16:32:08.312Z", "relationship_type": "related-to", "source_ref": "incident--6d097008-fb4e-529b-a797-43c5ddb5a93f", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a83641bb-0fea-5053-9da1-b6b7aa67b54e", "created": "2026-11-10T16:32:08.302Z", "modified": "2026-11-11T20:40:49.558Z", "name": "Digital Agency reports data breach via website vendor", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 23, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/digital-agency-reports-data-breach-via-website-vendor-20261023/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/23/japan/digital-agency-breach/", "description": "Digital Agency reports data breach via website vendor" } ], "x_securitystudies_occurred_on": "2026-10-23", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a4d418aa-8f45-5b46-a1f8-bbae6d6996a3", "created": "2026-11-10T16:32:08.302Z", "modified": "2026-11-10T16:32:08.302Z", "relationship_type": "related-to", "source_ref": "incident--a83641bb-0fea-5053-9da1-b6b7aa67b54e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--08d1c4da-72af-5a5d-89cf-735b98a8a832", "created": "2026-11-10T16:32:08.307Z", "modified": "2026-11-11T20:40:49.563Z", "name": "[3rd Report] To our business partners and retirees, a request for caution regarding unauthorized access and potential information leakage from our group management server", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 23, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/3-20261023/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/23/notice-ransomware-incident-3rd-report-jp/", "description": "【第3報】お取引先および退職者の皆さまへ、当社グループ管理サーバーへの不正アクセスおよび情報漏えいの可能性について注意喚起のお願い" } ], "x_securitystudies_occurred_on": "2026-10-23", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--46d95e1f-a490-5c0c-9b6e-40d6e6a41d84", "created": "2026-11-10T16:32:08.307Z", "modified": "2026-11-10T16:32:08.307Z", "relationship_type": "related-to", "source_ref": "incident--08d1c4da-72af-5a5d-89cf-735b98a8a832", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7d9063f7-2a37-57af-8441-a3a75f96bb72", "created": "2026-11-11T20:39:10.712Z", "modified": "2026-11-11T20:40:49.547Z", "name": "Japanese cybersecurity breach spreads: Capcom reports nearly 12 million accounts leaked globally", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 22, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 12,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japanese-cybersecurity-breach-spreads-capcom-reports-nearly-12-million-20261022/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/world/breakingnews/5615353", "description": "日本資安漏洞延燒 卡普空全球近1200萬筆帳號遭外洩" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--89a7bd07-60ff-5c4b-9fda-7628c2f54668", "created": "2026-11-11T20:39:10.712Z", "modified": "2026-11-11T20:39:10.712Z", "relationship_type": "related-to", "source_ref": "incident--7d9063f7-2a37-57af-8441-a3a75f96bb72", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4cfa43b2-b171-566c-a38b-542274c72b44", "created": "2026-11-11T20:39:10.702Z", "modified": "2026-11-11T20:40:49.533Z", "name": "Driver's license images and other data leaked and sold on the dark web? From an Okinawa company", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 22, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/drivers-license-images-and-other-data-leaked-and-sold-on-the-dark-web-20261022/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261022de63353", "description": "免許証画像など漏えいし闇サイトで販売か 沖縄の会社から" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--887c2f99-5c24-5984-9f41-b302b434673d", "created": "2026-11-11T20:39:10.702Z", "modified": "2026-11-11T20:39:10.702Z", "relationship_type": "related-to", "source_ref": "incident--4cfa43b2-b171-566c-a38b-542274c72b44", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--78ef27eb-60bc-5670-94c2-70937008dde2", "created": "2026-11-10T16:32:08.267Z", "modified": "2026-11-11T20:40:49.496Z", "name": "Unauthorized access: 'Possibility that the stage has shifted to targeting financial institutions'", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 21, 2026. Title machine-translated from Japanese. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261021/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261021de62921", "description": "不正アクセス“金融機関が狙われる段階に変わってきた可能性”" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--15167757-32a5-5dae-ac45-cb8bfc38855a", "created": "2026-11-10T16:32:08.267Z", "modified": "2026-11-10T16:32:08.267Z", "relationship_type": "related-to", "source_ref": "incident--78ef27eb-60bc-5670-94c2-70937008dde2", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--940a37e1-eca3-5d76-b023-76ee56251b35", "created": "2026-11-10T16:32:08.261Z", "modified": "2026-11-11T20:40:49.488Z", "name": "Data breach potentially exposes information of 125,000 police officers and staff", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 21, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-breach-potentially-exposes-information-of-125000-police-officers-20261021/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/21/japan/crime-legal/arcadia-police-data-leak/", "description": "Data breach potentially exposes information of 125,000 police officers and staff" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4d7fd5c3-1a1e-54ad-8bf3-8708a1f438cd", "created": "2026-11-10T16:32:08.261Z", "modified": "2026-11-10T16:32:08.261Z", "relationship_type": "related-to", "source_ref": "incident--940a37e1-eca3-5d76-b023-76ee56251b35", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c9349066-9a54-5b91-bd46-a5c1b44b1934", "created": "2026-11-10T16:32:08.273Z", "modified": "2026-11-11T20:40:49.504Z", "name": "AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise", "description": "Detected automatically from 1 article in 1 outlet (Microsoft Threat Intelligence), Oct 21, 2026. Type: espionage campaign. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-driven-large-scale-nation-state-campaign-using-artex-enables-supply-20261021/" }, { "source_name": "Microsoft Threat Intelligence", "url": "https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/", "description": "AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--43517ba8-805e-5e4e-8bbb-ed2d85d3d515", "created": "2026-11-10T16:32:08.273Z", "modified": "2026-11-10T16:32:08.273Z", "relationship_type": "related-to", "source_ref": "incident--c9349066-9a54-5b91-bd46-a5c1b44b1934", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "created": "2026-11-09T04:30:05.339Z", "modified": "2026-11-09T04:30:05.339Z", "name": "Storm-0940", "aliases": [ "CovertNetwork-1658", "ORB07" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/storm-0940/" } ], "description": "Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as well as exploiting network edge applications. Microsoft has observed Storm-0940 utilizing valid credentials obtained from CovertNetwork-1658's password spray operations, indicating a close operational relationship between the two. Once inside a victim environment, Storm-0940 has been seen leveraging compromised credentials for further malicious activities. Additionally, Storm-0940 has employed botnets, such as Quad7, to facilitate password spraying attacks." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a79fcf4b-f426-5493-add9-64df31b69d4c", "created": "2026-11-10T16:32:08.273Z", "modified": "2026-11-10T16:32:08.273Z", "relationship_type": "related-to", "source_ref": "incident--c9349066-9a54-5b91-bd46-a5c1b44b1934", "target_ref": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8ce7a0ed-77cf-5bf8-9733-3836a13d2848", "created": "2026-11-10T16:32:08.282Z", "modified": "2026-11-11T20:40:49.518Z", "name": "More data breaches reported by prefectural police forces, companies", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 21, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-data-breaches-reported-by-prefectural-police-forces-companies-20261021/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/national/update2-more-data-breaches-reported-by-japan-prefectural-police-forces-companies", "description": "More data breaches reported by prefectural police forces, companies" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--87652fed-56d7-5f82-bebd-1e45b7fb0b6f", "created": "2026-11-10T16:32:08.282Z", "modified": "2026-11-10T16:32:08.282Z", "relationship_type": "related-to", "source_ref": "incident--8ce7a0ed-77cf-5bf8-9733-3836a13d2848", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7bb5056c-f227-5e7b-9e57-3781ff6c905b", "created": "2026-11-10T16:32:08.237Z", "modified": "2026-11-11T20:40:49.459Z", "name": "Furusato Choice announces leakage of 4.45 million pieces of personal information", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 20, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,450,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/445-20261020/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261020de62437", "description": "ふるさとチョイス 445万件の個人情報流出を発表" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7b02e7e7-7ade-5002-9e71-f61aaa0fb20d", "created": "2026-11-10T16:32:08.237Z", "modified": "2026-11-10T16:32:08.237Z", "relationship_type": "related-to", "source_ref": "incident--7bb5056c-f227-5e7b-9e57-3781ff6c905b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--48031cdd-2fc3-5f0f-ad85-d33c13c24202", "created": "2026-11-10T16:32:08.242Z", "modified": "2026-11-11T20:40:49.466Z", "name": "Risk of information leakage for over 23,000 cases in national energy-saving housing project", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 20, 2026. Title machine-translated from Japanese. Type: data breach; sectors: energy. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 20,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/23000-20261020/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261020de62509", "description": "国の省エネ住宅事業で2万3000件超の情報漏えいのおそれ" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Energy" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ab48c590-863e-536a-8519-5adc90e5f3d4", "created": "2026-11-10T16:32:08.242Z", "modified": "2026-11-10T16:32:08.242Z", "relationship_type": "related-to", "source_ref": "incident--48031cdd-2fc3-5f0f-ad85-d33c13c24202", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cd009b42-089c-5728-a2b9-6548e1296aa0", "created": "2026-11-10T16:32:08.232Z", "modified": "2026-11-11T20:40:49.450Z", "name": "Chinese AI tool used in cyberattacks on Japanese companies, investigation finds", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 20, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-used-in-cyberattacks-on-japanese-companies-investigati-20261020/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/20/japan/china-ai-cyberattacks/", "description": "Chinese AI tool used in cyberattacks on Japanese companies, investigation finds" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dddaae99-3d39-5e0b-b4e4-9f1ea94b42fb", "created": "2026-11-10T16:32:08.232Z", "modified": "2026-11-10T16:32:08.232Z", "relationship_type": "related-to", "source_ref": "incident--cd009b42-089c-5728-a2b9-6548e1296aa0", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d588ddcb-259b-5cef-9c11-36404b8041bf", "created": "2026-11-10T16:32:08.194Z", "modified": "2026-11-11T20:40:49.402Z", "name": "JETRO, more Japanese firms report breaches to network systems", "description": "Detected automatically from 2 articles in 2 outlets (Japan Today, NHK), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/jetro-more-japanese-firms-report-breaches-to-network-systems-20261019/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261019de61442", "description": "JETROのホームページが不正アクセスで一時的に公開停止" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update3-japan-trade-agency-japanese-firms-face-unauthorized-access", "description": "JETRO, more Japanese firms report breaches to network systems" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--862f81c1-b29e-5c7a-9115-a25492a3f217", "created": "2026-11-10T16:32:08.194Z", "modified": "2026-11-10T16:32:08.194Z", "relationship_type": "related-to", "source_ref": "incident--d588ddcb-259b-5cef-9c11-36404b8041bf", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--5eeafb22-6944-5ec7-ab31-490975414bc5", "created": "2026-11-10T16:32:08.212Z", "modified": "2026-11-11T20:40:49.424Z", "name": "Over 16% of Japanese companies experience data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-16-of-japanese-companies-experience-data-breaches-20261019/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/19/16pct-japan-firms-data-breaches/", "description": "Over 16% of Japanese companies experience data breaches" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--49a788bc-8fd7-5043-bc73-42f740f0a154", "created": "2026-11-10T16:32:08.212Z", "modified": "2026-11-10T16:32:08.212Z", "relationship_type": "related-to", "source_ref": "incident--5eeafb22-6944-5ec7-ab31-490975414bc5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--31fe7336-d159-58b8-a813-5c9eafeef8b4", "created": "2026-11-10T16:32:08.180Z", "modified": "2026-11-11T20:40:49.384Z", "name": "Karaoke hack shows cybercrime is routine", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 18, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/karaoke-hack-shows-cybercrime-is-routine-20261018/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/commentary/2026/10/18/japan/karaoke-hack-cybercrime/", "description": "Karaoke hack shows cybercrime is routine" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ad05a77f-fa21-50ab-9f59-c419c0b2cb8c", "created": "2026-11-10T16:32:08.180Z", "modified": "2026-11-10T16:32:08.180Z", "relationship_type": "related-to", "source_ref": "incident--31fe7336-d159-58b8-a813-5c9eafeef8b4", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0f63923b-3a81-5567-a0b6-f9f37de1e592", "created": "2026-11-10T16:32:08.190Z", "modified": "2026-11-11T20:40:49.395Z", "name": "Japan Football Association investigating unauthorized access to official app", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 18, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261018/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261019de61320", "description": "日本サッカー協会 公式アプリに不正アクセス“影響調査中”" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fb41399f-159d-596e-ba65-13e1f9eeb9fe", "created": "2026-11-10T16:32:08.190Z", "modified": "2026-11-10T16:32:08.190Z", "relationship_type": "related-to", "source_ref": "incident--0f63923b-3a81-5567-a0b6-f9f37de1e592", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da575374-c906-530a-a376-7ea878a04825", "created": "2026-11-10T16:32:08.171Z", "modified": "2026-11-11T20:40:49.372Z", "name": "Cyberattacks continue to menace Japan as more firms disclose data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 17, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattacks-continue-to-menace-japan-as-more-firms-disclose-data-brea-20261017/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/17/japan/crime-legal/more-data-breaches-japan/", "description": "Cyberattacks continue to menace Japan as more firms disclose data breaches" } ], "x_securitystudies_occurred_on": "2026-10-17", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ad7401f2-563f-5005-8bea-28c2e71a3c46", "created": "2026-11-10T16:32:08.171Z", "modified": "2026-11-10T16:32:08.171Z", "relationship_type": "related-to", "source_ref": "incident--da575374-c906-530a-a376-7ea878a04825", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--770aa1eb-30f0-53d5-934d-f22af8129c4e", "created": "2026-11-10T16:32:08.166Z", "modified": "2026-11-11T20:40:49.354Z", "name": "Yamato Transport confirms 5.31 mil customer records leaked", "description": "Detected automatically from 2 articles in 2 outlets (Japan Today, NHK), Oct 16, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,300,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yamato-transport-confirms-531-mil-customer-records-leaked-20261016/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261016de60395", "description": "ヤマト運輸 個人情報530万件あまりが外部流出" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/business/update1-japan%27s-yamato-transport-confirms-5.31-mil.-customer-records-leaked", "description": "Yamato Transport confirms 5.31 mil customer records leaked" } ], "x_securitystudies_occurred_on": "2026-10-16", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4a526097-2521-56f6-8f52-0698befdf9c1", "created": "2026-11-10T16:32:08.166Z", "modified": "2026-11-10T16:32:08.166Z", "relationship_type": "related-to", "source_ref": "incident--770aa1eb-30f0-53d5-934d-f22af8129c4e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3df005c2-639b-5e51-ac5d-db71805fa2c6", "created": "2026-11-10T16:32:08.157Z", "modified": "2026-11-11T20:40:49.360Z", "name": "Comic Seymour confirms unauthorized access; member information leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 16, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261016/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261016de60740", "description": "コミックシーモアが不正アクセス確認 会員情報が漏えい" } ], "x_securitystudies_occurred_on": "2026-10-16", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8226fd53-0ea4-5f2c-906b-ad69a874250e", "created": "2026-11-10T16:32:08.157Z", "modified": "2026-11-10T16:32:08.157Z", "relationship_type": "related-to", "source_ref": "incident--3df005c2-639b-5e51-ac5d-db71805fa2c6", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--884eb3ed-fe9c-5f65-b3e3-188f34dbda62", "created": "2026-11-10T16:32:08.162Z", "modified": "2026-11-11T20:40:49.366Z", "name": "[Update 2] Report on Unauthorized Access to Group Managed Server and Potential Data Leak", "description": "Detected automatically from 2 articles in 1 outlet (The Japan Times), Oct 16 to Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2-20261016/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/16/notice-ransomware-incident-second-report-jp/", "description": "【第2報】当社グループ管理サーバーへの不正アクセスおよび情報漏えいの可能性に関するご報告" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/19/notice-ransomware-incident-second-report/", "description": "[Update 2] Report on Unauthorized Access to Group Managed Server and Potential Data Leak" } ], "x_securitystudies_occurred_on": "2026-10-16", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f1e5a5af-8f9d-5b2f-8b9b-65a62ddd8c60", "created": "2026-11-10T16:32:08.162Z", "modified": "2026-11-10T16:32:08.162Z", "relationship_type": "related-to", "source_ref": "incident--884eb3ed-fe9c-5f65-b3e3-188f34dbda62", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fa05e398-d0d7-580f-84ce-45eda05ae2fa", "created": "2026-11-10T16:32:08.135Z", "modified": "2026-11-11T20:40:49.331Z", "name": "Unauthorized access to system for obstetrics and gynecology clinics, medical institutions forced to respond", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 15, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: health. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261015/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261015de59731", "description": "産婦人科向けシステムに不正アクセス 医療機関は対応追われる" } ], "x_securitystudies_occurred_on": "2026-10-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Health" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fd6b5f7c-d7d9-59c8-8c3a-7fe776d75e7a", "created": "2026-11-10T16:32:08.135Z", "modified": "2026-11-10T16:32:08.135Z", "relationship_type": "related-to", "source_ref": "incident--fa05e398-d0d7-580f-84ce-45eda05ae2fa", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8b89e28d-97bf-5e6a-8c09-f5c85148525c", "created": "2026-11-10T16:32:08.139Z", "modified": "2026-11-11T20:40:49.336Z", "name": "Sourcenext: Approximately 22.51 million customer records may have been leaked", "description": "Detected automatically from 2 articles in 1 outlet (NHK), Oct 15 to Oct 16, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 22,510,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2251-20261015/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261015de60043", "description": "ソースネクスト 顧客情報 約2251万件が情報漏えいか" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261016de60556", "description": "ソースネクスト パスワード暗号化がない状態で流出 再設定を" } ], "x_securitystudies_occurred_on": "2026-10-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--73baef93-7997-5aac-bca4-0e07526869a6", "created": "2026-11-10T16:32:08.139Z", "modified": "2026-11-10T16:32:08.139Z", "relationship_type": "related-to", "source_ref": "incident--8b89e28d-97bf-5e6a-8c09-f5c85148525c", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3cd6b16a-63f4-50d5-a1e3-fb001ad18311", "created": "2026-11-10T16:32:08.130Z", "modified": "2026-11-11T20:40:49.325Z", "name": "Unstoppable personal information leaks, possibility of police involvement revealed", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 14, 2026. Title machine-translated from Japanese. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261014/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261014de59388", "description": "止まらない個人情報漏えい 警察でも漏えいの可能性明らかに" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ca02749e-1c09-5e86-97c6-f52330f0f305", "created": "2026-11-10T16:32:08.130Z", "modified": "2026-11-10T16:32:08.130Z", "relationship_type": "related-to", "source_ref": "incident--3cd6b16a-63f4-50d5-a1e3-fb001ad18311", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6ff0e4e1-410d-55bb-a367-328e3be95c5e", "created": "2026-11-10T16:32:08.117Z", "modified": "2026-11-11T20:40:49.307Z", "name": "Customer data breach suspected at sushi delivery operator", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 14, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/customer-data-breach-suspected-at-sushi-delivery-operator-20261014/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/sushi-data-breach/", "description": "Customer data breach suspected at sushi delivery operator" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f2f4d8b2-7090-5fae-995c-4b4812ab6ca0", "created": "2026-11-10T16:32:08.117Z", "modified": "2026-11-10T16:32:08.117Z", "relationship_type": "related-to", "source_ref": "incident--6ff0e4e1-410d-55bb-a367-328e3be95c5e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b30a84ed-a9c2-51aa-abbf-9beebf91015a", "created": "2026-11-10T16:32:08.126Z", "modified": "2026-11-11T20:40:49.319Z", "name": "What happens to your information after a data breach", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 14, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/what-happens-to-your-information-after-a-data-breach-20261014/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/cyberattacks-japan-response/", "description": "What happens to your information after a data breach" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a76b8c31-f1d2-54d2-baae-505ea458e14d", "created": "2026-11-10T16:32:08.126Z", "modified": "2026-11-10T16:32:08.126Z", "relationship_type": "related-to", "source_ref": "incident--b30a84ed-a9c2-51aa-abbf-9beebf91015a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--57ecc8ba-e740-5351-8bb5-6f7e89561778", "created": "2026-11-10T16:32:08.103Z", "modified": "2026-11-11T20:40:49.296Z", "name": "Local government disaster prevention email distribution; addresses and other info leaked due to unauthorized access", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 13, 2026. Title machine-translated from Japanese. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261013/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261013de58789", "description": "自治体の防災メール配信 不正アクセスでアドレスなど漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4f46e89a-e913-582e-b9c9-39321771479c", "created": "2026-11-10T16:32:08.103Z", "modified": "2026-11-10T16:32:08.103Z", "relationship_type": "related-to", "source_ref": "incident--57ecc8ba-e740-5351-8bb5-6f7e89561778", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--609a5cab-b3b8-56d8-a7ad-04606f4c3f2a", "created": "2026-11-10T16:32:08.112Z", "modified": "2026-11-11T20:40:49.302Z", "name": "Japan's information service firm serving municipalities reports data leak", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 13, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japans-information-service-firm-serving-municipalities-reports-data-le-20261013/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/national/japan%27s-information-service-firm-serving-municipalities-reports-data-leak", "description": "Japan's information service firm serving municipalities reports data leak" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3a40f1f0-dd80-5548-8162-eedc50cc2698", "created": "2026-11-10T16:32:08.112Z", "modified": "2026-11-10T16:32:08.112Z", "relationship_type": "related-to", "source_ref": "incident--609a5cab-b3b8-56d8-a7ad-04606f4c3f2a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d69b6729-1e94-5bbb-8b58-bc5fb98fe98d", "created": "2026-11-10T16:32:08.099Z", "modified": "2026-11-11T20:40:49.290Z", "name": "Series of unauthorized access incidents analyzed as 'possibility of AI agent abuse'", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 13, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-20261013/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261013de58380", "description": "一連の不正アクセスは“AIエージェント悪用の可能性”解析で" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--740485c9-77a1-5364-9de1-f520706a4f52", "created": "2026-11-10T16:32:08.099Z", "modified": "2026-11-10T16:32:08.099Z", "relationship_type": "related-to", "source_ref": "incident--d69b6729-1e94-5bbb-8b58-bc5fb98fe98d", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--81ee0f93-0a7c-52cb-a992-d71c77785c36", "created": "2026-11-10T16:32:08.081Z", "modified": "2026-11-10T16:40:20.473Z", "name": "Driver’s license data breaches becoming major concern", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 11, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/drivers-license-data-breaches-becoming-major-concern-20261011/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/11/japan/crime-legal/japan-drivers-license-data-breach-spread/", "description": "Driver’s license data breaches becoming major concern" } ], "x_securitystudies_occurred_on": "2026-10-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--837ef8aa-4532-5757-829d-eb0c9b9db062", "created": "2026-11-10T16:32:08.081Z", "modified": "2026-11-10T16:32:08.081Z", "relationship_type": "related-to", "source_ref": "incident--81ee0f93-0a7c-52cb-a992-d71c77785c36", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--caa5c820-c692-514c-8a46-d6c2888353d5", "created": "2026-11-10T16:32:08.066Z", "modified": "2026-11-10T16:40:20.460Z", "name": "More Japanese firms hit by large-scale data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 10, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-japanese-firms-hit-by-large-scale-data-breaches-20261010/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/10/tech/japanese-firms-data-breaches/", "description": "More Japanese firms hit by large-scale data breaches" } ], "x_securitystudies_occurred_on": "2026-10-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1658b347-ef1f-5378-9555-25c9dc6a4293", "created": "2026-11-10T16:32:08.066Z", "modified": "2026-11-10T16:32:08.066Z", "relationship_type": "related-to", "source_ref": "incident--caa5c820-c692-514c-8a46-d6c2888353d5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e6e48c01-c30c-5e58-8632-9695cff1c225", "created": "2026-11-10T16:32:08.041Z", "modified": "2026-11-10T16:40:20.437Z", "name": "「スカイチケット」に不正アクセス 1400万件超 個人情報流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 14,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/1400-20261009/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261009de57103", "description": "「スカイチケット」に不正アクセス 1400万件超 個人情報流出か" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--eb4672cf-026e-55a2-ba5e-d328ce1841f5", "created": "2026-11-10T16:32:08.041Z", "modified": "2026-11-10T16:32:08.041Z", "relationship_type": "related-to", "source_ref": "incident--e6e48c01-c30c-5e58-8632-9695cff1c225", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3626c8fa-584c-5bba-84c1-14dfb085e8e9", "created": "2026-11-10T16:32:08.047Z", "modified": "2026-11-10T16:40:20.442Z", "name": "JR東日本 えきねっとなどで最大200万件の情報漏えいの可能性", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 2,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/jr-200-20261009/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261009de57177", "description": "JR東日本 えきねっとなどで最大200万件の情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--63542ffa-70f0-525f-a15d-506125efed78", "created": "2026-11-10T16:32:08.047Z", "modified": "2026-11-10T16:32:08.047Z", "relationship_type": "related-to", "source_ref": "incident--3626c8fa-584c-5bba-84c1-14dfb085e8e9", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--47b62d3c-b4e3-5aff-803d-d34c7bc69eba", "created": "2026-11-10T16:32:08.057Z", "modified": "2026-11-10T16:40:20.450Z", "name": "宿泊予約管理システム「手間いらず」最大445万人情報漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,450,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/445-20261009/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261010de57536", "description": "宿泊予約管理システム「手間いらず」最大445万人情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fcf08611-d437-5369-b696-e31ec6702dcb", "created": "2026-11-10T16:32:08.057Z", "modified": "2026-11-10T16:32:08.057Z", "relationship_type": "related-to", "source_ref": "incident--47b62d3c-b4e3-5aff-803d-d34c7bc69eba", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--279e8f3c-1543-55f8-8830-3a4517b40954", "created": "2026-11-10T16:32:08.053Z", "modified": "2026-11-10T16:40:20.446Z", "name": "Data leaks at travel companies could impact millions of customer records", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-leaks-at-travel-companies-could-impact-millions-of-customer-recor-20261009/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/09/tech/travel-companies-data-breach/", "description": "Data leaks at travel companies could impact millions of customer records" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ed442b8d-3d1d-5b87-af52-8b6de3e8bdfb", "created": "2026-11-10T16:32:08.053Z", "modified": "2026-11-10T16:32:08.053Z", "relationship_type": "related-to", "source_ref": "incident--279e8f3c-1543-55f8-8830-3a4517b40954", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--23ee6f9d-d827-59ba-a13a-7d2df370055b", "created": "2026-11-10T16:32:08.062Z", "modified": "2026-11-10T16:40:20.455Z", "name": "Bookoff, JR East each report 6 mil customer records leak in newest breach", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/bookoff-jr-east-each-report-6-mil-customer-records-leak-in-newest-brea-20261009/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update1-bookoff-jr-east-each-report-6-mil.-customer-records-leak-in-newest-breach", "description": "Bookoff, JR East each report 6 mil customer records leak in newest breach" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--97070962-3cd0-5dd1-8998-84636ed67c27", "created": "2026-11-10T16:32:08.062Z", "modified": "2026-11-10T16:32:08.062Z", "relationship_type": "related-to", "source_ref": "incident--23ee6f9d-d827-59ba-a13a-7d2df370055b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6fd5ef5a-59dd-51a5-aeda-8180c8946429", "created": "2026-11-10T16:32:08.023Z", "modified": "2026-11-10T16:40:20.423Z", "name": "カラオケ店運営の第一興商 約872万件の個人情報漏えいのおそれ", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 8,720,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/872-20261008/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261008de56831", "description": "カラオケ店運営の第一興商 約872万件の個人情報漏えいのおそれ" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bc8a9597-4c78-56e5-bdd0-3acef17d60b5", "created": "2026-11-10T16:32:08.023Z", "modified": "2026-11-10T16:32:08.023Z", "relationship_type": "related-to", "source_ref": "incident--6fd5ef5a-59dd-51a5-aeda-8180c8946429", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ce55355e-48f3-531c-b759-5bdb2d6a0c01", "created": "2026-11-10T16:32:08.028Z", "modified": "2026-11-10T16:40:20.428Z", "name": "53 companies in Japan hit by Qilin ransomware group", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 8, 2026. Type: ransomware. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/53-companies-in-japan-hit-by-qilin-ransomware-group-20261008/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update3-53-companies-in-japan-hit-by-qilin-ransomware-group-police-agency", "description": "53 companies in Japan hit by Qilin ransomware group" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--00bc07e6-fc8b-5b83-8683-c3a059facd63", "created": "2026-11-10T16:32:08.028Z", "modified": "2026-11-10T16:32:08.028Z", "relationship_type": "related-to", "source_ref": "incident--ce55355e-48f3-531c-b759-5bdb2d6a0c01", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c06f86e7-c64e-512c-8a8f-73add9d090b1", "created": "2026-11-10T16:32:08.034Z", "modified": "2026-11-10T16:40:20.432Z", "name": "ブックオフグループ 最大で643万件の会員情報漏えいの可能性", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 6,430,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/643-20261008/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261009de56955", "description": "ブックオフグループ 最大で643万件の会員情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--923ae75f-9947-53f7-a194-4b76ad38616f", "created": "2026-11-10T16:32:08.034Z", "modified": "2026-11-10T16:32:08.034Z", "relationship_type": "related-to", "source_ref": "incident--c06f86e7-c64e-512c-8a8f-73add9d090b1", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c979302a-20ef-559d-902a-1ce544bd066d", "created": "2026-11-10T16:32:07.975Z", "modified": "2026-11-10T16:40:20.381Z", "name": "Cyberattacks against Japanese firms continue, putting millions at risk of identity theft", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 7, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattacks-against-japanese-firms-continue-putting-millions-at-risk-20261007/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/07/tech/more-companies-data-leak/", "description": "Cyberattacks against Japanese firms continue, putting millions at risk of identity theft" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--43eba7eb-3670-5ea0-b7a9-de83c8587ef6", "created": "2026-11-10T16:32:07.975Z", "modified": "2026-11-10T16:32:07.975Z", "relationship_type": "related-to", "source_ref": "incident--c979302a-20ef-559d-902a-1ce544bd066d", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e78a95af-04e5-53a1-9a36-d5e48b7ce5a3", "created": "2026-11-10T16:32:07.991Z", "modified": "2026-11-10T16:40:20.395Z", "name": "損保ジャパン のべ6万件の顧客情報が流出か 不正アクセス", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 60,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/6-20261007/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261007de55973", "description": "損保ジャパン のべ6万件の顧客情報が流出か 不正アクセス" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8edff817-51e9-5ef5-9c8d-36592716319b", "created": "2026-11-10T16:32:07.991Z", "modified": "2026-11-10T16:32:07.991Z", "relationship_type": "related-to", "source_ref": "incident--e78a95af-04e5-53a1-9a36-d5e48b7ce5a3", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7f214974-e737-585d-908a-e4d3d128ade8", "created": "2026-11-10T16:32:07.995Z", "modified": "2026-11-10T16:40:20.399Z", "name": "ソフトバンク子会社に不正アクセス クラウドサービスに障害", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261007/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261007de56048", "description": "ソフトバンク子会社に不正アクセス クラウドサービスに障害" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9358ec37-0a06-51c6-8478-05d5a870ea00", "created": "2026-11-10T16:32:07.995Z", "modified": "2026-11-10T16:32:07.995Z", "relationship_type": "related-to", "source_ref": "incident--7f214974-e737-585d-908a-e4d3d128ade8", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--80ce7b83-eaad-5122-a476-86c735734af7", "created": "2026-11-10T16:32:07.931Z", "modified": "2026-11-10T16:40:20.344Z", "name": "ミスターマックスで不正アクセス 個人情報最大170万人超流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 6, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 1,700,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/170-20261006/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261006de55099", "description": "ミスターマックスで不正アクセス 個人情報最大170万人超流出か" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ddb5ddb9-3f83-5f64-892d-a7933d06b2ae", "created": "2026-11-10T16:32:07.931Z", "modified": "2026-11-10T16:32:07.931Z", "relationship_type": "related-to", "source_ref": "incident--80ce7b83-eaad-5122-a476-86c735734af7", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cb26a1f1-78b3-5e40-967a-728e6f29231c", "created": "2026-11-10T16:32:07.937Z", "modified": "2026-11-10T16:40:20.349Z", "name": "South Korea’s Lee says AI appears to have been used in bank hacks", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 6, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-koreas-lee-says-ai-appears-to-have-been-used-in-bank-hacks-20261006-2/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/06/south-korea-bank-hacks/", "description": "South Korea’s Lee says AI appears to have been used in bank hacks" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bba5181e-a265-5339-b72f-a50a8cb172b5", "created": "2026-11-10T16:32:07.937Z", "modified": "2026-11-10T16:32:07.937Z", "relationship_type": "related-to", "source_ref": "incident--cb26a1f1-78b3-5e40-967a-728e6f29231c", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3974aed3-cf56-573d-a423-73ef6335b54b", "created": "2026-11-10T16:32:07.948Z", "modified": "2026-11-10T16:40:20.358Z", "name": "More Japan firms report customer data leaks as unauthorized access widens", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-japan-firms-report-customer-data-leaks-as-unauthorized-access-wid-20261006/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/GMO-internet-service-unit-retailer-Mr-Max-both-report-massive-customer-data-leaks", "description": "More Japan firms report customer data leaks as unauthorized access widens" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b5146b79-ea29-519e-b4ec-c3e6e882649a", "created": "2026-11-10T16:32:07.948Z", "modified": "2026-11-10T16:32:07.948Z", "relationship_type": "related-to", "source_ref": "incident--3974aed3-cf56-573d-a423-73ef6335b54b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--74d032d6-7ec6-5f38-8305-3224e545a9de", "created": "2026-11-10T16:32:07.959Z", "modified": "2026-11-10T16:40:20.366Z", "name": "タイムズカー情報漏えい 業界団体に対策の点検を要請 国交省", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261006/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261006de55582", "description": "タイムズカー情報漏えい 業界団体に対策の点検を要請 国交省" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--09f0ecb2-33da-5e52-b5e7-8f82eaf941e3", "created": "2026-11-10T16:32:07.959Z", "modified": "2026-11-10T16:32:07.959Z", "relationship_type": "related-to", "source_ref": "incident--74d032d6-7ec6-5f38-8305-3224e545a9de", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ef744a4b-8adf-5e7e-8e88-b22951f462ad", "created": "2026-11-10T16:32:07.902Z", "modified": "2026-11-10T16:40:20.320Z", "name": "大和証券 委託先サーバー不正アクセス 個人情報11万人分流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 5, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 110,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/11-20261005/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261005de54568", "description": "大和証券 委託先サーバー不正アクセス 個人情報11万人分流出か" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--88074568-a0ad-5b11-8d24-ba7235634890", "created": "2026-11-10T16:32:07.902Z", "modified": "2026-11-10T16:32:07.902Z", "relationship_type": "related-to", "source_ref": "incident--ef744a4b-8adf-5e7e-8e88-b22951f462ad", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2aeca8fb-bf43-5727-85e0-ac3a8fa28ba0", "created": "2026-11-10T16:32:07.907Z", "modified": "2026-11-10T16:40:20.325Z", "name": "大起水産 不正アクセスで約17万5000人分の個人情報漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 5, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 170,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/175000-20261005/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261005de54848", "description": "大起水産 不正アクセスで約17万5000人分の個人情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a08f19af-bdb4-539e-bac0-9758499cd45f", "created": "2026-11-10T16:32:07.907Z", "modified": "2026-11-10T16:32:07.907Z", "relationship_type": "related-to", "source_ref": "incident--2aeca8fb-bf43-5727-85e0-ac3a8fa28ba0", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2017bb33-41ac-5fea-a089-82f50987462d", "created": "2026-11-10T16:32:07.912Z", "modified": "2026-11-10T16:40:20.329Z", "name": "Yakiniku King BBQ chain says over 10 mil customer records leaked", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 5, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yakiniku-king-bbq-chain-says-over-10-mil-customer-records-leaked-20261005/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/business/update2-japan%27s-yakiniku-king-bbq-chain-says-over-10-mil.-customer-records-leaked", "description": "Yakiniku King BBQ chain says over 10 mil customer records leaked" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ab9e44b8-b084-505f-8b2c-0fd93570edfb", "created": "2026-11-10T16:32:07.912Z", "modified": "2026-11-10T16:32:07.912Z", "relationship_type": "related-to", "source_ref": "incident--2017bb33-41ac-5fea-a089-82f50987462d", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--708adee5-ceb5-5c54-b9e7-d1755b3c182a", "created": "2026-11-10T16:32:07.892Z", "modified": "2026-11-10T16:40:20.308Z", "name": "日経新聞サイバー攻撃で情報漏えいか なりすましメールが送信", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 4, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261004/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261004de54358", "description": "日経新聞サイバー攻撃で情報漏えいか なりすましメールが送信" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--95fc676e-0938-5107-81c8-1ff5f8e36473", "created": "2026-11-10T16:32:07.892Z", "modified": "2026-11-10T16:32:07.892Z", "relationship_type": "related-to", "source_ref": "incident--708adee5-ceb5-5c54-b9e7-d1755b3c182a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--50a2b64e-ac29-5d5e-af40-dae6d80f7796", "created": "2026-11-10T16:32:07.864Z", "modified": "2026-11-10T16:40:20.278Z", "name": "第一ライフに不正アクセス 12万人分の従業員情報が流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 3, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 120,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/12-20261003/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261003de54037", "description": "第一ライフに不正アクセス 12万人分の従業員情報が流出か" } ], "x_securitystudies_occurred_on": "2026-10-03", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dfdfc7c-d2f6-5164-a0bb-bc196e5b6295", "created": "2026-11-10T16:32:07.864Z", "modified": "2026-11-10T16:32:07.864Z", "relationship_type": "related-to", "source_ref": "incident--50a2b64e-ac29-5d5e-af40-dae6d80f7796", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8de0d3fb-4329-5ba5-85db-492c681ed5b5", "created": "2026-11-10T16:32:07.869Z", "modified": "2026-11-10T16:40:20.284Z", "name": "Thousands sign up for legal action website in car-share service data leak", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 3, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/thousands-sign-up-for-legal-action-website-in-car-share-service-data-l-20261003/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/national/update1-thousands-sign-up-for-legal-action-website-in-car-share-service-data-leak", "description": "Thousands sign up for legal action website in car-share service data leak" } ], "x_securitystudies_occurred_on": "2026-10-03", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5744f1c5-8e7f-57ea-8ae2-d8f89330cc6a", "created": "2026-11-10T16:32:07.869Z", "modified": "2026-11-10T16:32:07.869Z", "relationship_type": "related-to", "source_ref": "incident--8de0d3fb-4329-5ba5-85db-492c681ed5b5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a5bca504-4398-5972-84d6-e5b87b9da762", "created": "2026-11-10T16:32:07.847Z", "modified": "2026-11-10T16:40:20.259Z", "name": "当社グループ管理サーバーへの不正アクセスに関するお知らせ", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 2, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261002/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/02/noticeransomware-incident-jp/", "description": "当社グループ管理サーバーへの不正アクセスに関するお知らせ" } ], "x_securitystudies_occurred_on": "2026-10-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--19bae428-9b78-5c15-a94a-4cb900ee2b0e", "created": "2026-11-10T16:32:07.847Z", "modified": "2026-11-10T16:32:07.847Z", "relationship_type": "related-to", "source_ref": "incident--a5bca504-4398-5972-84d6-e5b87b9da762", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--69cbaa89-c50c-536f-8b53-d4a314e575bc", "created": "2026-11-10T16:32:07.843Z", "modified": "2026-11-10T16:40:20.253Z", "name": "佐川急便に不正アクセス 住所など個人情報が漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 1, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261001/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261002de53762", "description": "佐川急便に不正アクセス 住所など個人情報が漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-01", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e68f508c-d30d-5046-9681-0d87cef8b087", "created": "2026-11-10T16:32:07.843Z", "modified": "2026-11-10T16:32:07.843Z", "relationship_type": "related-to", "source_ref": "incident--69cbaa89-c50c-536f-8b53-d4a314e575bc", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--feb5bc10-84f6-56cb-9835-6711413c9806", "created": "2026-11-10T16:32:07.817Z", "modified": "2026-11-10T16:40:20.228Z", "name": "Times Car Rental says data breach affected 6.6 million accounts", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Sep 30, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 6,600,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/times-car-rental-says-data-breach-affected-66-million-accounts-20260930/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/09/30/japan/crime-legal/times-car-rental-hack/", "description": "Times Car Rental says data breach affected 6.6 million accounts" } ], "x_securitystudies_occurred_on": "2026-09-30", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7724d6fd-3c4c-5af4-9763-d013120db06d", "created": "2026-11-10T16:32:07.817Z", "modified": "2026-11-10T16:32:07.817Z", "relationship_type": "related-to", "source_ref": "incident--feb5bc10-84f6-56cb-9835-6711413c9806", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--5b11bf30-683c-548f-b4bd-0d46363123cc", "created": "2026-11-10T16:32:07.810Z", "modified": "2026-11-10T16:40:20.223Z", "name": "セイコーマート 不正アクセスで約57万アカウント漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Sep 29, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 570,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/57-20260929/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20260929de53020", "description": "セイコーマート 不正アクセスで約57万アカウント漏えいか" } ], "x_securitystudies_occurred_on": "2026-09-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2ce6429d-f3d0-5d66-9adc-9e8dc3973871", "created": "2026-11-10T16:32:07.810Z", "modified": "2026-11-10T16:32:07.810Z", "relationship_type": "related-to", "source_ref": "incident--5b11bf30-683c-548f-b4bd-0d46363123cc", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ec034b29-0c62-505e-afce-8e73db89287b", "created": "2026-11-10T16:32:07.783Z", "modified": "2026-11-10T16:40:20.209Z", "name": "東京メトロ 不正アクセスでメールアドレス 約5万9000件流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Sep 27, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 50,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/59000-20260927/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20260927de52694", "description": "東京メトロ 不正アクセスでメールアドレス 約5万9000件流出か" } ], "x_securitystudies_occurred_on": "2026-09-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--29ff8193-37ff-5a5b-b7f3-609db7b42096", "created": "2026-11-10T16:32:07.783Z", "modified": "2026-11-10T16:32:07.783Z", "relationship_type": "related-to", "source_ref": "incident--ec034b29-0c62-505e-afce-8e73db89287b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-10T16:26:37.587Z", "name": "GitLab maximum-severity path traversal exploited within hours of disclosure", "description": "CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in the GitLab repository commits API, came under in-the-wild probing from 06:00 UTC on 11 September 2026 according to watchTowr, the same day CISA added it to the KEV catalog. Exploitation requires only that a single public project exists and allows arbitrary file reads of logs, configuration files, credentials and secrets. Successful exploitation creates a direct path to source code theft and CI/CD pipeline compromise. Patches are available in 19.3.2, 19.2.6 and 19.1.8, with a 14 September federal remediation deadline.", "confidence": 50, "labels": [ "supply_chain", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/gitlab-maximum-severity-path-traversal-exploited-within-hours-of-disclosure/" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html" }, { "source_name": "source", "url": "https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/" }, { "source_name": "source", "url": "https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-one-known-exploited-vulnerability-catalog" } ], "x_securitystudies_occurred_on": "2026-09-11", "x_securitystudies_severity": 5, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Technology and Software Supply Chain", "Financial Services", "Government" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "United States", "country": "US" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fc3a7591-bd53-50ae-8a72-e41de1afbd37", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-08T21:16:16.717Z", "relationship_type": "related-to", "source_ref": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--41ac0fa7-2d80-5bda-afc1-65273a433364", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "United Kingdom", "country": "GB" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2659c6c3-953e-58b2-9aa3-3265700a2b97", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-08T21:16:16.717Z", "relationship_type": "related-to", "source_ref": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "target_ref": "location--41ac0fa7-2d80-5bda-afc1-65273a433364", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Germany", "country": "DE" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--689583b4-610b-5c43-be4e-fd6b7195d101", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-08T21:16:16.717Z", "relationship_type": "related-to", "source_ref": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a7ac4e90-1e57-5eb8-ab78-8e93cbae1ba1", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-08T21:16:16.717Z", "relationship_type": "related-to", "source_ref": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--095279bc-69f1-5155-a576-8cfad052b57e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "India", "country": "IN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1e5d137b-c900-551e-a96d-d91718577e9d", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-08T21:16:16.717Z", "relationship_type": "related-to", "source_ref": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--43d29671-3132-541c-b643-0985fe12aebb", "created": "2026-11-08T21:16:16.717Z", "modified": "2026-11-08T21:16:16.717Z", "relationship_type": "related-to", "source_ref": "incident--df93c624-4dac-5413-a1f3-71ded88e6b63", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-10T16:26:37.587Z", "name": "Dutch NCSC warns critical Check Point VPN flaws face imminent exploitation", "description": "The Dutch National Cyber Security Centre issued a warning that exploitation of CVE-2026-85102 and CVE-2026-85103 in Check Point VPN Security Gateway and Security Management Servers is imminent, assessing both likelihood and impact as high. CVE-2026-85102 is an improper certificate validation flaw during VPN negotiation enabling arbitrary code execution, while CVE-2026-85103 is a heap overflow in the VPN certificate ASN.1 decoder permitting remote code execution; both are rated 9.8. Affected versions include R81.20, R82, R82.10, R81.10.x and R82.00.x plus end-of-support R80 through R81.10, with R82.20 unaffected. No public exploit code existed at time of reporting and neither CVE appears in the CISA KEV catalog as of version 2026.09.11. Patches shipped 9 September 2026.", "confidence": 50, "labels": [ "other", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/dutch-ncsc-warns-critical-check-point-vpn-flaws-face-imminent-exploitation/" }, { "source_name": "source", "url": "https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html" } ], "x_securitystudies_occurred_on": "2026-09-09", "x_securitystudies_severity": 4, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Government", "Financial Services", "Critical Infrastructure", "Manufacturing" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--fe267809-b98d-54a3-9e8a-636c61dfcb03", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Netherlands", "country": "NL" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--56561444-f2fa-5f98-a150-4192444a07ac", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-08T21:16:16.722Z", "relationship_type": "related-to", "source_ref": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "target_ref": "location--fe267809-b98d-54a3-9e8a-636c61dfcb03", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5bde517c-7bdd-5a8b-9e12-4357c671ee3f", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-08T21:16:16.722Z", "relationship_type": "related-to", "source_ref": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c8f1404a-837d-5b97-b4ef-9facfcc40be8", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-08T21:16:16.722Z", "relationship_type": "related-to", "source_ref": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "target_ref": "location--41ac0fa7-2d80-5bda-afc1-65273a433364", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1620e02b-0832-534f-b54b-9b94c8547bc6", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-08T21:16:16.722Z", "relationship_type": "related-to", "source_ref": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--afcd4fe1-ec8e-5dad-b123-13144bc09f07", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-08T21:16:16.722Z", "relationship_type": "related-to", "source_ref": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Australia", "country": "AU" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e458f5b5-c8f5-52a2-87ac-d3b80558d13c", "created": "2026-11-08T21:16:16.722Z", "modified": "2026-11-08T21:16:16.722Z", "relationship_type": "related-to", "source_ref": "incident--6d6d10d1-508f-5d26-829f-159c5a2f5a31", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b85881eb-f31c-5ccc-a02d-32f30974e627", "created": "2026-11-08T21:16:16.709Z", "modified": "2026-11-10T16:26:37.587Z", "name": "Unpatched StyleSmuggler Zero-Day Exploited Across Magento and Adobe Commerce Stores", "description": "Dutch security firm Sansec disclosed active exploitation, beginning 4 September 2026, of an unpatched flaw affecting Magento Open Source 2.4.6 through 2.4.9 and Adobe Commerce. Attackers plant PHP code into files Magento writes, such as failure reports, and execution is triggered automatically when the platform renders its routine Payment Transaction Failed Reminder email, requiring no user interaction. The resulting backdoor runs as a process disguised as the Linux kernel thread [kworker/u:8:0], installs binaries in the user home directory rather than the web root, and re-adds cron entries every five minutes. No CVE, patch or official workaround existed as of 6 September 2026, with the next scheduled Adobe security release set for 8 September.", "confidence": 50, "labels": [ "other", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/unpatched-stylesmuggler-zero-day-exploited-across-magento-and-adobe-commerce-stores/" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.html" } ], "x_securitystudies_occurred_on": "2026-09-04", "x_securitystudies_severity": 5, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Retail & E-commerce", "Technology" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0e406bb3-0a39-5075-8f96-d9cd6e06de90", "created": "2026-11-08T21:16:16.709Z", "modified": "2026-11-08T21:16:16.709Z", "relationship_type": "related-to", "source_ref": "incident--b85881eb-f31c-5ccc-a02d-32f30974e627", "target_ref": "location--fe267809-b98d-54a3-9e8a-636c61dfcb03", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d0c66848-781e-57bb-9bb1-d2a4a77b0773", "created": "2026-11-08T21:16:16.709Z", "modified": "2026-11-08T21:16:16.709Z", "relationship_type": "related-to", "source_ref": "incident--b85881eb-f31c-5ccc-a02d-32f30974e627", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3a268a25-e664-5085-8aa6-967531515923", "created": "2026-11-08T21:16:16.709Z", "modified": "2026-11-08T21:16:16.709Z", "relationship_type": "related-to", "source_ref": "incident--b85881eb-f31c-5ccc-a02d-32f30974e627", "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f51a42fc-c1bc-5f11-a014-b06620be9890", "created": "2026-11-08T21:16:16.709Z", "modified": "2026-11-08T21:16:16.709Z", "relationship_type": "related-to", "source_ref": "incident--b85881eb-f31c-5ccc-a02d-32f30974e627", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d715dae8-45d7-58c8-9d8b-8b8fc6ebfdcc", "created": "2026-11-08T21:16:16.709Z", "modified": "2026-11-08T21:16:16.709Z", "relationship_type": "related-to", "source_ref": "incident--b85881eb-f31c-5ccc-a02d-32f30974e627", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a33a801c-155e-55ff-a042-ba68fbef2d44", "created": "2026-11-08T21:16:16.711Z", "modified": "2026-11-10T16:26:37.587Z", "name": "Google Patches Sixth Actively Exploited Chrome Zero-Day of 2026", "description": "Google released an emergency Chrome update addressing CVE-2026-85046, a CVSS 8.8 type confusion vulnerability in the V8 JavaScript and WebAssembly engine that enables arbitrary code execution within the renderer sandbox via a crafted HTML page. The flaw was under active exploitation prior to patching and is the sixth exploited Chrome zero-day of 2026. CISA added it to the Known Exploited Vulnerabilities catalogue on 4 September 2026, requiring Federal Civilian Executive Branch agencies to remediate by 18 September 2026. The fix ships in Chrome 152.0.7977.82.", "confidence": 50, "labels": [ "other", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/google-patches-sixth-actively-exploited-chrome-zero-day-of-2026/" }, { "source_name": "source", "url": "https://www.cisa.gov/news-events/alerts/2026/09/04/cisa-adds-one-known-exploited-vulnerability-catalog" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html" }, { "source_name": "source", "url": "https://www.bleepingcomputer.com/news/security/google-warns-of-new-chrome-zero-day-flaw-exploited-in-attacks/" }, { "source_name": "source", "url": "https://securityaffairs.com/198405/security/google-fixes-the-sixth-actively-exploited-chrome-zero-day-of-2026.html" } ], "x_securitystudies_occurred_on": "2026-09-04", "x_securitystudies_severity": 4, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Government", "Technology", "Financial Services", "Healthcare" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7f4ae124-6b26-520d-8306-f3df41bdc29a", "created": "2026-11-08T21:16:16.711Z", "modified": "2026-11-08T21:16:16.711Z", "relationship_type": "related-to", "source_ref": "incident--a33a801c-155e-55ff-a042-ba68fbef2d44", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--61f8abc6-b0fd-5c03-ac7f-45ee19b1d8a6", "created": "2026-11-08T21:16:16.711Z", "modified": "2026-11-08T21:16:16.711Z", "relationship_type": "related-to", "source_ref": "incident--a33a801c-155e-55ff-a042-ba68fbef2d44", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "South Korea", "country": "KR" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0f08bb4e-8dc7-5fda-8c39-751c887e6e04", "created": "2026-11-08T21:16:16.711Z", "modified": "2026-11-08T21:16:16.711Z", "relationship_type": "related-to", "source_ref": "incident--a33a801c-155e-55ff-a042-ba68fbef2d44", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--343d1641-2005-55b4-a2ff-02e0f31e83a4", "created": "2026-11-08T21:16:16.711Z", "modified": "2026-11-08T21:16:16.711Z", "relationship_type": "related-to", "source_ref": "incident--a33a801c-155e-55ff-a042-ba68fbef2d44", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8d466d58-e466-5116-9c0d-9743d902f512", "created": "2026-11-08T21:16:16.711Z", "modified": "2026-11-08T21:16:16.711Z", "relationship_type": "related-to", "source_ref": "incident--a33a801c-155e-55ff-a042-ba68fbef2d44", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "created": "2026-11-08T21:16:16.706Z", "modified": "2026-11-10T16:26:37.587Z", "name": "SonicWall SMA 1000 Zero-Day Chain Exploited for Remote Code Execution", "description": "SonicWall disclosed that threat actors are chaining two previously unknown vulnerabilities in SMA 1000 remote-access appliances. CVE-2026-83548, a CVSS 10.0 pre-authentication server-side request forgery in the WorkPlace interface, is used to reach internal functionality, and CVE-2026-83549, a CVSS 7.8 OS command injection in the Appliance Management Console, converts that access into arbitrary command execution. CISA added both to the Known Exploited Vulnerabilities catalogue on 2 September 2026 with a remediation deadline of 5 September. Compromise of these appliances yields authenticated network position behind perimeter controls.", "confidence": 50, "labels": [ "other", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sonicwall-sma-1000-zero-day-chain-exploited-for-remote-code-execution/" }, { "source_name": "source", "url": "https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog" }, { "source_name": "source", "url": "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws/" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html" } ], "x_securitystudies_occurred_on": "2026-09-02", "x_securitystudies_severity": 5, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Government", "Technology", "Financial Services" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--93a4b897-9098-5258-8f78-c11ca62c9c2d", "created": "2026-11-08T21:16:16.706Z", "modified": "2026-11-08T21:16:16.706Z", "relationship_type": "related-to", "source_ref": "incident--77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7c1fb9eb-6517-5d3f-a593-dbe41586b7ec", "created": "2026-11-08T21:16:16.706Z", "modified": "2026-11-08T21:16:16.706Z", "relationship_type": "related-to", "source_ref": "incident--77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1e87d0f6-5cc6-563d-884f-7c283893a9e7", "created": "2026-11-08T21:16:16.706Z", "modified": "2026-11-08T21:16:16.706Z", "relationship_type": "related-to", "source_ref": "incident--77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--75c8ae31-9b94-5ba7-a159-38dd7168e3f1", "created": "2026-11-08T21:16:16.706Z", "modified": "2026-11-08T21:16:16.706Z", "relationship_type": "related-to", "source_ref": "incident--77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--70de3750-edaf-5bef-8617-848f92724d94", "created": "2026-11-08T21:16:16.706Z", "modified": "2026-11-08T21:16:16.706Z", "relationship_type": "related-to", "source_ref": "incident--77b198ef-5ab0-5a24-b4fb-c6ca80d2ebc7", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--82d67df5-545f-59b5-bdad-47706b5845aa", "created": "2026-11-08T21:16:16.718Z", "modified": "2026-11-10T16:26:37.587Z", "name": "JFrog Artifactory flaws chained to administrator access and Rust backdoor deployment", "description": "Wiz disclosed coordinated exploitation of CVE-2026-42018, which returns an internal anonymous-user token to an unauthenticated caller, chained with CVE-2026-42016 to escalate that token to administrator scope, taking attackers from first request to new admin account in under five minutes. Separately CVE-2026-82329, a CVSS 9.8 authentication bypass, was exploited between 1 and 8 September with approximately 406,000 attempts detected on 2 September alone. Post-compromise activity included persistent admin account creation, malicious Groovy plugin installation, custom Rust backdoor deployment and extraction of cluster join keys for lateral movement. Cloud instances were unaffected; CISA KEV-listed CVE-2026-42016 and CVE-2026-42018 on 11 September and CVE-2026-82329 on 2 September.", "confidence": 50, "labels": [ "supply_chain", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/jfrog-artifactory-flaws-chained-to-administrator-access-and-rust-backdoor-deployment/" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/attackers-chain-jfrog-artifactory-flaws.html" }, { "source_name": "source", "url": "https://www.bleepingcomputer.com/news/security/artifactory-flaws-chained-in-attacks-deploying-backdoor-malware/" }, { "source_name": "source", "url": "https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog" } ], "x_securitystudies_occurred_on": "2026-09-01", "x_securitystudies_severity": 5, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Technology and Software Supply Chain", "Financial Services", "Telecommunications" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cfec3d19-bfa2-575a-803c-48d5a663cd46", "created": "2026-11-08T21:16:16.718Z", "modified": "2026-11-08T21:16:16.718Z", "relationship_type": "related-to", "source_ref": "incident--82d67df5-545f-59b5-bdad-47706b5845aa", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--623d501b-23aa-52d8-a2d8-074c27fb5234", "created": "2026-11-08T21:16:16.718Z", "modified": "2026-11-08T21:16:16.718Z", "relationship_type": "related-to", "source_ref": "incident--82d67df5-545f-59b5-bdad-47706b5845aa", "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--280a4642-e073-52ad-bf40-8aec67acd6a6", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Israel", "country": "IL" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e6aba39b-8a85-516e-aec0-d40f54fe57cf", "created": "2026-11-08T21:16:16.718Z", "modified": "2026-11-08T21:16:16.718Z", "relationship_type": "related-to", "source_ref": "incident--82d67df5-545f-59b5-bdad-47706b5845aa", "target_ref": "location--280a4642-e073-52ad-bf40-8aec67acd6a6", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--259590b5-9f37-55c7-b69b-83fb922fc57b", "created": "2026-11-08T21:16:16.718Z", "modified": "2026-11-08T21:16:16.718Z", "relationship_type": "related-to", "source_ref": "incident--82d67df5-545f-59b5-bdad-47706b5845aa", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8015834a-a6cd-53fd-804b-fde3f523a5d9", "created": "2026-11-08T21:16:16.718Z", "modified": "2026-11-08T21:16:16.718Z", "relationship_type": "related-to", "source_ref": "incident--82d67df5-545f-59b5-bdad-47706b5845aa", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6abab280-a420-5c30-95f1-c69b821b7b59", "created": "2026-11-08T21:16:16.703Z", "modified": "2026-11-10T16:26:37.587Z", "name": "RansomHouse Attack on Nichirei Disrupts Japanese Food Supply Chain", "description": "The RansomHouse group claimed responsibility for a cyberattack on Nichirei, Japan's largest frozen-food and cold-logistics company, disrupting order and shipping systems. The attack directly impacted roughly 5,000 business customers, including Kentucky Fried Chicken Japan, forcing manual workarounds across the nationwide cold chain.", "confidence": 50, "labels": [ "ransomware", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ransomhouse-attack-on-nichirei-disrupts-japanese-food-supply-chain/" }, { "source_name": "source", "url": "https://www.japantimes.co.jp/business/2026/07/22/companies/nichirei-cyberattack-ransomhouse/" } ], "x_securitystudies_occurred_on": "2026-07-22", "x_securitystudies_severity": 4, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "food and beverage", "logistics" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d8c675ce-51d2-5478-b77e-94fc0d2d8326", "created": "2026-11-08T21:16:16.703Z", "modified": "2026-11-08T21:16:16.703Z", "relationship_type": "related-to", "source_ref": "incident--6abab280-a420-5c30-95f1-c69b821b7b59", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ed609681-141a-5889-9879-62a039024462", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-10T16:26:37.587Z", "name": "Anthropic disrupts APT29-linked GTG-20006 AI-assisted malware rebuild operation", "description": "Anthropic disclosed in September 2026 that it had disrupted GTG-20006, a cluster attributed to Midnight Blizzard/APT29/Cozy Bear, which had constructed an AI-driven process to monitor its malware against security products and automatically rebuild and redeploy any toolkit that was detected. The group additionally used the model to register domains, establish hosting and manage command-and-control channels. Operations ran July to September 2026 against more than 20 organisations across Ukraine, Europe, the Middle East and Asia, targeting military intelligence, diplomatic and defence bodies and individuals connected to US foreign policy. The malware set included PowerChrome, WUEngine, Shadow C2, MiniPlasma and CloudSyncSvc on Windows plus GiftDrop for Android and DarkSword for iOS, overlapping with the CaptiveCrunch campaign.", "confidence": 50, "labels": [ "espionage", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/anthropic-disrupts-apt29-linked-gtg-20006-ai-assisted-malware-rebuild-operation/" }, { "source_name": "source", "url": "https://thehackernews.com/2026/09/russian-state-sponsored-hackers-use.html" }, { "source_name": "source", "url": "https://www.bleepingcomputer.com/news/security/hackers-abused-claude-to-extract-secrets-from-18m-android-apps/" } ], "x_securitystudies_occurred_on": "2026-07-01", "x_securitystudies_severity": 4, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Government", "Military Intelligence", "Diplomatic Missions", "Defense" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--ea0d7db0-76af-585f-abba-be0eedbdb5b0", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Ukraine", "country": "UA" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7de38b3e-b581-521a-954a-cf97402f8960", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "location--ea0d7db0-76af-585f-abba-be0eedbdb5b0", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--503459b5-8a45-54e9-a768-8ce4d09c7ddd", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Poland", "country": "PL" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c947ebb1-ccbe-5435-a3aa-5746a0519b4f", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "location--503459b5-8a45-54e9-a768-8ce4d09c7ddd", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b050480-c68d-567b-a270-2f566474c7fa", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "location--985edf3b-bbdc-5fce-808b-4e4869bff566", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--43dcc2a4-ccbb-5e52-8de5-7a787e33f88a", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e2ba8b8-c6b1-5a12-b78e-aba7b2e53d7a", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "location--280a4642-e073-52ad-bf40-8aec67acd6a6", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--25dc3af8-c83d-55aa-b685-bccd9b2b64ba", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--6fb07810-96dd-5ad6-a80a-1306e77f020a", "created": "2026-11-09T04:30:08.727Z", "modified": "2026-11-09T04:30:08.727Z", "name": "APT29", "aliases": [ "ATK7", "Blue Kitsune", "BlueBravo", "COZY BEAR", "Cloaked Ursa", "Cozy Bear", "CozyDuke", "Dark Halo", "G0016", "Grizzly Steppe", "Group 100", "ICE RELIC", "ICECAP", "IRON HEMLOCK", "IRON RITUAL", "ITG11", "Midnight Blizzard", "Minidionis", "NOBELIUM", "Nobelium", "NobleBaron", "SeaDuke", "SolarStorm", "TA421", "The Dukes", "UAC-0029", "UNC2452", "UNC3524", "YTTRIUM" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "G0016", "url": "https://attack.mitre.org/groups/G0016/" }, { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/apt29/" } ], "description": "A 2015 report by F-Secure describe APT29 as: 'The Dukes are a well-resourced, highly dedicated and organized cyberespionage group that we believe has been working for the Russian Federation since at least 2008 to collect intelligence in support of foreign and security policy decision-making. The Dukes show unusual confidence in their ability to continue successfully compromising their targets, as well as in their ability to operate with impunity. The Dukes primarily target Western governments and related organizations, such as government ministries and agencies, political think tanks, and governmental subcontractors. Their targets have also included the governments of members of the Commonwealth of Independent States;Asian, African, and Middle Eastern governments;organizations associated with Chechen extremism;and Russian speakers engaged in the illicit trade of controlled substances and drugs. The Dukes are known to employ a vast arsenal of malware toolsets, which we identify as MiniDuke, CosmicDuke, OnionDuke, CozyDuke, CloudDuke, SeaDuke, HammerDuke, PinchDuke, and GeminiDuke. In recent years, the Dukes have engaged in apparently biannual large - scale spear - phishing campaigns against hundreds or even thousands of recipients associated with governmental institutions and affiliated organizations. These campaigns utilize a smash - and - grab approach involving a fast but noisy breakin followed by the rapid collection and exfiltration of as much data as possible.If the compromised target is discovered to be of value, the Dukes will quickly switch the toolset used and move to using stealthier tactics focused on persistent compromise and long - term intelligence gathering. This threat actor targets government ministries and agencies in the West, Central Asia, East Africa, and the Middle East; Chechen extremist groups; Russian organized crime; and think tanks. It is suspected to be behind the 2015 compromise of unclassified networks at the White House, Department of " }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--87f07adf-f81e-5fba-beac-50013a92727a", "created": "2026-11-08T21:16:16.721Z", "modified": "2026-11-08T21:16:16.721Z", "relationship_type": "related-to", "source_ref": "incident--ed609681-141a-5889-9879-62a039024462", "target_ref": "intrusion-set--6fb07810-96dd-5ad6-a80a-1306e77f020a", "description": "attribution" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4da37fa4-4d5d-55ac-a9b1-1036b696dc20", "created": "2026-11-08T21:16:16.694Z", "modified": "2026-11-10T16:26:37.587Z", "name": "Lazarus Group Cryptocurrency Exchange Heist — Singapore", "description": "Lazarus Group (DPRK) executed a sophisticated supply-chain compromise of a cryptocurrency custodial platform based in Singapore, stealing approximately USD 230 million in mixed crypto assets. The attack chain involved compromising a third-party trading SDK used by the exchange, injecting malicious transaction-signing code. FBI and MAS (Monetary Authority of Singapore) issued joint alert. Funds traced through Tornado Cash and cross-chain bridges to DPRK-linked wallets.", "confidence": 50, "labels": [ "apt", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lazarus-group-cryptocurrency-exchange-heist-singapore/" }, { "source_name": "source", "url": { "title": "FBI Flash Alert", "url": "https://www.ic3.gov/" } }, { "source_name": "source", "url": { "title": "Chainalysis Reactor Analysis", "url": "https://www.chainalysis.com/blog/" } } ], "x_securitystudies_occurred_on": "2026-04-28", "x_securitystudies_severity": 5, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Financial Services", "Cryptocurrency" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2fd59763-3328-5087-963a-aa90f344c88e", "created": "2026-11-08T21:16:16.694Z", "modified": "2026-11-08T21:16:16.694Z", "relationship_type": "related-to", "source_ref": "incident--4da37fa4-4d5d-55ac-a9b1-1036b696dc20", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--65796606-a29d-51c5-ac34-bad363d7e87b", "created": "2026-11-08T21:16:16.694Z", "modified": "2026-11-08T21:16:16.694Z", "relationship_type": "related-to", "source_ref": "incident--4da37fa4-4d5d-55ac-a9b1-1036b696dc20", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe350086-6cca-53b9-a30e-170b29fe9046", "created": "2026-11-08T21:16:16.694Z", "modified": "2026-11-08T21:16:16.694Z", "relationship_type": "related-to", "source_ref": "incident--4da37fa4-4d5d-55ac-a9b1-1036b696dc20", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--1c81c67d-4875-5b86-9083-46b743ee21c5", "created": "2026-11-09T04:30:08.761Z", "modified": "2026-11-09T04:30:08.761Z", "name": "Lazarus Group", "aliases": [ "APT 38", "APT-C-26", "APT38", "ATK117", "ATK3", "Andariel", "AppleJeus", "Appleworm", "BeagleBoyz", "Black Artemis", "Bluenoroff", "Bureau 121", "COPERNICIUM", "COVELLITE", "Citrine Sleet", "DEV-0139", "DEV-1222", "Dark Seoul", "Diamond Sleet", "G0032", "G0082", "Gleaming Pisces", "Group 77", "Guardians of Peace", "HIDDEN COBRA", "Hastati Group", "Hidden Cobra", "Labyrinth Chollima", "Lazarus group", "Moonstone Sleet", "NICKEL ACADEMY", "NICKEL GLADSTONE", "NewRomanic Cyber Army Team", "Nickel Academy", "Onyx Sleet", "Operation AppleJeus", "Operation DarkSeoul", "Operation GhostSecret", "Operation Troy", "PLUTONIUM" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "G1036", "url": "https://attack.mitre.org/groups/G1036/" }, { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/lazarus-group/" } ], "description": "Since 2009, HIDDEN COBRA actors have leveraged their capabilities to target and compromise a range of victims; some intrusions have resulted in the exfiltration of data while others have been disruptive in nature. Commercial reporting has referred to this activity as Lazarus Group and Guardians of Peace. Tools and capabilities used by HIDDEN COBRA actors include DDoS botnets, keyloggers, remote access tools (RATs), and wiper malware. Variants of malware and tools used by HIDDEN COBRA actors include Destover, Duuzer, and Hangman." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--428febc3-e79d-5bc3-8cb6-e88f3d375dbd", "created": "2026-11-08T21:16:16.694Z", "modified": "2026-11-08T21:16:16.694Z", "relationship_type": "related-to", "source_ref": "incident--4da37fa4-4d5d-55ac-a9b1-1036b696dc20", "target_ref": "intrusion-set--1c81c67d-4875-5b86-9083-46b743ee21c5", "description": "attribution" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-10T16:26:37.587Z", "name": "Salt Typhoon Telecom Espionage Campaign — Ongoing", "description": "Chinese state-sponsored group Salt Typhoon (also tracked as GhostEmperor/FamousSparrow) continues to maintain persistent access to major US, Southeast Asian, and Australian telecommunications networks. The campaign, first publicly disclosed in late 2024, has been confirmed to compromise call detail records and lawful intercept systems across at least 9 major carriers. As of May 2026, incident response is ongoing at several ASEAN-region telecoms. CISA has issued updated advisories recommending encrypted communications for government officials.", "confidence": 50, "labels": [ "espionage", "curated" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/salt-typhoon-telecom-espionage-campaign-ongoing/" }, { "source_name": "source", "url": { "title": "CISA Advisory AA24-340A", "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-340a" } }, { "source_name": "source", "url": { "title": "Microsoft Threat Intelligence", "url": "https://www.microsoft.com/en-us/security/blog/" } } ], "x_securitystudies_occurred_on": "2024-09-15", "x_securitystudies_severity": 5, "x_securitystudies_status": "curated", "x_securitystudies_sectors": [ "Telecommunications", "Government", "Defense" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--435d00ae-93cc-5b82-973d-553a2ad2316c", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--b3751652-d71d-531c-bcee-513adc9d0b87", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Philippines", "country": "PH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8108d9cb-277e-53fe-b5e8-3795c21eb8aa", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9072f4ee-c5de-5753-a3e6-9be0f67cbc1b", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d963c41d-ea95-5987-a1e4-a461feb2cbdc", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--c2c1b570-cc1c-557e-ac00-8cbd10cb8abc", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Indonesia", "country": "ID" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--26c5417c-4add-561a-9231-6a9797918e9d", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--c2c1b570-cc1c-557e-ac00-8cbd10cb8abc", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Taiwan", "country": "TW" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8be3764b-86b0-5fde-af53-2f87940a6fa2", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--642c612d-bcf7-5030-bd96-c51cad00d04e", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--994a786f-903b-5827-8b99-fb2bcf62d3db", "created": "2026-11-09T04:30:08.681Z", "modified": "2026-11-09T04:30:08.681Z", "name": "GhostEmperor", "aliases": [ "FamousSparrow", "OPERATOR PANDA", "RedMike", "Salt Typhoon", "UNC2286" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "G1045", "url": "https://attack.mitre.org/groups/G1045/" }, { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/ghostemperor/" } ], "description": "GhostEmperor is a Chinese-speaking threat actor that targets government entities and telecom companies in Southeast Asia. They employ a Windows kernel-mode rootkit called Demodex to gain remote control over their targeted servers. The actor demonstrates a high level of sophistication and uses various anti-forensic and anti-analysis techniques to evade detection. They have been active for a significant period of time and continue to pose a threat to their targets." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--344356d8-39e3-5c5b-b48f-9b5cf793a03a", "created": "2026-11-08T21:16:16.690Z", "modified": "2026-11-08T21:16:16.690Z", "relationship_type": "related-to", "source_ref": "incident--91156f08-77d1-56e9-a07f-3cdbff47a209", "target_ref": "intrusion-set--994a786f-903b-5827-8b99-fb2bcf62d3db", "description": "attribution" } ] }