{ "type": "bundle", "id": "bundle--c5680f96-d8a3-47ea-be40-68f69945ca88", "objects": [ { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "identity", "spec_version": "2.1", "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "SecurityStudies.info", "identity_class": "organization", "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1c798eeb-711e-5886-ac2a-27b51d553ea7", "created": "2026-11-12T12:05:12.145Z", "modified": "2026-11-13T00:02:47.933Z", "name": "Virtual asset exchange Flybit hacked, resident registration numbers and tax information of 40 customers leaked", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/virtual-asset-exchange-flybit-hacked-resident-registration-numbers-and-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209490", "description": "가상자산 거래소 플라이빗 해킹, 고객 40명 주민등록번호·납세정보 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "South Korea", "country": "KR" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f7dfb38c-4a9f-5855-bba0-72a67be129c1", "created": "2026-11-12T12:05:12.145Z", "modified": "2026-11-12T12:05:12.145Z", "relationship_type": "related-to", "source_ref": "incident--1c798eeb-711e-5886-ac2a-27b51d553ea7", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-13T00:02:47.913Z", "name": "S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Nov 12, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. EU member states named: Belgium. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/s-korea-belgium-discuss-leak-of-personal-data-of-president-lee-europe-20261112/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261112009400315", "description": "S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--f8de1409-c8bc-547e-863c-07817401d9a2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Belgium", "country": "BE" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6692a9e8-8886-5adb-8af8-4f4cc75610ff", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-12T12:05:12.127Z", "relationship_type": "related-to", "source_ref": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "target_ref": "location--f8de1409-c8bc-547e-863c-07817401d9a2", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1e3add33-ccec-5cc1-8bc0-cf85dee13c3a", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-12T12:05:12.127Z", "relationship_type": "related-to", "source_ref": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--636a9f6e-cdf1-51bb-89a1-4c7df294062b", "created": "2026-11-12T06:04:37.071Z", "modified": "2026-11-13T00:02:47.886Z", "name": "CAAT says only 2 from 7 main Thai airlines affected by data breach", "description": "Detected automatically from 1 article in 1 outlet (The Thaiger), Nov 12, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Thailand. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/caat-says-only-2-from-7-main-thai-airlines-affected-by-data-breach-20261112/" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/world/aviation/thai-airways-and-bangkok-airways-affected-by-data-leak", "description": "CAAT says only 2 from 7 main Thai airlines affected by data breach" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Thailand", "country": "TH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--10c85fd3-6296-5ad1-bea7-26bf577de962", "created": "2026-11-12T06:04:37.071Z", "modified": "2026-11-12T06:04:37.071Z", "relationship_type": "related-to", "source_ref": "incident--636a9f6e-cdf1-51bb-89a1-4c7df294062b", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b299d607-e234-5775-b9fc-432ce849ae5c", "created": "2026-11-11T12:23:36.576Z", "modified": "2026-11-13T00:02:47.840Z", "name": "VCAA investigating after website hacked during exam period", "description": "Detected automatically from 2 articles in 2 outlets (ABC News, The Guardian Australia), Nov 11, 2026. Type: intrusion; sectors: government, education. Asia-Pacific countries affected: Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/vcaa-investigating-after-website-hacked-during-exam-period-20261111/" }, { "source_name": "ABC News", "url": "https://www.abc.net.au/news/2026-11-11/vcaa-website-hacked-during-exam-period/107375210", "description": "VCAA investigating after website hacked during exam period" }, { "source_name": "The Guardian Australia", "url": "https://www.theguardian.com/australia-news/2026/nov/12/vce-exams-hack-year-12-papers-vcaa-victorian-curriculum-and-assessment-authority", "description": "Hacker claims to have sold VCE exam papers to hundreds of students after government website hack" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Australia", "country": "AU" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c4e334f2-e04f-5a05-96ae-312009c78c7d", "created": "2026-11-11T12:23:36.576Z", "modified": "2026-11-11T12:23:36.576Z", "relationship_type": "related-to", "source_ref": "incident--b299d607-e234-5775-b9fc-432ce849ae5c", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63", "created": "2026-11-11T20:35:30.174Z", "modified": "2026-11-13T00:02:47.856Z", "name": "300 Italian Schools Receive \"From Taiwan\" Bomb Threat Letters, Da-Yeh University Alumnus Account Suspected Hacked", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 11, 2026. Title machine-translated from Chinese. Type: intrusion; sectors: education. Asia-Pacific countries affected: Taiwan. EU member states named: Italy. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/300-italian-schools-receive-from-taiwan-bomb-threat-letters-da-yeh-uni-20261111/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/society/breakingnews/5637677", "description": "義大利300校收「來自台灣」炸彈恐嚇信 大葉大學校友帳號疑遭盜用" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--25d56fc8-0097-5c58-8db1-4aeb352be797", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Italy", "country": "IT" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1a8b590a-a0ee-5302-bd9b-51a47d6ce96d", "created": "2026-11-11T20:35:30.174Z", "modified": "2026-11-11T20:35:30.174Z", "relationship_type": "related-to", "source_ref": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63", "target_ref": "location--25d56fc8-0097-5c58-8db1-4aeb352be797", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Taiwan", "country": "TW" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7b83b865-25b6-5afa-bafd-b174b6b44661", "created": "2026-11-11T20:35:30.174Z", "modified": "2026-11-11T20:35:30.174Z", "relationship_type": "related-to", "source_ref": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8d8d7289-42ee-53df-a6b8-6de299cb49c4", "created": "2026-11-11T18:04:05.456Z", "modified": "2026-11-13T00:02:47.850Z", "name": "Dementia Singapore app users' personal data potentially compromised in cyber incident", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Nov 11, 2026. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/dementia-singapore-app-users-personal-data-potentially-compromised-in-20261111/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/cara-app-dementia-singapore-cybersecurity-incident-6542871", "description": "Dementia Singapore app users' personal data potentially compromised in cyber incident" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Singapore", "country": "SG" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e88403e-57a9-5996-87af-32249baf7e9b", "created": "2026-11-11T18:04:05.456Z", "modified": "2026-11-11T18:04:05.456Z", "relationship_type": "related-to", "source_ref": "incident--8d8d7289-42ee-53df-a6b8-6de299cb49c4", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2882ccb4-cf7a-57ea-b7db-ad34c3e3a0b5", "created": "2026-11-10T16:32:08.759Z", "modified": "2026-11-13T00:02:47.782Z", "name": "SPH Media hit by cyberattacks; no payment card details or financial information compromised", "description": "Detected automatically from 4 articles in 4 outlets (Channel News Asia, Free Malaysia Today, Mothership, The Straits Times), Nov 10, 2026. Type: data breach; sectors: financial services, media. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sph-media-hit-by-cyberattacks-no-payment-card-details-or-financial-inf-20261110/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/politics/sph-media-hit-by-cyberattacks-no-payment-card-details-or-financial-information-compromised", "description": "SPH Media hit by cyberattacks; no payment card details or financial information compromised" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/sph-media-cyberattack-data-breach-6538681", "description": "SPH Media hit by cyberattacks; says no customer financial data or access exposed" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/highlight/2026/11/10/singapore-s-sph-media-hit-by-cyberattacks-personal-database-exposed", "description": "Singapore’s SPH media hit by cyberattacks, personal database exposed" }, { "source_name": "Mothership", "url": "https://mothership.sg/2026/11/sph-media-hit-by-ai-enabled-cyberattacks-subscribers-names-phone-numbers-accessed/", "description": "SPH Media hit by AI-enabled cyberattacks; subscribers' names, phone numbers accessed" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services", "Media" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2971254a-e63e-57e7-86a9-28831990c695", "created": "2026-11-10T16:32:08.759Z", "modified": "2026-11-10T16:32:08.759Z", "relationship_type": "related-to", "source_ref": "incident--2882ccb4-cf7a-57ea-b7db-ad34c3e3a0b5", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6d10bffe-3813-5392-abaf-c644104cd87d", "created": "2026-11-11T20:35:30.065Z", "modified": "2026-11-13T00:02:47.776Z", "name": "Phishing notification sent impersonating parking app 'Get your reward'... External agency breached", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: data breach; sectors: government, technology. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/phishing-notification-sent-impersonating-parking-app-get-your-reward-e-20261110/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147150", "description": "주차장 앱 사칭 “보상 받으세요” 피싱 알림톡 보내... 외부 대행사 뚫려" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--931c350e-bc63-5681-9473-398129015822", "created": "2026-11-11T20:35:30.065Z", "modified": "2026-11-11T20:35:30.065Z", "relationship_type": "related-to", "source_ref": "incident--6d10bffe-3813-5392-abaf-c644104cd87d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3ca3953e-4381-5c42-a175-ce4ed966d19b", "created": "2026-11-11T12:23:36.534Z", "modified": "2026-11-13T00:02:47.812Z", "name": "Kang Chiao International School Linkou campus network hacked; parents receive ransom letters, realize all personal data leaked", "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, New Talk), Nov 10 to Nov 11, 2026. Title machine-translated from Chinese. Type: ransomware; sectors: education. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-5/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/society/breakingnews/5636370", "description": "「康橋國際學校」林口校區網路遭駭 家長收勒索信、驚覺個資全外洩" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-11/1070464", "description": "康橋林口校區驚傳駭客恐嚇！威脅洩露教職員與家長個資" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d56cb139-dbbb-580b-ae0b-9356de50d760", "created": "2026-11-11T12:23:36.534Z", "modified": "2026-11-11T12:23:36.534Z", "relationship_type": "related-to", "source_ref": "incident--3ca3953e-4381-5c42-a175-ce4ed966d19b", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c60aa734-7703-58e5-9153-f565285c2a0c", "created": "2026-11-10T16:32:08.783Z", "modified": "2026-11-13T00:02:47.806Z", "name": "AFP probing into alleged Air Force data breach", "description": "Detected automatically from 2 articles in 1 outlet (Philippine Daily Inquirer), Nov 10 to Nov 11, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/afp-probing-into-alleged-air-force-data-breach-20261110/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2339099/afp-probing-into-alleged-air-force-data-breach", "description": "AFP probing into alleged Air Force data breach" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2339430/afp-probes-alleged-data-breach-involving-air-force", "description": "AFP probes alleged data breach involving Air Force" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Defence" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Philippines", "country": "PH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e0a6d849-7f69-51e7-b275-77afd414026e", "created": "2026-11-10T16:32:08.783Z", "modified": "2026-11-10T16:32:08.783Z", "relationship_type": "related-to", "source_ref": "incident--c60aa734-7703-58e5-9153-f565285c2a0c", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4fa495ac-36d0-5e1d-8001-31d1616dc9e1", "created": "2026-11-10T16:32:08.774Z", "modified": "2026-11-13T00:02:47.801Z", "name": "Financial Security Institute reports data leak following hacking attack", "description": "Detected automatically from 7 articles in 3 outlets (Boannews (Korean), Dailysecu (Korean), Yonhap), Nov 10 to Nov 12, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-4/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147156", "description": "금융보안원, 해킹으로 정보 유출... 금융위 등 신고" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261110010600315", "description": "Financial Security Institute reports data leak following hacking attack" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261110010651315", "description": "(LEAD) Financial Security Institute reports data leak following hacking attack" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209438", "description": "[단독] 금융보안원 상시평가시스템 해킹 정황...금융사 내부정보 유출 기업에 통보 중인 것으로 확인" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147183", "description": "금보원 해킹, ‘가짜 금감원 계정’ 만들어 침투했다... ‘마스킹’ 없는 개인정보 유출 가능성도" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209448", "description": "[이슈 체크-1] 금융보안원 상시평가 시스템 해킹…공격자, 금감원 수준의 접근 권한 확보" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209450", "description": "인증기관 '디지서트' 내부 시스템 해킹…고객 업무 연락처 및 일부 여권·면허증 유출" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--27384d79-23f9-5b71-8b91-2ba99c5c7cd9", "created": "2026-11-10T16:32:08.774Z", "modified": "2026-11-10T16:32:08.774Z", "relationship_type": "related-to", "source_ref": "incident--4fa495ac-36d0-5e1d-8001-31d1616dc9e1", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--405f3569-5363-54ac-a5c2-56be7e0b152e", "created": "2026-11-10T16:32:08.743Z", "modified": "2026-11-13T00:02:47.765Z", "name": "Din Tai Fung shopping website hit by data breach! City councilor nearly falls for it, issues warning; official statement released urgently", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 10, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government, technology, retail. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-10/1070287", "description": "鼎泰豐購物網驚傳個資外洩！市議員險上當發文示警 官方急發聲明" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Technology", "Retail" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1707ef90-2b13-51cd-b1c7-e2d9616c5452", "created": "2026-11-10T16:32:08.743Z", "modified": "2026-11-10T16:32:08.743Z", "relationship_type": "related-to", "source_ref": "incident--405f3569-5363-54ac-a5c2-56be7e0b152e", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--879ec1e1-cadd-5677-92d5-d53dd777e840", "created": "2026-11-10T16:32:08.768Z", "modified": "2026-11-13T00:02:47.793Z", "name": "Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected", "description": "Detected automatically from 1 article in 1 outlet (The Straits Times), Nov 10, 2026. Type: data breach; sectors: education, technology. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools-a-20261110/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools-affected", "description": "Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--14cdb923-5db7-5511-9974-e06da998d7d0", "created": "2026-11-10T16:32:08.768Z", "modified": "2026-11-10T16:32:08.768Z", "relationship_type": "related-to", "source_ref": "incident--879ec1e1-cadd-5677-92d5-d53dd777e840", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cef2404f-e717-5c0f-b1e7-cb8cefded577", "created": "2026-11-10T16:32:08.715Z", "modified": "2026-11-13T00:02:47.728Z", "name": "Deputy Chief of Kut Chok Subdistrict Administrative Organization files a report with Cyber Police to find the person who hacked his Facebook", "description": "Detected automatically from 2 articles in 2 outlets (Khaosod (Thai), Matichon), Nov 9, 2026. Title machine-translated from Thai. Type: intrusion; sectors: government. Asia-Pacific countries affected: Thailand. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261109-2/" }, { "source_name": "Khaosod (Thai)", "url": "https://www.khaosod.co.th/around-thailand/news_10466378", "description": "ปลัด อบต.กุดจอก แจ้งความตร.ไซเบอร์ หาตัวคนแฮกเฟซบุ๊ก" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/region/news_5968556", "description": "ยันถูกแฮก! ปลัด อบต.กุดจอก หอบหลักฐานแจ้งความ ปัดส่งเจ้าหน้าที่ด่าทอผู้สื่อข่าว" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3c179534-43f4-56e6-a54a-d5010a4878d9", "created": "2026-11-10T16:32:08.715Z", "modified": "2026-11-10T16:32:08.715Z", "relationship_type": "related-to", "source_ref": "incident--cef2404f-e717-5c0f-b1e7-cb8cefded577", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2529a32d-ae58-5b7b-ae94-92dc50d4831a", "created": "2026-11-10T16:32:08.689Z", "modified": "2026-11-13T00:02:47.678Z", "name": "Fahmi says online banking remains safe despite cyberattacks and Bank Rakyat hack", "description": "Detected automatically from 2 articles in 2 outlets (Free Malaysia Today, Malay Mail), Nov 7, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/fahmi-says-online-banking-remains-safe-despite-cyberattacks-and-bank-r-20261107/" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/11/07/fahmi-says-online-banking-remains-safe-despite-cyberattacks-and-bank-rakyat-hack/242378", "description": "Fahmi says online banking remains safe despite cyberattacks and Bank Rakyat hack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/11/07/banking-system-secure-says-fahmi-after-bank-rakyat-hack", "description": "Banking system secure, says Fahmi after Bank Rakyat hack" } ], "x_securitystudies_occurred_on": "2026-11-07", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Malaysia", "country": "MY" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--63c5a92b-add4-519b-9d14-c21296e6b079", "created": "2026-11-10T16:32:08.689Z", "modified": "2026-11-10T16:32:08.689Z", "relationship_type": "related-to", "source_ref": "incident--2529a32d-ae58-5b7b-ae94-92dc50d4831a", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1dff11a9-d126-5a2f-b82b-9ea8ccf8ebfa", "created": "2026-11-10T16:32:08.695Z", "modified": "2026-11-13T00:02:47.684Z", "name": "Cyberattack shuts down Internet fan fiction library", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 7, 2026. Type: other; sectors: technology. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattack-shuts-down-internet-fan-fiction-library-20261107/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/world/archives/2026/11/08/2003867379", "description": "Cyberattack shuts down Internet fan fiction library" } ], "x_securitystudies_occurred_on": "2026-11-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--12a00f13-b4b6-5af1-a7f5-6f2e6344f1b4", "created": "2026-11-10T16:32:08.695Z", "modified": "2026-11-10T16:32:08.695Z", "relationship_type": "related-to", "source_ref": "incident--1dff11a9-d126-5a2f-b82b-9ea8ccf8ebfa", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-13T00:02:47.668Z", "name": "Mirae Asset says data breaches exposed customer, employee information", "description": "Detected automatically from 4 articles in 3 outlets (ETCISO (Economic Times), The Korea Herald, Yonhap), Nov 6 to Nov 9, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea, India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/mirae-asset-says-data-breaches-exposed-customer-employee-information-20261106/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261107000400315", "description": "Mirae Asset says data breaches exposed customer, employee information" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261107000451315", "description": "(LEAD) Personal info of some 39,000 leaked from Mirae Asset Securities" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10929242", "description": "Personal info of some 39,000 leaked from Mirae Asset Securities" }, { "source_name": "ETCISO (Economic Times)", "url": "https://ciso.economictimes.indiatimes.com/news/data-breaches/personal-info-of-39000-persons-leaked-from-mirae-asset-securities/135669047", "description": "Personal info of 39,000 persons leaked from Mirae Asset Securities" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--095279bc-69f1-5155-a576-8cfad052b57e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "India", "country": "IN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8730a6a4-1342-5393-ac9d-7cfd7315a152", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-10T16:32:08.678Z", "relationship_type": "related-to", "source_ref": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--65a71513-9667-5cbf-8f43-633d1647f9aa", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-10T16:32:08.678Z", "relationship_type": "related-to", "source_ref": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-13T00:02:47.646Z", "name": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns", "description": "Detected automatically from 2 articles in 2 outlets (Check Point Research, Microsoft Threat Intelligence), Nov 5 to Nov 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea, Hong Kong, Thailand, Cambodia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hacking-on-autopilot-inside-artex-cybercrime-campaigns-20261105/" }, { "source_name": "Check Point Research", "url": "https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/", "description": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns" }, { "source_name": "Microsoft Threat Intelligence", "url": "https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/", "description": "ARTEX abuse expands as cybercriminals target financial sector" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Hong Kong", "country": "HK" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ef85cfba-0238-5680-aea1-65608ed33612", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--045a1890-e799-520f-8119-ae91e4fb69bb", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Cambodia", "country": "KH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b12a351-49f3-59e1-9cc0-9a00ca31b2c8", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--045a1890-e799-520f-8119-ae91e4fb69bb", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2990eb21-033c-5af2-8a5b-46e23b3cb343", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7985a9d6-9e8b-57bc-9e3e-2829147cbdd9", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "created": "2026-11-09T04:30:05.339Z", "modified": "2026-11-09T04:30:05.339Z", "name": "Storm-0940", "aliases": [ "CovertNetwork-1658", "ORB07" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/storm-0940/" } ], "description": "Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as well as exploiting network edge applications. Microsoft has observed Storm-0940 utilizing valid credentials obtained from CovertNetwork-1658's password spray operations, indicating a close operational relationship between the two. Once inside a victim environment, Storm-0940 has been seen leveraging compromised credentials for further malicious activities. Additionally, Storm-0940 has employed botnets, such as Quad7, to facilitate password spraying attacks." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1999587e-b927-574f-9ab1-fa9a82d2d58e", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--19d01182-8092-5d15-a580-fa1c61784bf5", "created": "2026-11-10T16:32:08.652Z", "modified": "2026-11-13T00:02:47.640Z", "name": "South Korea investigates 580 finance firms over data leaks, issues warning", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Nov 5, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korea-investigates-580-finance-firms-over-data-leaks-issues-warn-20261105/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/week-asia/economics/article/3373363/south-korea-investigates-580-finance-firms-over-data-leaks-issues-warning", "description": "South Korea investigates 580 finance firms over data leaks, issues warning" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--720105e2-e7a9-541f-9c34-19722663917d", "created": "2026-11-10T16:32:08.652Z", "modified": "2026-11-10T16:32:08.652Z", "relationship_type": "related-to", "source_ref": "incident--19d01182-8092-5d15-a580-fa1c61784bf5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--146c35ff-de36-5c8d-8d30-3156bd41522c", "created": "2026-11-10T16:32:08.632Z", "modified": "2026-11-13T00:02:47.614Z", "name": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC", "description": "Detected automatically from 2 articles in 2 outlets (Korea Times, Yonhap), Nov 5, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-470000-pieces-of-personal-data-leaked-from-37-financial-firms-fsc-20261105/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261105002400320", "description": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261105/over-470000-pieces-of-personal-data-leaked-from-37-financial-firms-fsc?utm_source=rss", "description": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8e42941a-da17-54fb-bad4-649fed864700", "created": "2026-11-10T16:32:08.632Z", "modified": "2026-11-10T16:32:08.632Z", "relationship_type": "related-to", "source_ref": "incident--146c35ff-de36-5c8d-8d30-3156bd41522c", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7a33e88b-9d5a-5a8b-a999-6ada6710b702", "created": "2026-11-10T16:32:08.626Z", "modified": "2026-11-13T00:02:47.603Z", "name": "No evidence of customer data leak in unauthorized transactions: SinoPac", "description": "Detected automatically from 3 articles in 3 outlets (Liberty Times, New Talk, Taipei Times), Nov 4 to Nov 12, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 40,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/no-evidence-of-customer-data-leak-in-unauthorized-transactions-sinopac-20261104/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-04/1069275", "description": "永豐銀行419人遭盜轉！金額約4千餘萬 北檢今分案偵辦" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/biz/archives/2026/11/05/2003867168", "description": "No evidence of customer data leak in unauthorized transactions: SinoPac" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5638871", "description": "永豐銀行資安事件今送報告 金管會全面調查缺失" } ], "x_securitystudies_occurred_on": "2026-11-04", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ea92fcab-e2b4-5704-8ab2-7dd9d7a0b086", "created": "2026-11-10T16:32:08.626Z", "modified": "2026-11-10T16:32:08.626Z", "relationship_type": "related-to", "source_ref": "incident--7a33e88b-9d5a-5a8b-a999-6ada6710b702", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da6319a8-040d-543f-87ec-1541b38ab162", "created": "2026-11-10T16:32:08.595Z", "modified": "2026-11-13T00:02:47.581Z", "name": "MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed", "description": "Detected automatically from 3 articles in 3 outlets (Channel News Asia, HK Free Press, The Straits Times), Nov 3 to Nov 4, 2026. Type: data breach; sectors: financial services, technology. Asia-Pacific countries affected: Singapore, Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-p-20261103/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-potentially-exposed", "description": "MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/moneysmart-data-breach-security-incident-6515356", "description": "Financial services firm MoneySmart hit by IT security breach, some customers' data copied" }, { "source_name": "HK Free Press", "url": "https://hongkongfp.com/2026/11/04/finance-portal-moneysmart-apologises-after-users-sensitive-data-accessed-in-it-system-hack/", "description": "Finance portal MoneySmart apologises after users’ sensitive data accessed in IT system hack" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2e2749c2-8ea0-54eb-8e25-9946b8eab878", "created": "2026-11-10T16:32:08.595Z", "modified": "2026-11-10T16:32:08.595Z", "relationship_type": "related-to", "source_ref": "incident--da6319a8-040d-543f-87ec-1541b38ab162", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--82e3e6a8-46bf-500f-b1d7-293cc9716aae", "created": "2026-11-10T16:32:08.595Z", "modified": "2026-11-10T16:32:08.595Z", "relationship_type": "related-to", "source_ref": "incident--da6319a8-040d-543f-87ec-1541b38ab162", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--78090cc0-ec70-5383-bd05-b8d09a7067e2", "created": "2026-11-10T16:32:08.529Z", "modified": "2026-11-13T00:02:47.491Z", "name": "Data on 16,000 people compromised at 3 Seoul international schools in PowerSchool breach", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Nov 2, 2026. Type: data breach; sectors: education. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-on-16000-people-compromised-at-3-seoul-international-schools-in-p-20261102/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10922866", "description": "Data on 16,000 people compromised at 3 Seoul international schools in PowerSchool breach" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b2088c25-b5a3-528a-9f1c-4988b1251b92", "created": "2026-11-10T16:32:08.529Z", "modified": "2026-11-10T16:32:08.529Z", "relationship_type": "related-to", "source_ref": "incident--78090cc0-ec70-5383-bd05-b8d09a7067e2", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1936f227-2555-556b-92d4-7f48f4860626", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-13T00:02:47.432Z", "name": "Binance TH pauses crypto transfers, says Thai funds safe after hack", "description": "Detected automatically from 34 articles in 16 outlets (Channel News Asia, Daily NK, Free Malaysia Today, Hankyoreh, Japan Today, Liberty Times and others), Oct 30 to Nov 12, 2026. Type: cryptocurrency theft; sectors: cryptocurrency, technology. Asia-Pacific countries affected: South Korea, Thailand. Largest figure in the headlines: 200,000,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/binance-th-pauses-crypto-transfers-says-thai-funds-safe-after-hack-20261030/" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/business/binance-th-pauses-crypto-transfers-after-hack", "description": "Binance TH pauses crypto transfers, says Thai funds safe after hack" }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/north-korean-actors-steal-6-36b-from-binance-in-largest-crypto-theft-in-history/", "description": "North Korean actors steal $6.36B from Binance in largest crypto theft in history" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-30/1068375", "description": "金將軍又缺錢？ 幣安2千多億加密貨幣遭駭創歷來之最 北韓遭認是兇手" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5624143", "description": "史上最大駭客攻擊！幣安遭竊逾2000億 美分析指向北韓" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000200315", "description": "N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000251315", "description": "(LEAD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000252315", "description": "(2nd LD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/world/hackers-steal-6.3-billion-from-binance-in-record-heist-blamed-on-north-korea4", "description": "Hackers steal $6.3 billion from Binance in record heist blamed on North Korea" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921226", "description": "N. Korean hackers blamed for record $6.3b Binance cryptocurrency theft: US firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261101000300315", "description": "FBI says N. Korea responsible for over US$6 bln crypto theft from Binance" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/11/01/tech/binance-hack-fbi-north-korea/", "description": "FBI blames North Korea for $6 billion Binance crypto hack" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/world/united-states-canada/article/3372858/fbi-blames-north-korea-stolen-billions-binance-biggest-hack-history", "description": "FBI blames North Korea for stolen billions from Binance in biggest hack in history" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-01/1068564", "description": "幣安逾60億美元資產遭竊　FBI指北韓所為" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921526", "description": "FBI says N. Korea responsible for over $6b crypto theft from Binance" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261101de69102", "description": "暗号資産大手バイナンスへのサイバー攻撃 FBI“北朝鮮が関与”" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921777", "description": "North Korean cyberterrorism gains renewed scrutiny after record Binance heist" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261101000351315", "description": "(LEAD) Trump says U.S. will talk to N. Korea if it is behind Binance hack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/11/01/fbi-says-north-korea-behind-us-6bil-crypto-theft-from-binance", "description": "FBI says North Korea behind US$6bil crypto theft from Binance" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/biz/archives/2026/11/02/2003866975", "description": "N Korea behind US$6bn crypto theft, FBI says" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-02/1068750", "description": "20分鐘盜逾60億美元加密貨幣! 北韓駭客疑感情詐騙滲透幣安工程師 川普這樣說...." }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/fbi-confirms-north-korea-behind-record-6-36b-binance-crypto-heist/", "description": "FBI confirms North Korea behind record $6.36B Binance crypto heist" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/11/02/binance-outflows-north-korea-hack/", "description": "Binance outflows hit $4.7 billion after record North Korea hack" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_northkorea/1285383.html", "description": "FBI identifies North Korean hackers as responsible for unprecedented Binance breach" }, { "source_name": "NK News", "url": "https://www.nknews.org/2026/11/kim-yo-jong-denies-north-korean-involvement-in-6b-binance-crypto-theft/", "description": "Kim Yo Jong denies North Korean involvement in $6B Binance crypto theft" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/east-asia/north-korea-binance-hack-fbi-grave-provocation-6514311", "description": "North Korea slams FBI allegations over Binance hack as 'grave' provocation" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/11/03/asia-pacific/north-korea-binance-us-hacking/", "description": "North Korea calls U.S. claims it was behind Binance hack ‘a grave political provocation’" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/world/2026/11/03/n-korea-slams-fbi-allegations-over-binance-hack-as-grave-provocation", "description": "N. Korea slams FBI allegations over Binance hack as ‘grave’ provocation" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/world/united-states-canada/article/3373050/sister-north-koreas-kim-slams-fbis-binance-hack-allegations-grave-provocation", "description": "Sister of North Korea’s Kim slams FBI’s Binance hack allegations as ‘grave’ provocation" }, { "source_name": "VN Express", "url": "https://vnexpress.net/trieu-tien-dap-tra-cao-buoc-tan-cong-mang-binance-tu-fbi-5139936.html", "description": "Triều Tiên đáp trả cáo buộc 'tấn công mạng Binance' từ FBI" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261103de69881", "description": "世界的な暗号資産取引所へのサイバー攻撃　北朝鮮が関与否定" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 5, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2dc31aa3-0df9-5ff5-8935-df97ac69a0c9", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8d42d050-12da-57fe-addc-71e86dc8ac78", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "created": "2026-11-09T04:30:05.217Z", "modified": "2026-11-09T04:30:05.217Z", "name": "TraderTraitor", "aliases": [ "Jade Sleet", "Pukchong", "UNC4899" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/tradertraitor/" } ], "description": "TraderTraitor targets blockchain companies through spear-phishing messages. The group sends these messages to employees, particularly those in system administration or software development roles, on various communication platforms, intended to gain access to these start-up and high-tech companies. TraderTraitor may be the work of operators previously responsible for APT38 activity." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--55952837-5ab0-5bcc-b705-b0d57744ac9d", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a967416f-84ac-5091-9236-eec7739030c4", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-13T00:02:47.442Z", "name": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack", "description": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack", "description": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516", "description": "Malaysia Airlines warns customers of data exposure in Amadeus cybersecurity breach" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus", "description": "46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151", "description": "About 46,000 SIA booking records accessed in data breach involving travel tech company Amadeus" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/economy/news_5969157", "description": "การบินไทย รับถูกแฮก ข้อมูลรั่ว 6 หมื่นรายการ แต่ไม่กระทบข้อมูลบัตรเครดิต" }, { "source_name": "Bangkok Post", "url": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach", "description": "THAI passenger data compromised in Amadeus security breach" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe", "description": "Thai Airways confirms passenger data leak but credit card details safe" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/economy/news_5969937", "description": "การบินไทย แจ้ง ไซเบอร์โจมตี ข้อมูล 6 หมื่นรายการรั่วไหล ไชยชนก ถก ‘แอปเปิ้ล’ สกัด" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d8dcd32a-245a-5e4c-b9bc-e5e43b9093eb", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Japan", "country": "JP" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--317010bf-0058-51a9-b822-d6d704efbe31", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a3ed75f2-2699-5840-b35c-27be8a40c0cc", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dc48e5ec-d80c-5cbd-bea5-0fd84c8f8607", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dac9bd3-fa51-5640-8e1c-99147e4a1ad5", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--11c4e0f1-429d-54d2-9211-5695425d6870", "created": "2026-11-10T16:32:08.467Z", "modified": "2026-11-13T00:02:47.413Z", "name": "Kluang council files report over porn on hacked LED screens", "description": "Detected automatically from 4 articles in 2 outlets (Free Malaysia Today, Malay Mail), Oct 30 to Oct 31, 2026. Type: defacement; sectors: government. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "defacement", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/kluang-council-files-report-over-porn-on-hacked-led-screens-20261030/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/bahasa/tempatan/2026/10/30/skrin-led-di-kluang-digodam-papar-video-lucah", "description": "Skrin LED di Kluang digodam papar video lucah" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/10/30/kluang-council-files-report-over-porn-on-hacked-led-screens", "description": "Kluang council files report over porn on hacked LED screens" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/30/kluang-council-shuts-down-led-screens-after-obscene-video-appears-in-suspected-hack/241279", "description": "Kluang council shuts down LED screens after obscene video appears in suspected hack" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/31/police-probe-hacking-of-kluang-council-led-screens-after-obscene-content-displayed/241350", "description": "Police probe hacking of Kluang council LED screens after obscene content displayed" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2ba1fba7-a52c-5834-b182-76d96b514956", "created": "2026-11-10T16:32:08.467Z", "modified": "2026-11-10T16:32:08.467Z", "relationship_type": "related-to", "source_ref": "incident--11c4e0f1-429d-54d2-9211-5695425d6870", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a68f78aa-d5fa-5a5f-a8e7-521e5f41a6c0", "created": "2026-11-10T16:32:08.407Z", "modified": "2026-11-11T20:40:49.665Z", "name": "Cyberattack wave widens across Korean financial sector", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 28, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattack-wave-widens-across-korean-financial-sector-20261028/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10917639", "description": "Cyberattack wave widens across Korean financial sector" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b4336c73-68ab-58b9-aff1-a55e7890b9df", "created": "2026-11-10T16:32:08.407Z", "modified": "2026-11-10T16:32:08.407Z", "relationship_type": "related-to", "source_ref": "incident--a68f78aa-d5fa-5a5f-a8e7-521e5f41a6c0", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b67d48ad-cdf3-518c-b49d-661bcd4202fb", "created": "2026-11-10T16:32:08.393Z", "modified": "2026-11-11T20:40:49.652Z", "name": "(LEAD) South Korean financial firms confirm data breach of customer data", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 28, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lead-south-korean-financial-firms-confirm-data-breach-of-customer-data-20261028/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261028002751320", "description": "(LEAD) South Korean financial firms confirm data breach of customer data" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b26d2c67-00b1-5985-9df0-fd5921c0f423", "created": "2026-11-10T16:32:08.393Z", "modified": "2026-11-10T16:32:08.393Z", "relationship_type": "related-to", "source_ref": "incident--b67d48ad-cdf3-518c-b49d-661bcd4202fb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cec9f081-da7e-5bf6-bac5-728ab8fa08b4", "created": "2026-11-10T16:32:08.370Z", "modified": "2026-11-11T20:40:49.626Z", "name": "Over 1,600 affected in airline, retailer data breaches", "description": "Detected automatically from 2 articles in 2 outlets (HK Free Press, RTHK English News), Oct 27 to Oct 28, 2026. Type: data breach; sectors: transportation, retail. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-1600-affected-in-airline-retailer-data-breaches-20261027/" }, { "source_name": "RTHK English News", "url": "https://news.rthk.hk/rthk/en/component/k2/1875475-20261027.htm", "description": "Over 1,600 affected in airline, retailer data breaches" }, { "source_name": "HK Free Press", "url": "https://hongkongfp.com/2026/10/28/data-breach-at-hong-kong-airlines-yoho-and-broadway-affects-1600-customers/", "description": "Data breach at Hong Kong Airlines, YOHO, and Broadway affects 1,600 customers" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation", "Retail" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ca49ca9a-14e6-55cb-8cb0-2a25cd985dfa", "created": "2026-11-10T16:32:08.370Z", "modified": "2026-11-10T16:32:08.370Z", "relationship_type": "related-to", "source_ref": "incident--cec9f081-da7e-5bf6-bac5-728ab8fa08b4", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4231ab55-afda-5056-8c62-4cdbc68dc149", "created": "2026-11-10T16:32:08.345Z", "modified": "2026-11-11T20:40:49.600Z", "name": "KB Kookmin Bank finds 2,091 more people affected by data leak", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Oct 26, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/kb-kookmin-bank-finds-2091-more-people-affected-by-data-leak-20261026/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261026010200315", "description": "KB Kookmin Bank finds 2,091 more people affected by data leak" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10915394", "description": "KB Kookmin Bank finds 2,091 more people affected by data leak" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--76b68e3c-f5cc-5924-bc4c-a0b2dbbf84dd", "created": "2026-11-10T16:32:08.345Z", "modified": "2026-11-10T16:32:08.345Z", "relationship_type": "related-to", "source_ref": "incident--4231ab55-afda-5056-8c62-4cdbc68dc149", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--49681c3d-bfc2-5e03-af18-5b9eb800449b", "created": "2026-11-10T16:32:08.321Z", "modified": "2026-11-11T20:40:49.580Z", "name": "Singapore embraces AI for cyber defence, with one caveat: breach transparency", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 25, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Singapore, Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/singapore-embraces-ai-for-cyber-defence-with-one-caveat-breach-transpa-20261025/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/week-asia/politics/article/3371950/singapore-embraces-ai-cyber-defence-one-caveat-breach-transparency", "description": "Singapore embraces AI for cyber defence, with one caveat: breach transparency" } ], "x_securitystudies_occurred_on": "2026-10-25", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Defence" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ee3011bf-d9b0-5b2a-b2ad-c466f24616ce", "created": "2026-11-10T16:32:08.321Z", "modified": "2026-11-10T16:32:08.321Z", "relationship_type": "related-to", "source_ref": "incident--49681c3d-bfc2-5e03-af18-5b9eb800449b", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--309ecb5c-048e-5b43-90fa-f2c88e2b6d92", "created": "2026-11-10T16:32:08.321Z", "modified": "2026-11-10T16:32:08.321Z", "relationship_type": "related-to", "source_ref": "incident--49681c3d-bfc2-5e03-af18-5b9eb800449b", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--31484b1f-8644-5aed-b95f-4f1fa95565a4", "created": "2026-11-10T16:32:08.297Z", "modified": "2026-11-11T20:40:49.553Z", "name": "Data leak in Vietnam exposes 9 years of Korean airline passenger records", "description": "Detected automatically from 1 article in 1 outlet (Hankyoreh), Oct 22, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Vietnam. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-leak-in-vietnam-exposes-9-years-of-korean-airline-passenger-recor-20261022/" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_international/1283684.html", "description": "Data leak in Vietnam exposes 9 years of Korean airline passenger records" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Vietnam", "country": "VN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5885d022-c163-50ff-a01a-6d2bb1d1eae6", "created": "2026-11-10T16:32:08.297Z", "modified": "2026-11-10T16:32:08.297Z", "relationship_type": "related-to", "source_ref": "incident--31484b1f-8644-5aed-b95f-4f1fa95565a4", "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3117d446-07fc-5cac-b4a4-9d4df3f2dced", "created": "2026-11-10T16:32:08.287Z", "modified": "2026-11-11T20:40:49.526Z", "name": "Yonsei Univ. portal hack leaks data of 10,000 students, graduates", "description": "Detected automatically from 2 articles in 2 outlets (Korea Times, Yonhap), Oct 22, 2026. Type: data breach; sectors: education. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yonsei-univ-portal-hack-leaks-data-of-10000-students-graduates-20261022/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261022003300315", "description": "Yonsei Univ. portal hack leaks data of 10,000 students, graduates" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/education/20261022/yonsei-university-portal-hack-leaks-data-of-10000-students-graduates?utm_source=rss", "description": "Yonsei University portal hack leaks data of 10,000 students, graduates" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cf57080e-ea93-536f-8908-4c3ecea74e3d", "created": "2026-11-10T16:32:08.287Z", "modified": "2026-11-10T16:32:08.287Z", "relationship_type": "related-to", "source_ref": "incident--3117d446-07fc-5cac-b4a4-9d4df3f2dced", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--78ef27eb-60bc-5670-94c2-70937008dde2", "created": "2026-11-10T16:32:08.267Z", "modified": "2026-11-11T20:40:49.496Z", "name": "Unauthorized access: 'Possibility that the stage has shifted to targeting financial institutions'", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 21, 2026. Title machine-translated from Japanese. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261021/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261021de62921", "description": "不正アクセス“金融機関が狙われる段階に変わってきた可能性”" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--15167757-32a5-5dae-ac45-cb8bfc38855a", "created": "2026-11-10T16:32:08.267Z", "modified": "2026-11-10T16:32:08.267Z", "relationship_type": "related-to", "source_ref": "incident--78ef27eb-60bc-5670-94c2-70937008dde2", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f930550a-e9fd-5a9b-b713-a6aecbb01a92", "created": "2026-11-10T16:32:08.256Z", "modified": "2026-11-11T20:40:49.481Z", "name": "State Bank of India reports cyberattack involving nearly 3,900 customer records", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 21, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/state-bank-of-india-reports-cyberattack-involving-nearly-3900-customer-20261021/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/state-bank-india-reports-cyberattack-involving-nearly-3900-customer-records-6477746", "description": "State Bank of India reports cyberattack involving nearly 3,900 customer records" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c7d39e72-caa5-5141-9775-c82f2bf404ca", "created": "2026-11-10T16:32:08.256Z", "modified": "2026-11-10T16:32:08.256Z", "relationship_type": "related-to", "source_ref": "incident--f930550a-e9fd-5a9b-b713-a6aecbb01a92", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--39a545b7-cdf8-58b1-bd4d-bb1335c83983", "created": "2026-11-10T16:32:08.203Z", "modified": "2026-11-11T20:40:49.409Z", "name": "AI makes cyberattacks cheaper, harder to ignore: Cloudflare executive", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 19, 2026. Type: other; sectors: technology. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-makes-cyberattacks-cheaper-harder-to-ignore-cloudflare-executive-20261019/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10907396", "description": "AI makes cyberattacks cheaper, harder to ignore: Cloudflare executive" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a7ec611e-106a-5fcd-bc63-a7d589c31af3", "created": "2026-11-10T16:32:08.203Z", "modified": "2026-11-10T16:32:08.203Z", "relationship_type": "related-to", "source_ref": "incident--39a545b7-cdf8-58b1-bd4d-bb1335c83983", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--96ac254c-4bea-5df2-a746-5f42e95e5e1d", "created": "2026-11-10T16:32:08.185Z", "modified": "2026-11-11T20:40:49.389Z", "name": "Top bank chiefs face grilling over cyberattacks", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 18, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/top-bank-chiefs-face-grilling-over-cyberattacks-20261018/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10906198", "description": "Top bank chiefs face grilling over cyberattacks" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b03b86b1-17c6-5d21-93db-0ba5bb4b1756", "created": "2026-11-10T16:32:08.185Z", "modified": "2026-11-10T16:32:08.185Z", "relationship_type": "related-to", "source_ref": "incident--96ac254c-4bea-5df2-a746-5f42e95e5e1d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6221fecc-3d64-5ef6-a6ef-a1f25237b97b", "created": "2026-11-10T16:32:08.122Z", "modified": "2026-11-11T20:40:49.312Z", "name": "Personal info presumed to have leaked from 16 financial institutions: regulator", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 14, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-info-presumed-to-have-leaked-from-16-financial-institutions-r-20261014/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261014006900320", "description": "Personal info presumed to have leaked from 16 financial institutions: regulator" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5befa658-ee9d-5594-9f90-c11bee7ee5d9", "created": "2026-11-10T16:32:08.122Z", "modified": "2026-11-10T16:32:08.122Z", "relationship_type": "related-to", "source_ref": "incident--6221fecc-3d64-5ef6-a6ef-a1f25237b97b", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d6468d56-d3a3-50ad-b9e9-c5ab7907faa9", "created": "2026-11-10T16:32:08.076Z", "modified": "2026-11-10T16:40:20.469Z", "name": "AI-powered attacks on Korean financial sectors linked to Chinese DDoS group: report", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 11, 2026. Type: ddos; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ddos", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-powered-attacks-on-korean-financial-sectors-linked-to-chinese-ddos-20261011/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10898597", "description": "AI-powered attacks on Korean financial sectors linked to Chinese DDoS group: report" } ], "x_securitystudies_occurred_on": "2026-10-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--59232b12-3a82-524b-86f9-b024681123d6", "created": "2026-11-10T16:32:08.076Z", "modified": "2026-11-10T16:32:08.076Z", "relationship_type": "related-to", "source_ref": "incident--d6468d56-d3a3-50ad-b9e9-c5ab7907faa9", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4b71dcd8-d94c-5772-9998-0cadd2336700", "created": "2026-11-10T16:32:08.071Z", "modified": "2026-11-10T16:40:20.464Z", "name": "Man loses over RM12mil in suspected crypto theft", "description": "Detected automatically from 2 articles in 2 outlets (Free Malaysia Today, Malay Mail), Oct 10, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: Malaysia. Largest figure in the headlines: 12,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/man-loses-over-rm12mil-in-suspected-crypto-theft-20261010/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/10/10/man-loses-over-rm12mil-in-suspected-crypto-theft", "description": "Man loses over RM12mil in suspected crypto theft" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/10/man-loses-over-rm12m-in-suspected-crypto-theft/238570", "description": "Man loses over RM12m in suspected crypto theft" } ], "x_securitystudies_occurred_on": "2026-10-10", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--437f539d-d38e-565c-83bb-b7434db3be93", "created": "2026-11-10T16:32:08.071Z", "modified": "2026-11-10T16:32:08.071Z", "relationship_type": "related-to", "source_ref": "incident--4b71dcd8-d94c-5772-9998-0cadd2336700", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c84baddd-8436-5a7e-bf6f-249d8454cd51", "created": "2026-11-10T16:32:08.013Z", "modified": "2026-11-10T16:40:20.414Z", "name": "South Korea bank hack suspect may be 26-year-old in China, U.S. firm says", "description": "Detected automatically from 4 articles in 4 outlets (Channel News Asia, New York Times China, Taipei Times, The Japan Times), Oct 8, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: China. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korea-bank-hack-suspect-may-be-26-year-old-in-china-us-firm-says-20261008/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/08/south-korea-cyberattack-china-suspect/", "description": "South Korea bank hack suspect may be 26-year-old in China, U.S. firm says" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/crowdstrike-says-china-based-suspect-used-ai-tools-in-south-korean-bank-hacks-6441386", "description": "CrowdStrike says China-based suspect used AI tools in South Korean bank hacks" }, { "source_name": "New York Times China", "url": "https://www.nytimes.com/2026/10/08/world/australia/south-korea-bank-hack-china-us-ai.html", "description": "Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks, CrowdStrike Says" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/front/archives/2026/10/09/2003865655", "description": "S Korean banks likely hacked by China-based actor: CrowdStrike" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 5, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--231e90b4-4920-54e1-af65-e3447d240a54", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "China", "country": "CN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2c908ce6-1ad8-53ce-862f-6f73cc5830a9", "created": "2026-11-10T16:32:08.013Z", "modified": "2026-11-10T16:32:08.013Z", "relationship_type": "related-to", "source_ref": "incident--c84baddd-8436-5a7e-bf6f-249d8454cd51", "target_ref": "location--231e90b4-4920-54e1-af65-e3447d240a54", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--27acc24b-612d-5aeb-8722-ac242eefbaeb", "created": "2026-11-10T16:32:08.007Z", "modified": "2026-11-10T16:40:20.409Z", "name": "Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks", "description": "Detected automatically from 1 article in 1 outlet (Hankyoreh), Oct 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/online-only-lenders-kakaobank-and-kbank-are-latest-targets-of-cyberatt-20261007/" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_business/1281364.html", "description": "Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b735b72-62fa-5c94-980b-26bd9658327a", "created": "2026-11-10T16:32:08.007Z", "modified": "2026-11-10T16:32:08.007Z", "relationship_type": "related-to", "source_ref": "incident--27acc24b-612d-5aeb-8722-ac242eefbaeb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a8b50939-898c-5419-aafa-598548ea4742", "created": "2026-11-10T16:32:07.969Z", "modified": "2026-11-10T16:40:20.376Z", "name": "Multiple IPs used to hide origin of recent cyberattacks against financial firms", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 7, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/multiple-ips-used-to-hide-origin-of-recent-cyberattacks-against-financ-20261007/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261007005000315", "description": "Multiple IPs used to hide origin of recent cyberattacks against financial firms" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--081f6066-cb7b-5414-9b9e-323d0cb28f43", "created": "2026-11-10T16:32:07.969Z", "modified": "2026-11-10T16:32:07.969Z", "relationship_type": "related-to", "source_ref": "incident--a8b50939-898c-5419-aafa-598548ea4742", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9ca06372-b640-5b3c-bbbe-f3d2f56f9c7c", "created": "2026-11-10T16:32:07.954Z", "modified": "2026-11-10T16:40:20.362Z", "name": "104人力銀行遭駭！12萬筆求職者個資恐外洩 官方發重訊證實了", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 6, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 120,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/10412-20261006/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/life/breakingnews/5597618", "description": "104人力銀行遭駭！12萬筆求職者個資恐外洩 官方發重訊證實了" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cf3fc73f-9638-5020-b9e5-6214278e1199", "created": "2026-11-10T16:32:07.954Z", "modified": "2026-11-10T16:32:07.954Z", "relationship_type": "related-to", "source_ref": "incident--9ca06372-b640-5b3c-bbbe-f3d2f56f9c7c", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cb26a1f1-78b3-5e40-967a-728e6f29231c", "created": "2026-11-10T16:32:07.937Z", "modified": "2026-11-10T16:40:20.349Z", "name": "South Korea’s Lee says AI appears to have been used in bank hacks", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 6, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-koreas-lee-says-ai-appears-to-have-been-used-in-bank-hacks-20261006-2/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/06/south-korea-bank-hacks/", "description": "South Korea’s Lee says AI appears to have been used in bank hacks" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bba5181e-a265-5339-b72f-a50a8cb172b5", "created": "2026-11-10T16:32:07.937Z", "modified": "2026-11-10T16:32:07.937Z", "relationship_type": "related-to", "source_ref": "incident--cb26a1f1-78b3-5e40-967a-728e6f29231c", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8560875a-c105-5b1b-9f18-146635126e17", "created": "2026-11-10T16:32:07.925Z", "modified": "2026-11-10T16:40:20.340Z", "name": "South Korea’s Lee says AI appears to have been used in bank hacks", "description": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Oct 6, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-koreas-lee-says-ai-appears-to-have-been-used-in-bank-hacks-20261006/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/10/06/south-korea-s-lee-says-ai-appears-to-have-been-used-in-bank-hacks", "description": "South Korea’s Lee says AI appears to have been used in bank hacks" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d0de1fb1-1e6e-58f2-879f-92c195592038", "created": "2026-11-10T16:32:07.925Z", "modified": "2026-11-10T16:32:07.925Z", "relationship_type": "related-to", "source_ref": "incident--8560875a-c105-5b1b-9f18-146635126e17", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14", "created": "2026-11-10T16:32:07.919Z", "modified": "2026-11-10T16:40:20.335Z", "name": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog", "description": "Detected automatically from 6 articles in 2 outlets (Korea Times, Yonhap), Oct 6 to Oct 9, 2026. Type: intrusion; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-20261006/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261006005000320", "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261006005051320", "description": "(LEAD) 28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss", "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/28-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss", "description": "28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261009003600315", "description": "Police expand team investigating recent hacking of financial institutions" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261009003651315", "description": "(LEAD) Police expand team investigating recent hacking of financial institutions" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--342e01dd-fd32-5929-98e6-d047144faa8f", "created": "2026-11-10T16:32:07.919Z", "modified": "2026-11-10T16:32:07.919Z", "relationship_type": "related-to", "source_ref": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6f5156f9-5f9e-5456-8f92-230a38cf55c6", "created": "2026-11-10T16:32:07.880Z", "modified": "2026-11-10T16:40:20.298Z", "name": "South Korean president orders probe into data leaks across financial industry", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 4, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korean-president-orders-probe-into-data-leaks-across-financial-i-20261004/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/asia/south-korea-president-orders-probe-data-leaks-financial-industry-6430516", "description": "South Korean president orders probe into data leaks across financial industry" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--75edd744-1691-5da2-9f30-fae61cdd8f81", "created": "2026-11-10T16:32:07.880Z", "modified": "2026-11-10T16:32:07.880Z", "relationship_type": "related-to", "source_ref": "incident--6f5156f9-5f9e-5456-8f92-230a38cf55c6", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--61ace89f-32c9-5427-9f54-e7a8c1c953fa", "created": "2026-11-10T16:32:07.875Z", "modified": "2026-11-10T16:40:20.291Z", "name": "Lee calls for thorough probe into personal data leaks at financial institutions", "description": "Detected automatically from 3 articles in 2 outlets (The Korea Herald, Yonhap), Oct 4, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lee-calls-for-thorough-probe-into-personal-data-leaks-at-financial-ins-20261004/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261004002100315", "description": "Lee calls for thorough probe into personal data leaks at financial institutions" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10892927", "description": "Lee calls for thorough probe into personal data leaks at financial institutions" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261004002151315", "description": "(LEAD) Lee calls for thorough probe into personal data leaks at financial institutions" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--16d855d5-8dd3-53b0-83bb-77524c4ee27f", "created": "2026-11-10T16:32:07.875Z", "modified": "2026-11-10T16:32:07.875Z", "relationship_type": "related-to", "source_ref": "incident--61ace89f-32c9-5427-9f54-e7a8c1c953fa", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f3551d60-9f23-534d-8f93-bea2091114c5", "created": "2026-11-10T16:32:07.859Z", "modified": "2026-11-10T16:40:20.272Z", "name": "(2nd LD) Regulator instructs financial firms to check security systems over series of cyberattacks on banks", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 2, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2nd-ld-regulator-instructs-financial-firms-to-check-security-systems-o-20261002/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009152320", "description": "(2nd LD) Regulator instructs financial firms to check security systems over series of cyberattacks on banks" } ], "x_securitystudies_occurred_on": "2026-10-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--215fec95-ed3f-5c28-8fae-6a186de0e378", "created": "2026-11-10T16:32:07.859Z", "modified": "2026-11-10T16:32:07.859Z", "relationship_type": "related-to", "source_ref": "incident--f3551d60-9f23-534d-8f93-bea2091114c5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--55a6564d-68e7-5cef-b137-2793678a5244", "created": "2026-11-10T16:32:07.837Z", "modified": "2026-11-10T16:40:20.246Z", "name": "(LEAD) Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking", "description": "Detected automatically from 7 articles in 2 outlets (The Korea Herald, Yonhap), Oct 1 to Oct 2, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lead-some-25000-customers-info-leaked-from-shinhan-bank-in-apparent-ai-20261001/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261001006351320", "description": "(LEAD) Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10891104", "description": "Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002004900320", "description": "KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002004951320", "description": "(LEAD) KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009100320", "description": "89 customers' personal information leaked from Hana Bank" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10892290", "description": "Hana, BNK report data breaches as hacking hits Korean banks" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009151320", "description": "(LEAD) 89 customers' personal information leaked from Hana Bank" } ], "x_securitystudies_occurred_on": "2026-10-01", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--66702bc7-25a3-54c6-9570-7554fdb4d672", "created": "2026-11-10T16:32:07.837Z", "modified": "2026-11-10T16:32:07.837Z", "relationship_type": "related-to", "source_ref": "incident--55a6564d-68e7-5cef-b137-2793678a5244", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--695e3be0-1e05-553f-b1d9-dd2d36f4b0f1", "created": "2026-11-10T16:32:07.831Z", "modified": "2026-11-10T16:40:20.239Z", "name": "NUG rejects regime data hack claims, accuses financial service providers of exposing donors", "description": "Detected automatically from 1 article in 1 outlet (Democratic Voice of Burma), Sep 30, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Myanmar. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/nug-rejects-regime-data-hack-claims-accuses-financial-service-provider-20260930/" }, { "source_name": "Democratic Voice of Burma", "url": "https://english.dvb.no/nug-rejects-regime-data-hack-claims-accuses-financial-service-providers-of-exposing-donors/", "description": "NUG rejects regime data hack claims, accuses financial service providers of exposing donors" } ], "x_securitystudies_occurred_on": "2026-09-30", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--8d7679ef-0988-5804-ab25-ab55820d473d", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Myanmar", "country": "MM" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe18290a-f2c4-5996-9057-a9dfe2b58a6f", "created": "2026-11-10T16:32:07.831Z", "modified": "2026-11-10T16:32:07.831Z", "relationship_type": "related-to", "source_ref": "incident--695e3be0-1e05-553f-b1d9-dd2d36f4b0f1", "target_ref": "location--8d7679ef-0988-5804-ab25-ab55820d473d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e1a61d0d-4fce-5343-acc6-e7b20391bcc3", "created": "2026-11-10T16:32:07.776Z", "modified": "2026-11-10T16:40:20.204Z", "name": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Sep 27, 2026. Type: data breach; sectors: manufacturing. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/nearly-4-in-10-s-korean-industrial-technology-leaks-involve-semiconduc-20260927/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20260927000800320", "description": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10885167", "description": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data" } ], "x_securitystudies_occurred_on": "2026-09-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Manufacturing" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f68948f2-b13a-5880-92b1-b86e7dff596a", "created": "2026-11-10T16:32:07.776Z", "modified": "2026-11-10T16:32:07.776Z", "relationship_type": "related-to", "source_ref": "incident--e1a61d0d-4fce-5343-acc6-e7b20391bcc3", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bb33be26-9cb1-55d1-813e-f1315b7600ad", "created": "2026-11-10T16:32:07.760Z", "modified": "2026-11-10T16:40:20.195Z", "name": "North Korean cybercriminals linked to $352M heist from crypto exchange Bitget", "description": "Detected automatically from 4 articles in 3 outlets (Channel News Asia, NK Pro, Thanh Nien News), Sep 25 to Sep 30, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: Vietnam, Singapore. Largest figure in the headlines: 352,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/north-korean-cybercriminals-linked-to-352m-heist-from-crypto-exchange-20260925/" }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/north-korean-cybercriminals-linked-to-352m-heist-from-crypto-exchange-bitget/", "description": "North Korean cybercriminals linked to $352M heist from crypto exchange Bitget" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/crypto-exchange-bitget-pauses-withdrawals-after-350-million-stolen-in-hack-6410806", "description": "Crypto exchange Bitget pauses withdrawals after $350 million stolen in hack" }, { "source_name": "Thanh Nien News", "url": "https://thanhnien.vn/gia-bitcoin-hom-nay-2892026-tin-tac-tau-tan-xong-83-trieu-usd-trong-vu-hack-bitget-185260928081934906.htm", "description": "Giá Bitcoin hôm nay 28.9.2026: Tin tặc tẩu tán xong 83 triệu USD trong vụ hack Bitget" }, { "source_name": "Thanh Nien News", "url": "https://thanhnien.vn/ceo-bitget-khong-may-lac-quan-ve-kha-nang-thu-hoi-3875-trieu-usd-bi-hack-185260930112333106.htm", "description": "CEO Bitget: 'Không mấy lạc quan về khả năng thu hồi 387,5 triệu USD bị hack'" } ], "x_securitystudies_occurred_on": "2026-09-25", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--db02ef0f-ae60-50ba-8bc8-cf8199b3ccbb", "created": "2026-11-10T16:32:07.760Z", "modified": "2026-11-10T16:32:07.760Z", "relationship_type": "related-to", "source_ref": "incident--bb33be26-9cb1-55d1-813e-f1315b7600ad", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--03abcbf0-41cf-5c95-a2ec-d4428c33673c", "created": "2026-11-10T16:32:07.760Z", "modified": "2026-11-10T16:32:07.760Z", "relationship_type": "related-to", "source_ref": "incident--bb33be26-9cb1-55d1-813e-f1315b7600ad", "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f1476ab0-3323-5ac3-b877-7ff0d1f46d07", "created": "2026-11-10T16:32:07.738Z", "modified": "2026-11-10T16:40:20.181Z", "name": "LTFRB addresses security breach in online support platform", "description": "Detected automatically from 3 articles in 3 outlets (GMA Network, Philippine Daily Inquirer, The Manila Times), Sep 19 to Sep 20, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ltfrb-addresses-security-breach-in-online-support-platform-20260919/" }, { "source_name": "The Manila Times", "url": "https://www.manilatimes.net/2026/09/19/news/ltfrb-addresses-security-breach-in-online-support-platform/2428770", "description": "LTFRB addresses security breach in online support platform" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2308133/ltfrb-probes-data-breach-as-platform-goes-offline", "description": "LTFRB probes data breach as platform goes offline" }, { "source_name": "GMA Network", "url": "https://www.gmanetwork.com/news/topstories/nation/1003007/ltfrb-platform-down-amid-security-breach-probe/story/", "description": "LTFRB platform down amid security breach probe" } ], "x_securitystudies_occurred_on": "2026-09-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--08b0afc8-fe02-5675-8326-09abad2d8e8b", "created": "2026-11-10T16:32:07.738Z", "modified": "2026-11-10T16:32:07.738Z", "relationship_type": "related-to", "source_ref": "incident--f1476ab0-3323-5ac3-b877-7ff0d1f46d07", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--167ea1de-40ba-55d9-81b2-cbf681891ff2", "created": "2026-11-10T16:32:07.714Z", "modified": "2026-11-10T16:40:20.163Z", "name": "Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties", "description": "Detected automatically from 1 article in 1 outlet (SentinelLabs), Sep 18, 2026. Type: espionage campaign; sectors: cryptocurrency. Asia-Pacific countries affected: India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-20260918/" }, { "source_name": "SentinelLabs", "url": "https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties/", "description": "Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties" } ], "x_securitystudies_occurred_on": "2026-09-18", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b4e71c1e-9c90-5ae0-9b58-182232b8dfbc", "created": "2026-11-10T16:32:07.714Z", "modified": "2026-11-10T16:32:07.714Z", "relationship_type": "related-to", "source_ref": "incident--167ea1de-40ba-55d9-81b2-cbf681891ff2", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--f7ec5c4f-7c84-552d-9249-9fd7f5a9263c", "created": "2026-11-09T04:30:08.704Z", "modified": "2026-11-09T04:30:08.704Z", "name": "WageMole", "aliases": [ "Contagious Interview", "DEV#POPPER", "DeceptiveDevelopment", "Famous Chollima", "Gwisin Gang", "Nickel Tapestry", "PurpleBravo", "Storm-1877", "TAG-121", "Tenacious Pungsan", "UNC5267", "Void Dokkaebi", "Wagemole", "WaterPlum" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "G1052", "url": "https://attack.mitre.org/groups/G1052/" }, { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/wagemole/" } ], "description": "WageMole is a North Korean state-sponsored APT that employs social engineering and technology to secure remote job opportunities in Western countries, leveraging stolen personal data from the Contagious Interview campaign. Threat actors create fake identities, including passports and driver's licenses, and prepare study guides for interviews, often utilizing generative AI for well-structured responses. They target small to mid-sized businesses and utilize job platforms like Upwork and Indeed, while employing automation scripts for account creation. WageMole's activities include sharing code within their group and requesting payments through platforms like PayPal to conceal their identity." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dc23a4b9-3aa3-52ec-a3a8-c6407a7f72db", "created": "2026-11-10T16:32:07.714Z", "modified": "2026-11-10T16:32:07.714Z", "relationship_type": "related-to", "source_ref": "incident--167ea1de-40ba-55d9-81b2-cbf681891ff2", "target_ref": "intrusion-set--f7ec5c4f-7c84-552d-9249-9fd7f5a9263c", "description": "actor named in the coverage (the sources' attribution)" } ] }