{ "type": "bundle", "id": "bundle--ab858816-e059-4c19-92f7-c956afaa0f8c", "objects": [ { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "identity", "spec_version": "2.1", "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "SecurityStudies.info", "identity_class": "organization", "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0a26bd3c-facd-5ce6-9f32-fb471863bc3d", "created": "2026-11-12T18:04:29.473Z", "modified": "2026-11-13T00:02:47.944Z", "name": "PHP2Shell Exploitation on Check Point Gateway", "description": "Detected automatically from 1 article in 1 outlet (Check Point Research), Nov 12, 2026. Type: exploitation. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/php2shell-exploitation-on-check-point-gateway-20261112/" }, { "source_name": "Check Point Research", "url": "https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/", "description": "PHP2Shell Exploitation on Check Point Gateway" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--7872b8fa-bf74-5285-b4a4-225f6a17a083", "created": "2026-11-09T04:30:05.261Z", "modified": "2026-11-09T04:30:05.261Z", "name": "UTA0178", "aliases": [ "ARMORY CASTLE", "Red Dev 61", "UNC5221" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/uta0178/" } ], "description": "While Volexity largely observed the attacker essentially living off the land, they still deployed a handful of malware files and tools during the course of the incident which primarily consisted of webshells, proxy utilities, and file modifications to allow credential harvesting. Once UTA0178 had access into the network via the ICS VPN appliance, their general approach was to pivot from system to system using compromised credentials. They would then further compromise credentials of users on any new system that was breached, and use these credentials to log into additional systems via RDP. Volexity observed the attacker obtaining credentials in a variety of ways." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--10d97677-74ad-5914-a1c1-a0877ed894a0", "created": "2026-11-12T18:04:29.473Z", "modified": "2026-11-12T18:04:29.473Z", "relationship_type": "related-to", "source_ref": "incident--0a26bd3c-facd-5ce6-9f32-fb471863bc3d", "target_ref": "intrusion-set--7872b8fa-bf74-5285-b4a4-225f6a17a083", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--15967d9e-c7f8-5a4c-a3c4-35b8f71f71c6", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-109618", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-109618" } ], "description": "PHP Memory Corruption Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--38af4144-4476-532c-9291-fcce48ad0123", "created": "2026-11-12T18:04:29.473Z", "modified": "2026-11-12T18:04:29.473Z", "relationship_type": "related-to", "source_ref": "incident--0a26bd3c-facd-5ce6-9f32-fb471863bc3d", "target_ref": "vulnerability--15967d9e-c7f8-5a4c-a3c4-35b8f71f71c6", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--27205f2b-486b-5022-85cf-2d3480ec0094", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-109619", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-109619" } ], "description": "PHP Stale Internal Request-State Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2014eaa5-3556-524d-9c03-b4aae7e6a2c6", "created": "2026-11-12T18:04:29.473Z", "modified": "2026-11-12T18:04:29.473Z", "relationship_type": "related-to", "source_ref": "incident--0a26bd3c-facd-5ce6-9f32-fb471863bc3d", "target_ref": "vulnerability--27205f2b-486b-5022-85cf-2d3480ec0094", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--63e26040-c47a-59b3-bb54-3edb29f47426", "created": "2026-11-12T18:04:25.663Z", "modified": "2026-11-12T18:04:25.663Z", "name": "CVE-2026-123039", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-123039" } ] }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3cfe52f4-3271-5bff-86f7-b87b05e1c187", "created": "2026-11-12T18:04:29.473Z", "modified": "2026-11-12T18:04:29.473Z", "relationship_type": "related-to", "source_ref": "incident--0a26bd3c-facd-5ce6-9f32-fb471863bc3d", "target_ref": "vulnerability--63e26040-c47a-59b3-bb54-3edb29f47426", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0db8cf87-a221-57a1-9cb2-ee3a259ab206", "created": "2026-11-12T12:05:12.132Z", "modified": "2026-11-13T00:02:47.918Z", "name": "Ministry of Digital Affairs: AI helps hackers launch cyberattacks, over a dozen companies have 8 million personal data records leaked", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 8,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ministry-of-digital-affairs-ai-helps-hackers-launch-cyberattacks-over-20261112/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-12/1070779", "description": "數發部：AI助駭客網攻 十多家企業共800萬筆個資外洩" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Taiwan", "country": "TW" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7f4593f3-b068-5154-bb10-4efa555804f1", "created": "2026-11-12T12:05:12.132Z", "modified": "2026-11-12T12:05:12.132Z", "relationship_type": "related-to", "source_ref": "incident--0db8cf87-a221-57a1-9cb2-ee3a259ab206", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--64697a14-5b0d-5eca-833d-45551377840f", "created": "2026-11-12T18:04:29.493Z", "modified": "2026-11-13T00:02:47.959Z", "name": "Hack affects 8 million records: official", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 8,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hack-affects-8-million-records-official-20261112/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/11/13/2003867667", "description": "Hack affects 8 million records: official" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6ccc2b53-26c5-5b06-bf90-e2120d8052c5", "created": "2026-11-12T18:04:29.493Z", "modified": "2026-11-12T18:04:29.493Z", "relationship_type": "related-to", "source_ref": "incident--64697a14-5b0d-5eca-833d-45551377840f", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1c798eeb-711e-5886-ac2a-27b51d553ea7", "created": "2026-11-12T12:05:12.145Z", "modified": "2026-11-13T00:02:47.933Z", "name": "Virtual asset exchange Flybit hacked, resident registration numbers and tax information of 40 customers leaked", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/virtual-asset-exchange-flybit-hacked-resident-registration-numbers-and-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209490", "description": "가상자산 거래소 플라이빗 해킹, 고객 40명 주민등록번호·납세정보 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "South Korea", "country": "KR" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f7dfb38c-4a9f-5855-bba0-72a67be129c1", "created": "2026-11-12T12:05:12.145Z", "modified": "2026-11-12T12:05:12.145Z", "relationship_type": "related-to", "source_ref": "incident--1c798eeb-711e-5886-ac2a-27b51d553ea7", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-13T00:02:47.913Z", "name": "S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Nov 12, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. EU member states named: Belgium. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/s-korea-belgium-discuss-leak-of-personal-data-of-president-lee-europe-20261112/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261112009400315", "description": "S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--f8de1409-c8bc-547e-863c-07817401d9a2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Belgium", "country": "BE" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6692a9e8-8886-5adb-8af8-4f4cc75610ff", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-12T12:05:12.127Z", "relationship_type": "related-to", "source_ref": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "target_ref": "location--f8de1409-c8bc-547e-863c-07817401d9a2", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1e3add33-ccec-5cc1-8bc0-cf85dee13c3a", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-12T12:05:12.127Z", "relationship_type": "related-to", "source_ref": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--625789ea-a4bb-5a91-88c0-6a13de35295c", "created": "2026-11-12T12:05:12.116Z", "modified": "2026-11-13T00:02:47.901Z", "name": "'National functions continue even if hacked'... Pan-government task force for national cyber resilience launched", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: intrusion; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/national-functions-continue-even-if-hacked-pan-government-task-force-f-20261112/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147225", "description": "“해킹당해도 국가 기능은 지속”... 국가 사이버복원력 범정부 TF 출범" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe2e8d66-f493-5ec9-81e3-f1fbb0055778", "created": "2026-11-12T12:05:12.116Z", "modified": "2026-11-12T12:05:12.116Z", "relationship_type": "related-to", "source_ref": "incident--625789ea-a4bb-5a91-88c0-6a13de35295c", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--844054d6-b0c7-5424-b1c7-f1972d901723", "created": "2026-11-12T06:04:37.080Z", "modified": "2026-11-13T00:02:47.896Z", "name": "Xen Orchestrator authentication bypass actually exploited... virtualization hosts can also be compromised", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: exploitation. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/xen-orchestrator-authentication-bypass-actually-exploited-virtualizati-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209467", "description": "젠 오케스트라 인증 우회 실제 악용…가상화 호스트까지 장악 가능" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e20224ff-a634-5e21-8c05-e68b0466645b", "created": "2026-11-12T06:04:37.080Z", "modified": "2026-11-12T06:04:37.080Z", "relationship_type": "related-to", "source_ref": "incident--844054d6-b0c7-5424-b1c7-f1972d901723", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--636a9f6e-cdf1-51bb-89a1-4c7df294062b", "created": "2026-11-12T06:04:37.071Z", "modified": "2026-11-13T00:02:47.886Z", "name": "CAAT says only 2 from 7 main Thai airlines affected by data breach", "description": "Detected automatically from 1 article in 1 outlet (The Thaiger), Nov 12, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Thailand. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/caat-says-only-2-from-7-main-thai-airlines-affected-by-data-breach-20261112/" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/world/aviation/thai-airways-and-bangkok-airways-affected-by-data-leak", "description": "CAAT says only 2 from 7 main Thai airlines affected by data breach" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Thailand", "country": "TH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--10c85fd3-6296-5ad1-bea7-26bf577de962", "created": "2026-11-12T06:04:37.071Z", "modified": "2026-11-12T06:04:37.071Z", "relationship_type": "related-to", "source_ref": "incident--636a9f6e-cdf1-51bb-89a1-4c7df294062b", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d9037bfa-2852-5f77-8336-ed9dcf8c7a4f", "created": "2026-11-12T18:04:29.487Z", "modified": "2026-11-13T00:02:47.955Z", "name": "Samsung SDS subsidiary Multicampus hacked, personal information of about 70,000 employees leaked", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/samsung-sds-subsidiary-multicampus-hacked-personal-information-of-abou-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209491", "description": "삼성SDS 자회사 멀티캠퍼스 해킹, 임직원 개인정보 약 7만명 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--aca78e9a-62a7-516b-9440-3a24a8216360", "created": "2026-11-12T18:04:29.487Z", "modified": "2026-11-12T18:04:29.487Z", "relationship_type": "related-to", "source_ref": "incident--d9037bfa-2852-5f77-8336-ed9dcf8c7a4f", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--03d484ed-23ea-5bc4-8b24-689cc031a934", "created": "2026-11-12T18:04:29.480Z", "modified": "2026-11-13T00:02:47.949Z", "name": "820,000 Sogo members at risk as department store, Chow Sang Sang hit by data breaches", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/820000-sogo-members-at-risk-as-department-store-chow-sang-sang-hit-by-20261112/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/hong-kong/law-and-crime/article/3374260/hong-kong-sogo-data-breach-puts-personal-information-820000-members-risk", "description": "820,000 Sogo members at risk as department store, Chow Sang Sang hit by data breaches" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Hong Kong", "country": "HK" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ae6f3e92-322a-5e09-9cb9-15daf2a94a81", "created": "2026-11-12T18:04:29.480Z", "modified": "2026-11-12T18:04:29.480Z", "relationship_type": "related-to", "source_ref": "incident--03d484ed-23ea-5bc4-8b24-689cc031a934", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9ed722e9-5a35-503b-a98f-f9e3af5c1981", "created": "2026-11-12T18:04:29.449Z", "modified": "2026-11-13T00:02:47.928Z", "name": "Citizen Congress Watch: Donation system attacked, personal data may have been leaked, protection measures initiated", "description": "Detected automatically from 1 article in 1 outlet (Focus Taiwan (CNA)), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/citizen-congress-watch-donation-system-attacked-personal-data-may-have-20261112/" }, { "source_name": "Focus Taiwan (CNA)", "url": "https://www.cna.com.tw/news/aipl/202611120334.aspx", "description": "公督盟：捐款系統遭攻擊 個資可能外洩已啟動防護" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3b166d90-dd4a-5632-8647-15ec9901a2a6", "created": "2026-11-12T18:04:29.449Z", "modified": "2026-11-12T18:04:29.449Z", "relationship_type": "related-to", "source_ref": "incident--9ed722e9-5a35-503b-a98f-f9e3af5c1981", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0fe09d1e-3cdf-56f4-ab93-88c4e7a7a8da", "created": "2026-11-12T12:05:12.153Z", "modified": "2026-11-13T00:02:47.938Z", "name": "150,000 personal records leaked in hacking of 4 Samyang Group companies... includes 80,000 resident registration numbers", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/150000-personal-records-leaked-in-hacking-of-4-samyang-group-companies-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209475", "description": "삼양그룹 4개사 해킹으로 개인정보 15만명 유출…주민번호 8만여건 포함" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--aaa4c7c8-673c-5c7a-8eeb-41dd3c5f7f63", "created": "2026-11-12T12:05:12.153Z", "modified": "2026-11-12T12:05:12.153Z", "relationship_type": "related-to", "source_ref": "incident--0fe09d1e-3cdf-56f4-ab93-88c4e7a7a8da", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--135ccf3d-7a41-5fc5-af4b-6543aadc00e8", "created": "2026-11-12T12:05:12.139Z", "modified": "2026-11-13T00:02:47.923Z", "name": "TSMC just had personal data leaked and sold, Synnex also experiences security incident", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/tsmc-just-had-personal-data-leaked-and-sold-synnex-also-experiences-se-20261112/" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5638876", "description": "台積電才爆個資遭兜售外流 大聯大也發生資安事件" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--920c1227-81bf-5170-b779-8667f8a700f1", "created": "2026-11-12T12:05:12.139Z", "modified": "2026-11-12T12:05:12.139Z", "relationship_type": "related-to", "source_ref": "incident--135ccf3d-7a41-5fc5-af4b-6543aadc00e8", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f227e04e-93b9-5698-aff6-c088900e9cd8", "created": "2026-11-12T12:05:12.122Z", "modified": "2026-11-13T00:02:47.907Z", "name": "Website hacked! Over 70,000 passport photos leaked; Bureau of Consular Affairs: Validity of issued passports unaffected", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 70,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/website-hacked-over-70000-passport-photos-leaked-bureau-of-consular-af-20261112/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-12/1070740", "description": "網站遭駭！逾7萬張護照大頭照外洩 領務局：已核發護照效力不受影響" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7e0aa62d-5c59-5614-a194-f6c8d26f859c", "created": "2026-11-12T12:05:12.122Z", "modified": "2026-11-12T12:05:12.122Z", "relationship_type": "related-to", "source_ref": "incident--f227e04e-93b9-5698-aff6-c088900e9cd8", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d1c3c241-2889-5719-9709-905e2e0b5de1", "created": "2026-11-12T06:04:37.075Z", "modified": "2026-11-13T00:02:47.891Z", "name": "46,000 employee records put up for sale by hackers; TSMC: No evidence of system intrusion", "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, New Talk), Nov 12, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 46,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/46000-employee-records-put-up-for-sale-by-hackers-tsmc-no-evidence-of-20261112/" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5638252", "description": "4.6萬筆員工個資遭駭客兜售 台積電：系統無遭入侵證據" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-12/1070798", "description": "驚傳4.6萬筆員工個資外洩！台積電今證實 網：連護國神山都守不住了？" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c76b4dba-0c7f-5cd0-b01c-c91161ba5e84", "created": "2026-11-12T06:04:37.075Z", "modified": "2026-11-12T06:04:37.075Z", "relationship_type": "related-to", "source_ref": "incident--d1c3c241-2889-5719-9709-905e2e0b5de1", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a94f11e5-d1e1-5264-8e5a-03cffabbf3c3", "created": "2026-11-12T06:04:37.067Z", "modified": "2026-11-13T00:02:47.881Z", "name": "Personal information leaked at Secta9ine, a subsidiary of 'Happy Point operator' SPC Group", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-information-leaked-at-secta9ine-a-subsidiary-of-happy-point-o-20261112/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147199", "description": "‘해피포인트 운영사’ SPC그룹 산하 섹타나인 개인정보 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1f2c1cf8-2d95-55b3-ae97-77390b1eaa35", "created": "2026-11-12T06:04:37.067Z", "modified": "2026-11-12T06:04:37.067Z", "relationship_type": "related-to", "source_ref": "incident--a94f11e5-d1e1-5264-8e5a-03cffabbf3c3", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8ad2b15f-6e0f-5e73-81aa-0bd1fb461e66", "created": "2026-11-12T00:02:27.472Z", "modified": "2026-11-13T00:02:47.876Z", "name": "Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise", "description": "Detected automatically from 1 article in 1 outlet (Dark Reading), Nov 12, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japan-pushes-emergency-funding-for-cybersecurity-as-ai-assisted-breach-20261112/" }, { "source_name": "Dark Reading", "url": "https://www.darkreading.com/cybersecurity-operations/japan-emergency-funding-cybersecurity-ai-assisted-breaches", "description": "Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Japan", "country": "JP" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--25ef2135-bc18-5c14-80f2-725b0754109a", "created": "2026-11-12T00:02:27.472Z", "modified": "2026-11-12T00:02:27.472Z", "relationship_type": "related-to", "source_ref": "incident--8ad2b15f-6e0f-5e73-81aa-0bd1fb461e66", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--446b346b-7a44-5532-8c71-35d337e2b559", "created": "2026-11-11T12:23:36.606Z", "modified": "2026-11-13T00:02:47.845Z", "name": "10 Philippine Government Institutions Fall Victim to Data Leak", "description": "Detected automatically from 1 article in 1 outlet (CNN Indonesia Technology (Indonesian)), Nov 11, 2026. Title machine-translated from Indonesian. Type: data breach; sectors: government. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/10-lembaga-pemerintah-filipina-jadi-korban-kebocoran-data-20261111/" }, { "source_name": "CNN Indonesia Technology (Indonesian)", "url": "https://www.cnnindonesia.com/teknologi/20261111125419-185-1425837/10-lembaga-pemerintah-filipina-jadi-korban-kebocoran-data", "description": "10 Lembaga Pemerintah FIlipina jadi Korban Kebocoran Data" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Philippines", "country": "PH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b876acee-2c8b-5588-b001-65eaf35e1ee1", "created": "2026-11-11T12:23:36.606Z", "modified": "2026-11-11T12:23:36.606Z", "relationship_type": "related-to", "source_ref": "incident--446b346b-7a44-5532-8c71-35d337e2b559", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b299d607-e234-5775-b9fc-432ce849ae5c", "created": "2026-11-11T12:23:36.576Z", "modified": "2026-11-13T00:02:47.840Z", "name": "VCAA investigating after website hacked during exam period", "description": "Detected automatically from 2 articles in 2 outlets (ABC News, The Guardian Australia), Nov 11, 2026. Type: intrusion; sectors: government, education. Asia-Pacific countries affected: Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/vcaa-investigating-after-website-hacked-during-exam-period-20261111/" }, { "source_name": "ABC News", "url": "https://www.abc.net.au/news/2026-11-11/vcaa-website-hacked-during-exam-period/107375210", "description": "VCAA investigating after website hacked during exam period" }, { "source_name": "The Guardian Australia", "url": "https://www.theguardian.com/australia-news/2026/nov/12/vce-exams-hack-year-12-papers-vcaa-victorian-curriculum-and-assessment-authority", "description": "Hacker claims to have sold VCE exam papers to hundreds of students after government website hack" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Australia", "country": "AU" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c4e334f2-e04f-5a05-96ae-312009c78c7d", "created": "2026-11-11T12:23:36.576Z", "modified": "2026-11-11T12:23:36.576Z", "relationship_type": "related-to", "source_ref": "incident--b299d607-e234-5775-b9fc-432ce849ae5c", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0ff2b99c-8c6e-5ff0-bd18-89c102769cb2", "created": "2026-11-11T12:23:36.572Z", "modified": "2026-11-13T00:02:47.834Z", "name": "Government conducts ex officio investigation into GS E&C over 'Xi' resident information leak... first case decided after deliberation", "description": "Detected automatically from 2 articles in 2 outlets (Boannews (Korean), Dailysecu (Korean)), Nov 11 to Nov 12, 2026. Title machine-translated from Korean. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/gs-20261111/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147194", "description": "정부, ‘자이’ 입주민 정보 유출 GS건설 직권조사... 심의 거쳐 결정 첫 사례" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209460", "description": "GS건설 아파트 입주민 개인정보 유출…정부 조사에 동의 안 했다가 첫 직권조사 대상" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f1fa7194-5afa-5265-88e4-87e6fff2ba9f", "created": "2026-11-11T12:23:36.572Z", "modified": "2026-11-11T12:23:36.572Z", "relationship_type": "related-to", "source_ref": "incident--0ff2b99c-8c6e-5ff0-bd18-89c102769cb2", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--059d0dba-e406-5be0-a972-e9b4145c31ab", "created": "2026-11-11T12:23:36.544Z", "modified": "2026-11-13T00:02:47.823Z", "name": "Fullerton Health server supporting migrant worker care programme hit by cybersecurity incident", "description": "Detected automatically from 2 articles in 2 outlets (Channel News Asia, The Straits Times), Nov 11, 2026. Type: other; sectors: health. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/fullerton-health-server-supporting-migrant-worker-care-programme-hit-b-20261111/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/fullerton-health-migrant-worker-care-plan-cybersecurity-incident-6541451", "description": "Fullerton Health server supporting migrant worker care programme hit by cybersecurity incident" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/fullerton-health-server-hit-by-cyberattack-personal-data-of-migrant-workers-affected", "description": "Fullerton Health server hit by cyberattack; personal data of migrant workers affected" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Health" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Singapore", "country": "SG" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--effdcab4-b087-5762-b211-22417571bbd1", "created": "2026-11-11T12:23:36.544Z", "modified": "2026-11-11T12:23:36.544Z", "relationship_type": "related-to", "source_ref": "incident--059d0dba-e406-5be0-a972-e9b4145c31ab", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--af94897a-de91-5c95-8dcf-f2c5f8156ec8", "created": "2026-11-12T00:02:27.467Z", "modified": "2026-11-13T00:02:47.871Z", "name": "Personal data stolen after Queensland Parks booking service hacked", "description": "Detected automatically from 1 article in 1 outlet (ABC News), Nov 11, 2026. Type: intrusion. Asia-Pacific countries affected: Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-data-stolen-after-queensland-parks-booking-service-hacked-20261111/" }, { "source_name": "ABC News", "url": "https://www.abc.net.au/news/2026-11-12/queensland-parks-booking-system-hacked/107376788", "description": "Personal data stolen after Queensland Parks booking service hacked" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8b90cab0-025f-5319-8a82-62b885cf0bb4", "created": "2026-11-12T00:02:27.467Z", "modified": "2026-11-12T00:02:27.467Z", "relationship_type": "related-to", "source_ref": "incident--af94897a-de91-5c95-8dcf-f2c5f8156ec8", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4a720040-e5b1-5086-a514-068810e13af7", "created": "2026-11-12T00:02:27.460Z", "modified": "2026-11-13T00:02:47.866Z", "name": "Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Nov 11, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattacks-hit-a-third-of-japan-firms-or-their-service-providers-thi-20261111/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/cyberattacks-hit-third-japan-firms-or-their-service-providers-year-reuters-poll-6544086", "description": "Cyberattacks hit a third of Japan firms or their service providers this year: Reuters poll" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e3ea6da-f9c3-5280-b115-1ea114fa0246", "created": "2026-11-12T00:02:27.460Z", "modified": "2026-11-12T00:02:27.460Z", "relationship_type": "related-to", "source_ref": "incident--4a720040-e5b1-5086-a514-068810e13af7", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63", "created": "2026-11-11T20:35:30.174Z", "modified": "2026-11-13T00:02:47.856Z", "name": "300 Italian Schools Receive \"From Taiwan\" Bomb Threat Letters, Da-Yeh University Alumnus Account Suspected Hacked", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 11, 2026. Title machine-translated from Chinese. Type: intrusion; sectors: education. Asia-Pacific countries affected: Taiwan. EU member states named: Italy. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/300-italian-schools-receive-from-taiwan-bomb-threat-letters-da-yeh-uni-20261111/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/society/breakingnews/5637677", "description": "義大利300校收「來自台灣」炸彈恐嚇信 大葉大學校友帳號疑遭盜用" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--25d56fc8-0097-5c58-8db1-4aeb352be797", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Italy", "country": "IT" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1a8b590a-a0ee-5302-bd9b-51a47d6ce96d", "created": "2026-11-11T20:35:30.174Z", "modified": "2026-11-11T20:35:30.174Z", "relationship_type": "related-to", "source_ref": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63", "target_ref": "location--25d56fc8-0097-5c58-8db1-4aeb352be797", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7b83b865-25b6-5afa-bafd-b174b6b44661", "created": "2026-11-11T20:35:30.174Z", "modified": "2026-11-11T20:35:30.174Z", "relationship_type": "related-to", "source_ref": "incident--220b273c-a6dd-5a58-8673-4ff233fc2f63", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--03f866d4-14f9-5db9-a122-1f0484262974", "created": "2026-11-11T18:04:05.461Z", "modified": "2026-11-13T00:02:47.861Z", "name": "AI used in cyberattacks, some originating in HK", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 11, 2026. Type: other. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-used-in-cyberattacks-some-originating-in-hk-20261111/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/11/12/2003867610", "description": "AI used in cyberattacks, some originating in HK" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--36aa08e3-cc7a-5354-b255-1a36b2bad628", "created": "2026-11-11T18:04:05.461Z", "modified": "2026-11-11T18:04:05.461Z", "relationship_type": "related-to", "source_ref": "incident--03f866d4-14f9-5db9-a122-1f0484262974", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8d8d7289-42ee-53df-a6b8-6de299cb49c4", "created": "2026-11-11T18:04:05.456Z", "modified": "2026-11-13T00:02:47.850Z", "name": "Dementia Singapore app users' personal data potentially compromised in cyber incident", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Nov 11, 2026. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/dementia-singapore-app-users-personal-data-potentially-compromised-in-20261111/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/cara-app-dementia-singapore-cybersecurity-incident-6542871", "description": "Dementia Singapore app users' personal data potentially compromised in cyber incident" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e88403e-57a9-5996-87af-32249baf7e9b", "created": "2026-11-11T18:04:05.456Z", "modified": "2026-11-11T18:04:05.456Z", "relationship_type": "related-to", "source_ref": "incident--8d8d7289-42ee-53df-a6b8-6de299cb49c4", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--01cc87e3-182b-5f02-a6e7-fe794c4418fb", "created": "2026-11-11T12:23:36.548Z", "modified": "2026-11-13T00:02:47.828Z", "name": "Fireworks AI reports new breach after cloud provider hack", "description": "Detected automatically from 1 article in 1 outlet (ETCISO (Economic Times)), Nov 11, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/fireworks-ai-reports-new-breach-after-cloud-provider-hack-20261111/" }, { "source_name": "ETCISO (Economic Times)", "url": "https://ciso.economictimes.indiatimes.com/news/data-breaches/fireworks-ai-reports-new-breach-after-cloud-provider-hack/135723444", "description": "Fireworks AI reports new breach after cloud provider hack" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--095279bc-69f1-5155-a576-8cfad052b57e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "India", "country": "IN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--55a915b5-aea9-5c6b-bbc3-36e8cf5a4b2b", "created": "2026-11-11T12:23:36.548Z", "modified": "2026-11-11T12:23:36.548Z", "relationship_type": "related-to", "source_ref": "incident--01cc87e3-182b-5f02-a6e7-fe794c4418fb", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2882ccb4-cf7a-57ea-b7db-ad34c3e3a0b5", "created": "2026-11-10T16:32:08.759Z", "modified": "2026-11-13T00:02:47.782Z", "name": "SPH Media hit by cyberattacks; no payment card details or financial information compromised", "description": "Detected automatically from 4 articles in 4 outlets (Channel News Asia, Free Malaysia Today, Mothership, The Straits Times), Nov 10, 2026. Type: data breach; sectors: financial services, media. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sph-media-hit-by-cyberattacks-no-payment-card-details-or-financial-inf-20261110/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/politics/sph-media-hit-by-cyberattacks-no-payment-card-details-or-financial-information-compromised", "description": "SPH Media hit by cyberattacks; no payment card details or financial information compromised" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/sph-media-cyberattack-data-breach-6538681", "description": "SPH Media hit by cyberattacks; says no customer financial data or access exposed" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/highlight/2026/11/10/singapore-s-sph-media-hit-by-cyberattacks-personal-database-exposed", "description": "Singapore’s SPH media hit by cyberattacks, personal database exposed" }, { "source_name": "Mothership", "url": "https://mothership.sg/2026/11/sph-media-hit-by-ai-enabled-cyberattacks-subscribers-names-phone-numbers-accessed/", "description": "SPH Media hit by AI-enabled cyberattacks; subscribers' names, phone numbers accessed" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services", "Media" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2971254a-e63e-57e7-86a9-28831990c695", "created": "2026-11-10T16:32:08.759Z", "modified": "2026-11-10T16:32:08.759Z", "relationship_type": "related-to", "source_ref": "incident--2882ccb4-cf7a-57ea-b7db-ad34c3e3a0b5", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6d10bffe-3813-5392-abaf-c644104cd87d", "created": "2026-11-11T20:35:30.065Z", "modified": "2026-11-13T00:02:47.776Z", "name": "Phishing notification sent impersonating parking app 'Get your reward'... External agency breached", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: data breach; sectors: government, technology. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/phishing-notification-sent-impersonating-parking-app-get-your-reward-e-20261110/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147150", "description": "주차장 앱 사칭 “보상 받으세요” 피싱 알림톡 보내... 외부 대행사 뚫려" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--931c350e-bc63-5681-9473-398129015822", "created": "2026-11-11T20:35:30.065Z", "modified": "2026-11-11T20:35:30.065Z", "relationship_type": "related-to", "source_ref": "incident--6d10bffe-3813-5392-abaf-c644104cd87d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--56f903a0-faf9-553d-8ee8-6b13b9ced2d6", "created": "2026-11-11T20:35:30.031Z", "modified": "2026-11-13T00:02:47.760Z", "name": "Targeting the moment of receiving configuration files... China-linked hackers manipulate DNS of Chinese input method 'Sogou' to install backdoor", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: espionage campaign. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/targeting-the-moment-of-receiving-configuration-files-china-linked-hac-20261110/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147016", "description": "설정 파일 받는 순간 노려... 중국 연계 해커, 중국어 입력기 ‘소거우’ DNS 조작해 백도어 설치" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--ac69eb97-1be5-5ea5-a5ac-20e4a16f9b49", "created": "2026-11-09T04:30:05.297Z", "modified": "2026-11-09T04:30:05.297Z", "name": "UNC3569", "aliases": [], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/unc3569/" } ], "description": "China-nexus espionage actor that has been observed exploiting vulnerabilities in Aspera Faspex, Microsoft Exchange, and Oracle Web Applications Desktop Integrator, among others, to gain initial access to target environments. " }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bba82882-24e9-5227-a2a6-a8ba4b1df7f1", "created": "2026-11-11T20:35:30.031Z", "modified": "2026-11-11T20:35:30.031Z", "relationship_type": "related-to", "source_ref": "incident--56f903a0-faf9-553d-8ee8-6b13b9ced2d6", "target_ref": "intrusion-set--ac69eb97-1be5-5ea5-a5ac-20e4a16f9b49", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--9f4c69f1-58ce-541f-b4b1-0d1120faf7d6", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-120422", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-120422" } ] }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c7b93aa2-0404-5f88-9b27-ba6c82fd78a0", "created": "2026-11-11T20:35:30.031Z", "modified": "2026-11-11T20:35:30.031Z", "relationship_type": "related-to", "source_ref": "incident--56f903a0-faf9-553d-8ee8-6b13b9ced2d6", "target_ref": "vulnerability--9f4c69f1-58ce-541f-b4b1-0d1120faf7d6", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--6f23c7aa-a4c0-5d30-a2b7-d14dee6130f8", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-51990", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-51990" } ] }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--862c6066-3cb2-53b8-9db8-c80d2e2f8cb8", "created": "2026-11-11T20:35:30.031Z", "modified": "2026-11-11T20:35:30.031Z", "relationship_type": "related-to", "source_ref": "incident--56f903a0-faf9-553d-8ee8-6b13b9ced2d6", "target_ref": "vulnerability--6f23c7aa-a4c0-5d30-a2b7-d14dee6130f8", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ef7296b6-cb92-570a-860e-abc6063bcf5e", "created": "2026-11-11T12:23:36.539Z", "modified": "2026-11-13T00:02:47.817Z", "name": "Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem", "description": "Detected automatically from 1 article in 1 outlet (The Hacker News), Nov 10, 2026. Type: espionage campaign. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/three-china-nexus-espionage-campaigns-linked-through-sparrow-malware-e-20261110/" }, { "source_name": "The Hacker News", "url": "https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html", "description": "Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3ca3953e-4381-5c42-a175-ce4ed966d19b", "created": "2026-11-11T12:23:36.534Z", "modified": "2026-11-13T00:02:47.812Z", "name": "Kang Chiao International School Linkou campus network hacked; parents receive ransom letters, realize all personal data leaked", "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, New Talk), Nov 10 to Nov 11, 2026. Title machine-translated from Chinese. Type: ransomware; sectors: education. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-5/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/society/breakingnews/5636370", "description": "「康橋國際學校」林口校區網路遭駭 家長收勒索信、驚覺個資全外洩" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-11/1070464", "description": "康橋林口校區驚傳駭客恐嚇！威脅洩露教職員與家長個資" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d56cb139-dbbb-580b-ae0b-9356de50d760", "created": "2026-11-11T12:23:36.534Z", "modified": "2026-11-11T12:23:36.534Z", "relationship_type": "related-to", "source_ref": "incident--3ca3953e-4381-5c42-a175-ce4ed966d19b", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c60aa734-7703-58e5-9153-f565285c2a0c", "created": "2026-11-10T16:32:08.783Z", "modified": "2026-11-13T00:02:47.806Z", "name": "AFP probing into alleged Air Force data breach", "description": "Detected automatically from 2 articles in 1 outlet (Philippine Daily Inquirer), Nov 10 to Nov 11, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/afp-probing-into-alleged-air-force-data-breach-20261110/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2339099/afp-probing-into-alleged-air-force-data-breach", "description": "AFP probing into alleged Air Force data breach" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2339430/afp-probes-alleged-data-breach-involving-air-force", "description": "AFP probes alleged data breach involving Air Force" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Defence" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e0a6d849-7f69-51e7-b275-77afd414026e", "created": "2026-11-10T16:32:08.783Z", "modified": "2026-11-10T16:32:08.783Z", "relationship_type": "related-to", "source_ref": "incident--c60aa734-7703-58e5-9153-f565285c2a0c", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4fa495ac-36d0-5e1d-8001-31d1616dc9e1", "created": "2026-11-10T16:32:08.774Z", "modified": "2026-11-13T00:02:47.801Z", "name": "Financial Security Institute reports data leak following hacking attack", "description": "Detected automatically from 7 articles in 3 outlets (Boannews (Korean), Dailysecu (Korean), Yonhap), Nov 10 to Nov 12, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-4/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147156", "description": "금융보안원, 해킹으로 정보 유출... 금융위 등 신고" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261110010600315", "description": "Financial Security Institute reports data leak following hacking attack" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261110010651315", "description": "(LEAD) Financial Security Institute reports data leak following hacking attack" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209438", "description": "[단독] 금융보안원 상시평가시스템 해킹 정황...금융사 내부정보 유출 기업에 통보 중인 것으로 확인" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147183", "description": "금보원 해킹, ‘가짜 금감원 계정’ 만들어 침투했다... ‘마스킹’ 없는 개인정보 유출 가능성도" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209448", "description": "[이슈 체크-1] 금융보안원 상시평가 시스템 해킹…공격자, 금감원 수준의 접근 권한 확보" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209450", "description": "인증기관 '디지서트' 내부 시스템 해킹…고객 업무 연락처 및 일부 여권·면허증 유출" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--27384d79-23f9-5b71-8b91-2ba99c5c7cd9", "created": "2026-11-10T16:32:08.774Z", "modified": "2026-11-10T16:32:08.774Z", "relationship_type": "related-to", "source_ref": "incident--4fa495ac-36d0-5e1d-8001-31d1616dc9e1", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bb4fe31b-4eab-5dc9-b98e-67c903001271", "created": "2026-11-10T16:32:08.764Z", "modified": "2026-11-13T00:02:47.788Z", "name": "Hanil Networks hit by ransomware attack... 'Blocked immediately, no data leakage'", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: ransomware. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-3/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147152", "description": "한일네트웍스 랜섬웨어 공격받아... “즉시 차단, 유출 피해 없어”" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0e9c9827-1e80-52f5-a052-7e253d9b89c3", "created": "2026-11-10T16:32:08.764Z", "modified": "2026-11-10T16:32:08.764Z", "relationship_type": "related-to", "source_ref": "incident--bb4fe31b-4eab-5dc9-b98e-67c903001271", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--405f3569-5363-54ac-a5c2-56be7e0b152e", "created": "2026-11-10T16:32:08.743Z", "modified": "2026-11-13T00:02:47.765Z", "name": "Din Tai Fung shopping website hit by data breach! City councilor nearly falls for it, issues warning; official statement released urgently", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Nov 10, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government, technology, retail. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-10/1070287", "description": "鼎泰豐購物網驚傳個資外洩！市議員險上當發文示警 官方急發聲明" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Technology", "Retail" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1707ef90-2b13-51cd-b1c7-e2d9616c5452", "created": "2026-11-10T16:32:08.743Z", "modified": "2026-11-10T16:32:08.743Z", "relationship_type": "related-to", "source_ref": "incident--405f3569-5363-54ac-a5c2-56be7e0b152e", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--879ec1e1-cadd-5677-92d5-d53dd777e840", "created": "2026-11-10T16:32:08.768Z", "modified": "2026-11-13T00:02:47.793Z", "name": "Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected", "description": "Detected automatically from 1 article in 1 outlet (The Straits Times), Nov 10, 2026. Type: data breach; sectors: education, technology. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools-a-20261110/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/meal-ordering-app-tappee-suffers-cyber-breach-says-sats-four-schools-affected", "description": "Meal ordering app Tappee suffers cyber breach, says SATS; four schools affected" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--14cdb923-5db7-5511-9974-e06da998d7d0", "created": "2026-11-10T16:32:08.768Z", "modified": "2026-11-10T16:32:08.768Z", "relationship_type": "related-to", "source_ref": "incident--879ec1e1-cadd-5677-92d5-d53dd777e840", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0371b784-ac08-5e1b-ad1a-e17f618ef9bd", "created": "2026-11-10T16:32:08.753Z", "modified": "2026-11-13T00:02:47.770Z", "name": "ZoomZoom Tour, personal information leaked due to hacking and development errors... travel schedules and companion information also exposed", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-2/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209422", "description": "줌줌투어, 해킹·개발 오류로 개인정보 유출…여행 일정·동행자 정보까지 노출" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--42bcad80-78ac-5472-8797-2698f5cc6b4e", "created": "2026-11-10T16:32:08.753Z", "modified": "2026-11-10T16:32:08.753Z", "relationship_type": "related-to", "source_ref": "incident--0371b784-ac08-5e1b-ad1a-e17f618ef9bd", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c454cc06-af5a-5977-aeac-db2feca6e0cc", "created": "2026-11-10T16:32:08.738Z", "modified": "2026-11-13T00:02:47.753Z", "name": "The new ‘cold’ war: hacked fridges reveal infrastructure-security gaps", "description": "Detected automatically from 1 article in 1 outlet (ASPI The Strategist), Nov 10, 2026. Type: intrusion. Asia-Pacific countries affected: Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/the-new-cold-war-hacked-fridges-reveal-infrastructure-security-gaps-20261110/" }, { "source_name": "ASPI The Strategist", "url": "https://www.aspistrategist.org.au/the-new-cold-war-hacked-fridges-reveal-infrastructure-security-gaps/", "description": "The new ‘cold’ war: hacked fridges reveal infrastructure-security gaps" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b3b0deae-ad3f-5b51-b58a-892e3fc6364a", "created": "2026-11-10T16:32:08.738Z", "modified": "2026-11-10T16:32:08.738Z", "relationship_type": "related-to", "source_ref": "incident--c454cc06-af5a-5977-aeac-db2feca6e0cc", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2eb074a2-3441-5531-816d-e5b4404363e0", "created": "2026-11-10T16:32:08.733Z", "modified": "2026-11-13T00:02:47.748Z", "name": "EC, MCMC take measures to protect website following reported cyber attack", "description": "Detected automatically from 2 articles in 2 outlets (Free Malaysia Today, Malay Mail), Nov 10, 2026. Type: other. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ec-mcmc-take-measures-to-protect-website-following-reported-cyber-atta-20261110/" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/11/10/ec-mcmc-take-measures-to-protect-website-following-reported-cyber-attack/242677", "description": "EC, MCMC take measures to protect website following reported cyber attack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/11/10/ec-working-with-mcmc-after-suspected-cyberattack", "description": "EC working with MCMC after suspected cyberattack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/bahasa/tempatan/2026/11/10/spr-kerjasama-dengan-skmm-selepas-dakwaan-serangan-siber", "description": "SPR kerjasama dengan SKMM selepas dakwaan serangan siber" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Malaysia", "country": "MY" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cf5165e8-f49d-5873-9f5b-6ed896c0cc8f", "created": "2026-11-10T16:32:08.733Z", "modified": "2026-11-10T16:32:08.733Z", "relationship_type": "related-to", "source_ref": "incident--2eb074a2-3441-5531-816d-e5b4404363e0", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--efb0048b-1906-59f6-857f-a6c4b1fdb614", "created": "2026-11-10T16:32:08.729Z", "modified": "2026-11-13T00:02:47.743Z", "name": "SEC probes data breach", "description": "Detected automatically from 1 article in 1 outlet (The Manila Times), Nov 10, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sec-probes-data-breach-20261110/" }, { "source_name": "The Manila Times", "url": "https://www.manilatimes.net/2026/11/10/news/sec-probes-data-breach/2465889", "description": "SEC probes data breach" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0756ed32-1c43-5b7b-a4cc-8ea79b136c8c", "created": "2026-11-10T16:32:08.729Z", "modified": "2026-11-10T16:32:08.729Z", "relationship_type": "related-to", "source_ref": "incident--efb0048b-1906-59f6-857f-a6c4b1fdb614", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f", "created": "2026-11-11T20:35:29.928Z", "modified": "2026-11-13T00:02:47.695Z", "name": "SonicWall SSL-VPN authentication bypass vulnerability exploited in actual attacks, multi-factor authentication also neutralized", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: exploitation. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sonicwall-ssl-vpn-authentication-bypass-vulnerability-exploited-in-act-20261109/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209394", "description": "소닉월 SSL-VPN 인증 우회 취약점 실제 공격에 악용, 다중인증도 무력화" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe97fcb5-287d-56c6-a798-914b08267c23", "created": "2026-11-11T20:35:29.928Z", "modified": "2026-11-11T20:35:29.928Z", "relationship_type": "related-to", "source_ref": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--502a9f8f-a5b4-5afc-abed-dfd1c77c5cd6", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-19868", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-19868" } ], "description": "SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fa591481-207c-519e-a125-a9c868ca1360", "created": "2026-11-11T20:35:29.928Z", "modified": "2026-11-11T20:35:29.928Z", "relationship_type": "related-to", "source_ref": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f", "target_ref": "vulnerability--502a9f8f-a5b4-5afc-abed-dfd1c77c5cd6", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e25ecd09-4f7f-551b-9d8d-fae17250a435", "created": "2026-11-11T20:35:29.968Z", "modified": "2026-11-13T00:02:47.717Z", "name": "Commanding 12 AI agents alone... Taiwanese hacker breaches fire emergency system and steals patient records", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: data breach; sectors: health. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/commanding-12-ai-agents-alone-taiwanese-hacker-breaches-fire-emergency-20261109/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147057", "description": "혼자서 AI 에이전트 12개 지휘... 대만 해커, 소방 응급 시스템 뚫고 환자 기록 빼내" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Health" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0fbc5fe3-846d-5a1e-b5ad-f612f3853636", "created": "2026-11-11T20:35:29.968Z", "modified": "2026-11-11T20:35:29.968Z", "relationship_type": "related-to", "source_ref": "incident--e25ecd09-4f7f-551b-9d8d-fae17250a435", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--76188bea-6560-56fa-b585-e9fb1cc8e389", "created": "2026-11-11T20:35:29.936Z", "modified": "2026-11-13T00:02:47.700Z", "name": "Ransomware group N0n claims to have hacked company related to Korean smart TV advertising data", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: ransomware. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ransomware-group-n0n-claims-to-have-hacked-company-related-to-korean-s-20261109/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209395", "description": "랜섬웨어 조직 N0n, 한국 스마트TV 광고 데이터 관련 기업 해킹 주장" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c65dbd8c-f48a-5ef5-b645-610a713dfc5d", "created": "2026-11-11T20:35:29.936Z", "modified": "2026-11-11T20:35:29.936Z", "relationship_type": "related-to", "source_ref": "incident--76188bea-6560-56fa-b585-e9fb1cc8e389", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bbdd10ae-6a90-5348-a4bb-88035c120d7e", "created": "2026-11-10T16:32:08.724Z", "modified": "2026-11-13T00:02:47.738Z", "name": "SEGA newsletter data breach exposes 2.2 million email addresses", "description": "Detected automatically from 1 article in 1 outlet (BleepingComputer), Nov 9, 2026. Type: data breach; sectors: media. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 2,200,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sega-newsletter-data-breach-exposes-22-million-email-addresses-20261109/" }, { "source_name": "BleepingComputer", "url": "https://www.bleepingcomputer.com/news/security/sega-newsletter-data-breach-exposes-22-million-email-addresses/", "description": "SEGA newsletter data breach exposes 2.2 million email addresses" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Media" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--97e89335-0775-5af3-96fd-c79e32ff584b", "created": "2026-11-10T16:32:08.724Z", "modified": "2026-11-10T16:32:08.724Z", "relationship_type": "related-to", "source_ref": "incident--bbdd10ae-6a90-5348-a4bb-88035c120d7e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--172d7460-0c5f-5a39-9b0b-d48294521de2", "created": "2026-11-10T16:32:08.720Z", "modified": "2026-11-13T00:02:47.733Z", "name": "Data breach did not compromise credit card numbers, online travel agency says", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 9, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-breach-did-not-compromise-credit-card-numbers-online-travel-agenc-20261109/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/11/10/2003867478", "description": "Data breach did not compromise credit card numbers, online travel agency says" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7020a437-4d6c-580b-a798-65f83c9f375b", "created": "2026-11-10T16:32:08.720Z", "modified": "2026-11-10T16:32:08.720Z", "relationship_type": "related-to", "source_ref": "incident--172d7460-0c5f-5a39-9b0b-d48294521de2", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cef2404f-e717-5c0f-b1e7-cb8cefded577", "created": "2026-11-10T16:32:08.715Z", "modified": "2026-11-13T00:02:47.728Z", "name": "Deputy Chief of Kut Chok Subdistrict Administrative Organization files a report with Cyber Police to find the person who hacked his Facebook", "description": "Detected automatically from 2 articles in 2 outlets (Khaosod (Thai), Matichon), Nov 9, 2026. Title machine-translated from Thai. Type: intrusion; sectors: government. Asia-Pacific countries affected: Thailand. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261109-2/" }, { "source_name": "Khaosod (Thai)", "url": "https://www.khaosod.co.th/around-thailand/news_10466378", "description": "ปลัด อบต.กุดจอก แจ้งความตร.ไซเบอร์ หาตัวคนแฮกเฟซบุ๊ก" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/region/news_5968556", "description": "ยันถูกแฮก! ปลัด อบต.กุดจอก หอบหลักฐานแจ้งความ ปัดส่งเจ้าหน้าที่ด่าทอผู้สื่อข่าว" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3c179534-43f4-56e6-a54a-d5010a4878d9", "created": "2026-11-10T16:32:08.715Z", "modified": "2026-11-10T16:32:08.715Z", "relationship_type": "related-to", "source_ref": "incident--cef2404f-e717-5c0f-b1e7-cb8cefded577", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--256e7afa-4394-5775-a2d4-f24fe398aecb", "created": "2026-11-10T16:32:08.709Z", "modified": "2026-11-13T00:02:47.722Z", "name": "Unauthorized access to Nitori; possibility of up to 37.62 million pieces of personal information leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 9, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 37,620,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/3762-20261109/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261109de73045", "description": "ニトリに不正アクセス 最大3762万件の個人情報が流出の可能性" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--33baf61a-c778-576a-8422-34d65d60cfc1", "created": "2026-11-10T16:32:08.709Z", "modified": "2026-11-10T16:32:08.709Z", "relationship_type": "related-to", "source_ref": "incident--256e7afa-4394-5775-a2d4-f24fe398aecb", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da67f9be-8ce0-5fe9-ab46-4b945ed323fa", "created": "2026-11-10T16:32:08.704Z", "modified": "2026-11-13T00:02:47.711Z", "name": "Unauthorized access to 'RAKSUL'; risk of leakage of printing data and other information", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 9, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261109/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261109de72879", "description": "「ラクスル」に不正アクセス 印刷データなど漏えいおそれ" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7f919939-6c72-5c15-a114-f64fba4ee1bd", "created": "2026-11-10T16:32:08.704Z", "modified": "2026-11-10T16:32:08.704Z", "relationship_type": "related-to", "source_ref": "incident--da67f9be-8ce0-5fe9-ab46-4b945ed323fa", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--88b78184-c284-5241-9000-edca1cab4bb7", "created": "2026-11-10T16:32:08.699Z", "modified": "2026-11-13T00:02:47.706Z", "name": "Cabinet minister Anne Aly hacked after 'inadvertently' opening WhatsApp scam link", "description": "Detected automatically from 1 article in 1 outlet (SBS News), Nov 9, 2026. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cabinet-minister-anne-aly-hacked-after-inadvertently-opening-whatsapp-20261109/" }, { "source_name": "SBS News", "url": "https://www.sbs.com.au/news/article/labor-frontbencher-anne-alys-phone-hacked-scam-whatsapp-link/yg52uglkw", "description": "Cabinet minister Anne Aly hacked after 'inadvertently' opening WhatsApp scam link" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bd657e68-ab5f-52dc-957a-04d6687d2685", "created": "2026-11-10T16:32:08.699Z", "modified": "2026-11-10T16:32:08.699Z", "relationship_type": "related-to", "source_ref": "incident--88b78184-c284-5241-9000-edca1cab4bb7", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--40183757-45cf-5388-99e8-de1c0b33bf46", "created": "2026-11-11T20:36:59.807Z", "modified": "2026-11-13T00:02:47.689Z", "name": "Iris Ohyama data cloud breach exposes info of 7.7 million customers", "description": "Detected automatically from 1 article in 1 outlet (BleepingComputer), Nov 8, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 7,700,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers-20261108/" }, { "source_name": "BleepingComputer", "url": "https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/", "description": "Iris Ohyama data cloud breach exposes info of 7.7 million customers" } ], "x_securitystudies_occurred_on": "2026-11-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c810fc0e-9a74-5dfe-af44-1f9764a95c9a", "created": "2026-11-11T20:36:59.807Z", "modified": "2026-11-11T20:36:59.807Z", "relationship_type": "related-to", "source_ref": "incident--40183757-45cf-5388-99e8-de1c0b33bf46", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2529a32d-ae58-5b7b-ae94-92dc50d4831a", "created": "2026-11-10T16:32:08.689Z", "modified": "2026-11-13T00:02:47.678Z", "name": "Fahmi says online banking remains safe despite cyberattacks and Bank Rakyat hack", "description": "Detected automatically from 2 articles in 2 outlets (Free Malaysia Today, Malay Mail), Nov 7, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/fahmi-says-online-banking-remains-safe-despite-cyberattacks-and-bank-r-20261107/" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/11/07/fahmi-says-online-banking-remains-safe-despite-cyberattacks-and-bank-rakyat-hack/242378", "description": "Fahmi says online banking remains safe despite cyberattacks and Bank Rakyat hack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/11/07/banking-system-secure-says-fahmi-after-bank-rakyat-hack", "description": "Banking system secure, says Fahmi after Bank Rakyat hack" } ], "x_securitystudies_occurred_on": "2026-11-07", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--63c5a92b-add4-519b-9d14-c21296e6b079", "created": "2026-11-10T16:32:08.689Z", "modified": "2026-11-10T16:32:08.689Z", "relationship_type": "related-to", "source_ref": "incident--2529a32d-ae58-5b7b-ae94-92dc50d4831a", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1dff11a9-d126-5a2f-b82b-9ea8ccf8ebfa", "created": "2026-11-10T16:32:08.695Z", "modified": "2026-11-13T00:02:47.684Z", "name": "Cyberattack shuts down Internet fan fiction library", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Nov 7, 2026. Type: other; sectors: technology. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattack-shuts-down-internet-fan-fiction-library-20261107/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/world/archives/2026/11/08/2003867379", "description": "Cyberattack shuts down Internet fan fiction library" } ], "x_securitystudies_occurred_on": "2026-11-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--12a00f13-b4b6-5af1-a7f5-6f2e6344f1b4", "created": "2026-11-10T16:32:08.695Z", "modified": "2026-11-10T16:32:08.695Z", "relationship_type": "related-to", "source_ref": "incident--1dff11a9-d126-5a2f-b82b-9ea8ccf8ebfa", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f219f4b6-a053-5ace-86f8-a7159450a4f7", "created": "2026-11-10T16:32:08.683Z", "modified": "2026-11-13T00:02:47.673Z", "name": "BIR 'data leak' under gov't probe", "description": "Detected automatically from 1 article in 1 outlet (GMA Network), Nov 7, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/bir-data-leak-under-govt-probe-20261107/" }, { "source_name": "GMA Network", "url": "https://www.gmanetwork.com/news/topstories/nation/1008620/bir-data-leak-under-gov-t-probe/story/", "description": "BIR 'data leak' under gov't probe" } ], "x_securitystudies_occurred_on": "2026-11-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--089d4dcb-fad7-5708-9e59-e6dc3e618e42", "created": "2026-11-10T16:32:08.683Z", "modified": "2026-11-10T16:32:08.683Z", "relationship_type": "related-to", "source_ref": "incident--f219f4b6-a053-5ace-86f8-a7159450a4f7", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-13T00:02:47.668Z", "name": "Mirae Asset says data breaches exposed customer, employee information", "description": "Detected automatically from 4 articles in 3 outlets (ETCISO (Economic Times), The Korea Herald, Yonhap), Nov 6 to Nov 9, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea, India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/mirae-asset-says-data-breaches-exposed-customer-employee-information-20261106/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261107000400315", "description": "Mirae Asset says data breaches exposed customer, employee information" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261107000451315", "description": "(LEAD) Personal info of some 39,000 leaked from Mirae Asset Securities" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10929242", "description": "Personal info of some 39,000 leaked from Mirae Asset Securities" }, { "source_name": "ETCISO (Economic Times)", "url": "https://ciso.economictimes.indiatimes.com/news/data-breaches/personal-info-of-39000-persons-leaked-from-mirae-asset-securities/135669047", "description": "Personal info of 39,000 persons leaked from Mirae Asset Securities" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8730a6a4-1342-5393-ac9d-7cfd7315a152", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-10T16:32:08.678Z", "relationship_type": "related-to", "source_ref": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--65a71513-9667-5cbf-8f43-633d1647f9aa", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-10T16:32:08.678Z", "relationship_type": "related-to", "source_ref": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e1bce9d5-7544-5ad3-9509-b73b2b07b962", "created": "2026-11-10T16:32:08.673Z", "modified": "2026-11-13T00:02:47.662Z", "name": "Double Trouble: Japan Data Breaches Expose 260 Million Personal Info Records", "description": "Detected automatically from 1 article in 1 outlet (Nippon.com), Nov 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 260,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/double-trouble-japan-data-breaches-expose-260-million-personal-info-re-20261106/" }, { "source_name": "Nippon.com", "url": "https://www.nippon.com/en/articles/-/56881", "description": "Double Trouble: Japan Data Breaches Expose 260 Million Personal Info Records" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5de1800f-de37-5381-80bf-2f571954e44a", "created": "2026-11-10T16:32:08.673Z", "modified": "2026-11-10T16:32:08.673Z", "relationship_type": "related-to", "source_ref": "incident--e1bce9d5-7544-5ad3-9509-b73b2b07b962", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ab1302bf-ef3d-5dc2-a1f1-8a6d1b8a4edf", "created": "2026-11-10T16:32:08.668Z", "modified": "2026-11-13T00:02:47.656Z", "name": "What’s next after airlines? Asia data breach raises wider cyber fears", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Nov 6, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: China. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/whats-next-after-airlines-asia-data-breach-raises-wider-cyber-fears-20261106/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/week-asia/politics/article/3373605/whats-next-after-airlines-asia-data-breach-raises-wider-cyber-fears", "description": "What’s next after airlines? Asia data breach raises wider cyber fears" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--231e90b4-4920-54e1-af65-e3447d240a54", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "China", "country": "CN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8e9cb752-1b46-52cd-b34a-8d32f6a1abda", "created": "2026-11-10T16:32:08.668Z", "modified": "2026-11-10T16:32:08.668Z", "relationship_type": "related-to", "source_ref": "incident--ab1302bf-ef3d-5dc2-a1f1-8a6d1b8a4edf", "target_ref": "location--231e90b4-4920-54e1-af65-e3447d240a54", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b12b1524-b34b-5ccd-a729-849b56d22293", "created": "2026-11-10T16:32:08.663Z", "modified": "2026-11-13T00:02:47.651Z", "name": "M1 hit by data breach", "description": "Detected automatically from 2 articles in 1 outlet (The Straits Times), Nov 6, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/m1-hit-by-data-breach-20261106/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/m1-hit-by-data-breach", "description": "M1 hit by data breach" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/doctor-anywhere-hit-by-data-breach", "description": "Doctor Anywhere hit by data breach" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--430dac32-10cd-541e-9bd1-3c4629c50c3b", "created": "2026-11-10T16:32:08.663Z", "modified": "2026-11-10T16:32:08.663Z", "relationship_type": "related-to", "source_ref": "incident--b12b1524-b34b-5ccd-a729-849b56d22293", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-13T00:02:47.646Z", "name": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns", "description": "Detected automatically from 2 articles in 2 outlets (Check Point Research, Microsoft Threat Intelligence), Nov 5 to Nov 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea, Hong Kong, Thailand, Cambodia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hacking-on-autopilot-inside-artex-cybercrime-campaigns-20261105/" }, { "source_name": "Check Point Research", "url": "https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/", "description": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns" }, { "source_name": "Microsoft Threat Intelligence", "url": "https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/", "description": "ARTEX abuse expands as cybercriminals target financial sector" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ef85cfba-0238-5680-aea1-65608ed33612", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--045a1890-e799-520f-8119-ae91e4fb69bb", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Cambodia", "country": "KH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b12a351-49f3-59e1-9cc0-9a00ca31b2c8", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--045a1890-e799-520f-8119-ae91e4fb69bb", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2990eb21-033c-5af2-8a5b-46e23b3cb343", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7985a9d6-9e8b-57bc-9e3e-2829147cbdd9", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "created": "2026-11-09T04:30:05.339Z", "modified": "2026-11-09T04:30:05.339Z", "name": "Storm-0940", "aliases": [ "CovertNetwork-1658", "ORB07" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/storm-0940/" } ], "description": "Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as well as exploiting network edge applications. Microsoft has observed Storm-0940 utilizing valid credentials obtained from CovertNetwork-1658's password spray operations, indicating a close operational relationship between the two. Once inside a victim environment, Storm-0940 has been seen leveraging compromised credentials for further malicious activities. Additionally, Storm-0940 has employed botnets, such as Quad7, to facilitate password spraying attacks." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1999587e-b927-574f-9ab1-fa9a82d2d58e", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c18c6e86-d995-5834-b867-fa6f0dc7a52d", "created": "2026-11-12T06:04:36.840Z", "modified": "2026-11-13T00:02:47.624Z", "name": "Foreign ministry looking to contractor over presidential personal info leak", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Nov 5, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/foreign-ministry-looking-to-contractor-over-presidential-personal-info-20261105/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10927143", "description": "Foreign ministry looking to contractor over presidential personal info leak" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3982744e-7383-5af6-b09f-bb44f02b6a06", "created": "2026-11-12T06:04:36.840Z", "modified": "2026-11-12T06:04:36.840Z", "relationship_type": "related-to", "source_ref": "incident--c18c6e86-d995-5834-b867-fa6f0dc7a52d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--19d01182-8092-5d15-a580-fa1c61784bf5", "created": "2026-11-10T16:32:08.652Z", "modified": "2026-11-13T00:02:47.640Z", "name": "South Korea investigates 580 finance firms over data leaks, issues warning", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Nov 5, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korea-investigates-580-finance-firms-over-data-leaks-issues-warn-20261105/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/week-asia/economics/article/3373363/south-korea-investigates-580-finance-firms-over-data-leaks-issues-warning", "description": "South Korea investigates 580 finance firms over data leaks, issues warning" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--720105e2-e7a9-541f-9c34-19722663917d", "created": "2026-11-10T16:32:08.652Z", "modified": "2026-11-10T16:32:08.652Z", "relationship_type": "related-to", "source_ref": "incident--19d01182-8092-5d15-a580-fa1c61784bf5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fa0dbed4-0d63-5915-a7d0-05565b659847", "created": "2026-11-10T16:32:08.644Z", "modified": "2026-11-13T00:02:47.630Z", "name": "Most gov't agencies deny using VirusTotal, deepening questions over presidential data leak", "description": "Detected automatically from 1 article in 1 outlet (Korea Times), Nov 5, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/most-govt-agencies-deny-using-virustotal-deepening-questions-over-pres-20261105/" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/politics/20261105/most-govt-agencies-deny-using-virustotal-deepening-questions-over-presidential-data-leak?utm_source=rss", "description": "Most gov't agencies deny using VirusTotal, deepening questions over presidential data leak" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--daf20925-aa00-57b1-ac84-0e2e0d08cc1d", "created": "2026-11-10T16:32:08.644Z", "modified": "2026-11-10T16:32:08.644Z", "relationship_type": "related-to", "source_ref": "incident--fa0dbed4-0d63-5915-a7d0-05565b659847", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--146c35ff-de36-5c8d-8d30-3156bd41522c", "created": "2026-11-10T16:32:08.632Z", "modified": "2026-11-13T00:02:47.614Z", "name": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC", "description": "Detected automatically from 2 articles in 2 outlets (Korea Times, Yonhap), Nov 5, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-470000-pieces-of-personal-data-leaked-from-37-financial-firms-fsc-20261105/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261105002400320", "description": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261105/over-470000-pieces-of-personal-data-leaked-from-37-financial-firms-fsc?utm_source=rss", "description": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8e42941a-da17-54fb-bad4-649fed864700", "created": "2026-11-10T16:32:08.632Z", "modified": "2026-11-10T16:32:08.632Z", "relationship_type": "related-to", "source_ref": "incident--146c35ff-de36-5c8d-8d30-3156bd41522c", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--49cda955-ac90-53e9-bff2-0397937d21fd", "created": "2026-11-10T16:32:08.648Z", "modified": "2026-11-13T00:02:47.635Z", "name": "OVP suffers alleged data leak – cybersecurity group", "description": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Nov 5, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ovp-suffers-alleged-data-leak-cybersecurity-group-20261105/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2336392/ovp-suffers-alleged-data-leak-cybersecurity-group", "description": "OVP suffers alleged data leak – cybersecurity group" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4199c2ee-67b1-5ed6-a0b1-5f6f3367f4c6", "created": "2026-11-10T16:32:08.648Z", "modified": "2026-11-10T16:32:08.648Z", "relationship_type": "related-to", "source_ref": "incident--49cda955-ac90-53e9-bff2-0397937d21fd", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9db6fd6d-46ec-50fe-bc83-1670e3002c43", "created": "2026-11-10T16:32:08.638Z", "modified": "2026-11-13T00:02:47.620Z", "name": "Possibility of unauthorized access to Docomo; online services suspended", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 5, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261105/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261105de70776", "description": "ドコモに不正アクセスの可能性 オンラインサービス停止" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d0da8cdf-7461-5985-b508-bcb6c1772d30", "created": "2026-11-10T16:32:08.638Z", "modified": "2026-11-10T16:32:08.638Z", "relationship_type": "related-to", "source_ref": "incident--9db6fd6d-46ec-50fe-bc83-1670e3002c43", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7a33e88b-9d5a-5a8b-a999-6ada6710b702", "created": "2026-11-10T16:32:08.626Z", "modified": "2026-11-13T00:02:47.603Z", "name": "No evidence of customer data leak in unauthorized transactions: SinoPac", "description": "Detected automatically from 3 articles in 3 outlets (Liberty Times, New Talk, Taipei Times), Nov 4 to Nov 12, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 40,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/no-evidence-of-customer-data-leak-in-unauthorized-transactions-sinopac-20261104/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-04/1069275", "description": "永豐銀行419人遭盜轉！金額約4千餘萬 北檢今分案偵辦" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/biz/archives/2026/11/05/2003867168", "description": "No evidence of customer data leak in unauthorized transactions: SinoPac" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5638871", "description": "永豐銀行資安事件今送報告 金管會全面調查缺失" } ], "x_securitystudies_occurred_on": "2026-11-04", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ea92fcab-e2b4-5704-8ab2-7dd9d7a0b086", "created": "2026-11-10T16:32:08.626Z", "modified": "2026-11-10T16:32:08.626Z", "relationship_type": "related-to", "source_ref": "incident--7a33e88b-9d5a-5a8b-a999-6ada6710b702", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4a8a52c2-7e62-5ef0-8de0-c6323f11330c", "created": "2026-11-10T16:32:08.616Z", "modified": "2026-11-13T00:02:47.597Z", "name": "Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach", "description": "Detected automatically from 1 article in 1 outlet (Dark Reading), Nov 4, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/philippine-migrant-worker-data-likely-leaked-in-69gb-government-breach-20261104/" }, { "source_name": "Dark Reading", "url": "https://www.darkreading.com/cyberattacks-data-breaches/philippine-migrant-worker-data-69gb-government-breach", "description": "Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach" } ], "x_securitystudies_occurred_on": "2026-11-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--53aa867f-532b-5b9f-87a8-058374c20f4b", "created": "2026-11-10T16:32:08.616Z", "modified": "2026-11-10T16:32:08.616Z", "relationship_type": "related-to", "source_ref": "incident--4a8a52c2-7e62-5ef0-8de0-c6323f11330c", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d64046a9-94db-5aee-acb5-5296dca055d8", "created": "2026-11-10T16:32:08.611Z", "modified": "2026-11-13T00:02:47.592Z", "name": "St. Luke’s Medical Center reports personal data breach", "description": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Nov 4, 2026. Type: data breach; sectors: health. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/st-lukes-medical-center-reports-personal-data-breach-20261104/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2335706/st-lukes-medical-center-reports-personal-data-breach", "description": "St. Luke’s Medical Center reports personal data breach" } ], "x_securitystudies_occurred_on": "2026-11-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Health" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--15bb1652-d560-555d-bd96-77554aa87549", "created": "2026-11-10T16:32:08.611Z", "modified": "2026-11-10T16:32:08.611Z", "relationship_type": "related-to", "source_ref": "incident--d64046a9-94db-5aee-acb5-5296dca055d8", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--25313f72-c634-51e7-8da5-ef48f0cd9f4a", "created": "2026-11-11T20:35:29.858Z", "modified": "2026-11-13T00:02:47.609Z", "name": "Japan Post partially suspends overseas delivery service 'UGX' due to cyberattack", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 4, 2026. Title machine-translated from Japanese. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japan-post-partially-suspends-overseas-delivery-service-ugx-due-to-cyb-20261104/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261105de70691", "description": "日本郵便 サイバー攻撃で海外向け配送「UGX」一部停止" } ], "x_securitystudies_occurred_on": "2026-11-04", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3351c250-50a5-58f0-a06f-0fea99ae13ce", "created": "2026-11-11T20:35:29.858Z", "modified": "2026-11-11T20:35:29.858Z", "relationship_type": "related-to", "source_ref": "incident--25313f72-c634-51e7-8da5-ef48f0cd9f4a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--95a2737b-40c9-5292-9543-fba9eb088781", "created": "2026-11-10T16:32:08.600Z", "modified": "2026-11-13T00:02:47.586Z", "name": "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw", "description": "Detected automatically from 1 article in 1 outlet (The Hacker News), Nov 3, 2026. Type: ransomware. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/synology-nas-devices-targeted-in-ransomware-attacks-exploiting-patched-20261103/" }, { "source_name": "The Hacker News", "url": "https://thehackernews.com/2026/11/synology-nas-devices-targeted-in.html", "description": "Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e8fc10fe-4ff5-5bdb-8044-5f11b233c0b0", "created": "2026-11-10T16:32:08.600Z", "modified": "2026-11-10T16:32:08.600Z", "relationship_type": "related-to", "source_ref": "incident--95a2737b-40c9-5292-9543-fba9eb088781", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da6319a8-040d-543f-87ec-1541b38ab162", "created": "2026-11-10T16:32:08.595Z", "modified": "2026-11-13T00:02:47.581Z", "name": "MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed", "description": "Detected automatically from 3 articles in 3 outlets (Channel News Asia, HK Free Press, The Straits Times), Nov 3 to Nov 4, 2026. Type: data breach; sectors: financial services, technology. Asia-Pacific countries affected: Singapore, Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-p-20261103/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/moneysmart-data-breach-hits-spore-hk-users-ic-numbers-financial-info-potentially-exposed", "description": "MoneySmart data breach hits S’pore, HK users; IC numbers, financial info potentially exposed" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/moneysmart-data-breach-security-incident-6515356", "description": "Financial services firm MoneySmart hit by IT security breach, some customers' data copied" }, { "source_name": "HK Free Press", "url": "https://hongkongfp.com/2026/11/04/finance-portal-moneysmart-apologises-after-users-sensitive-data-accessed-in-it-system-hack/", "description": "Finance portal MoneySmart apologises after users’ sensitive data accessed in IT system hack" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2e2749c2-8ea0-54eb-8e25-9946b8eab878", "created": "2026-11-10T16:32:08.595Z", "modified": "2026-11-10T16:32:08.595Z", "relationship_type": "related-to", "source_ref": "incident--da6319a8-040d-543f-87ec-1541b38ab162", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--82e3e6a8-46bf-500f-b1d7-293cc9716aae", "created": "2026-11-10T16:32:08.595Z", "modified": "2026-11-10T16:32:08.595Z", "relationship_type": "related-to", "source_ref": "incident--da6319a8-040d-543f-87ec-1541b38ab162", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6bf1a94e-f282-5bb7-94e3-8375f270f2af", "created": "2026-11-10T16:32:08.589Z", "modified": "2026-11-13T00:02:47.575Z", "name": "Kim Yo-jong's rare denial of $6.3b crypto heist raises questions over US-N. Korea dialogue", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Nov 3, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/kim-yo-jongs-rare-denial-of-63b-crypto-heist-raises-questions-over-us-20261103/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10924126", "description": "Kim Yo-jong's rare denial of $6.3b crypto heist raises questions over US-N. Korea dialogue" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--39d3f6b1-b126-5c8e-b9cb-e4794959e4bb", "created": "2026-11-10T16:32:08.577Z", "modified": "2026-11-13T00:02:47.564Z", "name": "More data breaches hit Japan, including leak of 77 million email addresses", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Nov 3, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 77,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-data-breaches-hit-japan-including-leak-of-77-million-email-addres-20261103/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/11/03/japan/society/japan-firms-report-more-data-breaches/", "description": "More data breaches hit Japan, including leak of 77 million email addresses" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--31dcaae4-37ab-5ba6-903a-98120c000eae", "created": "2026-11-10T16:32:08.577Z", "modified": "2026-11-10T16:32:08.577Z", "relationship_type": "related-to", "source_ref": "incident--39d3f6b1-b126-5c8e-b9cb-e4794959e4bb", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d8b0252a-827c-5bb5-802f-2ae6612a6f9e", "created": "2026-11-10T16:32:08.583Z", "modified": "2026-11-13T00:02:47.570Z", "name": "Cheong Wa Dae orders probes into data leak of Lee, aides, security guards", "description": "Detected automatically from 2 articles in 1 outlet (The Korea Herald), Nov 3, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cheong-wa-dae-orders-probes-into-data-leak-of-lee-aides-security-guard-20261103/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10923743", "description": "Cheong Wa Dae orders probes into data leak of Lee, aides, security guards" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10924108", "description": "Seoul races to contain data leak exposing Lee, his aides and bodyguards" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0a01b020-2f89-5b41-9e01-c8baf4437b73", "created": "2026-11-10T16:32:08.583Z", "modified": "2026-11-10T16:32:08.583Z", "relationship_type": "related-to", "source_ref": "incident--d8b0252a-827c-5bb5-802f-2ae6612a6f9e", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ca649294-37b3-58a6-b905-21498e809401", "created": "2026-11-10T16:32:08.548Z", "modified": "2026-11-13T00:02:47.531Z", "name": "Personal information of Lee, presidential staff leaked: report", "description": "Detected automatically from 11 articles in 6 outlets (Hankyoreh, NHK, New Talk, South China Morning Post, The Korea Herald, Yonhap), Nov 2 to Nov 4, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-information-of-lee-presidential-staff-leaked-report-20261102/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261102013200320", "description": "Personal information of Lee, presidential staff leaked: report" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261102013251320", "description": "(LEAD) Personal information of Lee, presidential staff leaked: report" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103003700315", "description": "Presidential office holds emergency meeting over leak of personal data of president, trip entourage" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10923757", "description": "Presidential office holds emergency meeting over leak of personal data of president, trip entourage" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103003751315", "description": "(LEAD) Presidential office holds emergency meeting over leak of personal data of president, trip entourage" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/asia/east-asia/article/3373065/south-korea-rushes-reissue-passports-president-lee-wife-after-data-leak", "description": "South Korea rushes to reissue passports to President Lee, wife after data leak" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-03/1069015", "description": "長達逾5個月！ 李在明護照資料遭公開 韓國政府急善後..." }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103010400315", "description": "Main opposition slams presidential office for leak of Lee's personal data" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261103de70007", "description": "韓国大統領や高官の個人情報流出 イ大統領パスポート再発行へ" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_national/1285585.html", "description": "Passport numbers of Lee, 167 others leaked in presidential jet data breach" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_national/1285767.html", "description": "Foreign Ministry employee likely behind presidential jet passenger data leak" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dbd0ffd-b3ab-5689-9e97-81680954e607", "created": "2026-11-10T16:32:08.548Z", "modified": "2026-11-10T16:32:08.548Z", "relationship_type": "related-to", "source_ref": "incident--ca649294-37b3-58a6-b905-21498e809401", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--21c3d4c2-5bda-5278-b705-a253476668ec", "created": "2026-11-11T20:39:11.010Z", "modified": "2026-11-13T00:02:47.559Z", "name": "(URGENT) N. Korean leader's sister denounces FBI's crypto theft probe as 'political provocation'", "description": "Detected automatically from 6 articles in 2 outlets (The Korea Herald, Yonhap), Nov 2 to Nov 3, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/urgent-n-korean-leaders-sister-denounces-fbis-crypto-theft-probe-as-po-20261102/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103000500315", "description": "(URGENT) N. Korean leader's sister denounces FBI's crypto theft probe as 'political provocation'" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103000600315", "description": "N. Korean leader's sister blasts FBI's crypto theft probe as 'political provocation'" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103000652315", "description": "(LEAD) N. Korean leader's sister blasts FBI's crypto theft probe as 'political provocation'" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10923486", "description": "N. Korean leader's sister blasts FBI's crypto theft probe as 'political provocation'" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103000653315", "description": "(2nd LD) N. Korean leader's sister blasts FBI's crypto theft probe as 'political provocation'" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10924016", "description": "N. Korean leader's sister blasts FBI's crypto theft probe as 'political provocation'" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1428a978-541d-52ab-ad64-d3d8aa8f91b2", "created": "2026-11-10T16:32:08.559Z", "modified": "2026-11-13T00:02:47.546Z", "name": "Korean media: Passport data of 168 people including President Lee Jae-myung leaked and uploaded to paid websites", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Nov 2, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government, media. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/168-20261102/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/world/breakingnews/5627213", "description": "韓媒：總統李在明等168人護照資料外洩 上傳付費網站" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Media" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--02d57fc3-146e-53c4-a2c4-fb999d1ab249", "created": "2026-11-10T16:32:08.559Z", "modified": "2026-11-10T16:32:08.559Z", "relationship_type": "related-to", "source_ref": "incident--1428a978-541d-52ab-ad64-d3d8aa8f91b2", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--31085285-db42-5c18-8a9a-3c132955b4d7", "created": "2026-11-10T16:32:08.553Z", "modified": "2026-11-13T00:02:47.539Z", "name": "PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia", "description": "Detected automatically from 1 article in 1 outlet (Dark Reading), Nov 2, 2026. Type: espionage campaign. Asia-Pacific countries affected: India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/paprat-cyber-espionage-campaign-leaves-a-bitter-taste-in-south-asia-20261102/" }, { "source_name": "Dark Reading", "url": "https://www.darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia", "description": "PapRAT Cyber-Espionage Campaign Leaves a 'Bitter' Taste in South Asia" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--47e86df0-ca50-50eb-bbdc-0ed3cd9795c9", "created": "2026-11-10T16:32:08.553Z", "modified": "2026-11-10T16:32:08.553Z", "relationship_type": "related-to", "source_ref": "incident--31085285-db42-5c18-8a9a-3c132955b4d7", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b63138ca-e9ab-53b1-bff9-5c5113d97398", "created": "2026-11-10T16:32:08.542Z", "modified": "2026-11-13T00:02:47.518Z", "name": "Potential leak of personal information for up to approximately 5.49 million 'NetMile' users", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 2, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,490,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/549-20261102/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261102de69784", "description": "「ネットマイル」 最大で約549万人分の個人情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6b4a6cf0-573b-5895-9ed8-7bc42718856f", "created": "2026-11-10T16:32:08.542Z", "modified": "2026-11-10T16:32:08.542Z", "relationship_type": "related-to", "source_ref": "incident--b63138ca-e9ab-53b1-bff9-5c5113d97398", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--51e06f0c-b2a8-5e54-9c15-0e1109b3e9d3", "created": "2026-11-10T16:32:08.538Z", "modified": "2026-11-13T00:02:47.509Z", "name": "North Korea’s hackers supercharge crypto heists with AI skills", "description": "Detected automatically from 2 articles in 2 outlets (Taipei Times, The Japan Times), Nov 2, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/north-koreas-hackers-supercharge-crypto-heists-with-ai-skills-20261102/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/11/02/asia-pacific/north-korea-hackers-crypto-heist-ai/", "description": "North Korea’s hackers supercharge crypto heists with AI skills" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/world/archives/2026/11/03/2003867075", "description": "North Korea supercharges crypto heists with AI skills" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "created": "2026-11-09T04:30:05.217Z", "modified": "2026-11-09T04:30:05.217Z", "name": "TraderTraitor", "aliases": [ "Jade Sleet", "Pukchong", "UNC4899" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/tradertraitor/" } ], "description": "TraderTraitor targets blockchain companies through spear-phishing messages. The group sends these messages to employees, particularly those in system administration or software development roles, on various communication platforms, intended to gain access to these start-up and high-tech companies. TraderTraitor may be the work of operators previously responsible for APT38 activity." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bd0761b5-d7aa-5f5a-9abe-4978d2e8edcd", "created": "2026-11-10T16:32:08.538Z", "modified": "2026-11-10T16:32:08.538Z", "relationship_type": "related-to", "source_ref": "incident--51e06f0c-b2a8-5e54-9c15-0e1109b3e9d3", "target_ref": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1cf42061-42fa-5d7a-a7d3-9c6273a9b946", "created": "2026-11-10T16:32:08.533Z", "modified": "2026-11-13T00:02:47.499Z", "name": "Nojima leaks approximately 7 million pieces of personal information due to unauthorized access", "description": "Detected automatically from 1 article in 1 outlet (NHK), Nov 2, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 7,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/700-20261102/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261102de69780", "description": "ノジマ 不正アクセスで約700万件の個人情報漏えい" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a7931946-861b-5501-9929-d0c2e95d1133", "created": "2026-11-10T16:32:08.533Z", "modified": "2026-11-10T16:32:08.533Z", "relationship_type": "related-to", "source_ref": "incident--1cf42061-42fa-5d7a-a7d3-9c6273a9b946", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d8d6da77-9ccb-5d99-b369-7daa49c6ed19", "created": "2026-11-10T16:32:08.564Z", "modified": "2026-11-13T00:02:47.552Z", "name": "Suntory, other companies report personal data leaked", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/suntory-other-companies-report-personal-data-leaked-20261102/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/business/suntory-holdings-says-personal-data-of-around-100-000-people-leaked", "description": "Suntory, other companies report personal data leaked" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1dcba1bf-2ab7-501a-8a9c-32ab911330dc", "created": "2026-11-10T16:32:08.564Z", "modified": "2026-11-10T16:32:08.564Z", "relationship_type": "related-to", "source_ref": "incident--d8d6da77-9ccb-5d99-b369-7daa49c6ed19", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--78090cc0-ec70-5383-bd05-b8d09a7067e2", "created": "2026-11-10T16:32:08.529Z", "modified": "2026-11-13T00:02:47.491Z", "name": "Data on 16,000 people compromised at 3 Seoul international schools in PowerSchool breach", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Nov 2, 2026. Type: data breach; sectors: education. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-on-16000-people-compromised-at-3-seoul-international-schools-in-p-20261102/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10922866", "description": "Data on 16,000 people compromised at 3 Seoul international schools in PowerSchool breach" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b2088c25-b5a3-528a-9f1c-4988b1251b92", "created": "2026-11-10T16:32:08.529Z", "modified": "2026-11-10T16:32:08.529Z", "relationship_type": "related-to", "source_ref": "incident--78090cc0-ec70-5383-bd05-b8d09a7067e2", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3", "created": "2026-11-10T16:32:08.225Z", "modified": "2026-11-13T00:02:47.484Z", "name": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds", "description": "Detected automatically from 2 articles in 2 outlets (NHK, South China Morning Post), Nov 1 to Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-behind-cyberattacks-in-japan-security-firm-20261020/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/east-asia/china-ai-tool-artex-japan-cyberattack-6474611", "description": "Chinese AI tool behind cyberattacks in Japan: Security firm" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update2-security-firm-finds-china-linked-ai-agent-behind-japan-cyberattacks", "description": "Security firm finds China-linked AI agent behind Japan cyberattacks" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261021de62520", "description": "岩井コスモ証券 不正アクセスで顧客が意図しない売買注文" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/world/archives/2026/10/21/2003866365", "description": "China-made AI tool behind cyberattacks in Japan, GMO says" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261023de64076", "description": "GMO FX取引のサーバーに不正アクセス 口座で不正操作の相談も" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261024de64764", "description": "GMO 不正アクセス問題で政府に「能動的サイバー防御」を要請" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5618952", "description": "日本GMO外匯交易伺服器遭駭 股價重挫逾15％" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/28/japan/crime-legal/gmo-hacker-website-shutdown/", "description": "Website used by hackers to leak info shut down, GMO says" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261101de69281", "description": "GMO傘下 顧客情報漏えい 9年近く外部から取得可能な状態" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/asia/east-asia/article/3372913/north-korea-hackers-behind-japans-massive-gmo-data-leak-investigation-finds", "description": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds" } ], "x_securitystudies_occurred_on": "2026-11-01", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ee74280c-8486-5030-b349-8f43972feab0", "created": "2026-11-10T16:32:08.225Z", "modified": "2026-11-10T16:32:08.225Z", "relationship_type": "related-to", "source_ref": "incident--b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8e9aad2c-d131-54b1-bb70-6b20db312106", "created": "2026-11-10T16:32:08.520Z", "modified": "2026-11-13T00:02:47.471Z", "name": "Club Tourism: Approximately 4.32 million pieces of personal information leaked due to unauthorized access", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 31, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,320,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/432-20261031/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261031de69034", "description": "クラブツーリズム 不正アクセスで約432万件の個人情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--578ee69e-6900-56a5-833f-72180daa9277", "created": "2026-11-10T16:32:08.520Z", "modified": "2026-11-10T16:32:08.520Z", "relationship_type": "related-to", "source_ref": "incident--8e9aad2c-d131-54b1-bb70-6b20db312106", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6930bf9a-1ff8-573e-aeef-2212c782a9a9", "created": "2026-11-10T16:32:08.510Z", "modified": "2026-11-13T00:02:47.460Z", "name": "Foreign ministry says 3,600 sets of personal information may have been leaked", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 31, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/foreign-ministry-says-3600-sets-of-personal-information-may-have-been-20261031/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/31/japan/foreign-ministry-data-leak/", "description": "Foreign ministry says 3,600 sets of personal information may have been leaked" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--41beea79-ac6b-5b81-bc8e-f8707a5531d1", "created": "2026-11-10T16:32:08.510Z", "modified": "2026-11-10T16:32:08.510Z", "relationship_type": "related-to", "source_ref": "incident--6930bf9a-1ff8-573e-aeef-2212c782a9a9", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3c2f8296-afc4-5ae1-b3c5-7c327d98475b", "created": "2026-11-10T16:32:08.524Z", "modified": "2026-11-13T00:02:47.477Z", "name": "NPC probes data breach", "description": "Detected automatically from 2 articles in 2 outlets (GMA Network, PhilStar Global), Oct 31 to Nov 10, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/npc-probes-data-breach-20261031/" }, { "source_name": "PhilStar Global", "url": "https://www.philstar.com/nation/2026/11/01/2566996/npc-probes-data-breach", "description": "NPC probes data breach" }, { "source_name": "GMA Network", "url": "https://www.gmanetwork.com/news/topstories/nation/1008995/npc-confirms-data-breaches-in-doj-dict-8-other-gov-t-agencies/story/", "description": "NPC confirms data breaches in DOJ, DICT, 8 other gov't agencies" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3d6f9d57-de0f-5ad7-ac76-972a723a8b1c", "created": "2026-11-10T16:32:08.524Z", "modified": "2026-11-10T16:32:08.524Z", "relationship_type": "related-to", "source_ref": "incident--3c2f8296-afc4-5ae1-b3c5-7c327d98475b", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fc7fbe34-117f-5a56-9dc8-93808d7a4222", "created": "2026-11-10T16:32:08.515Z", "modified": "2026-11-13T00:02:47.466Z", "name": "Unauthorized access to NTT Data contractor; possibility of corporate bond purchaser information leak", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 31, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ntt-20261031/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261031de68967", "description": "NTTデータ委託先に不正アクセス 社債購入者情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5b04f353-6866-5f00-83f6-4dfb716c0f1c", "created": "2026-11-10T16:32:08.515Z", "modified": "2026-11-10T16:32:08.515Z", "relationship_type": "related-to", "source_ref": "incident--fc7fbe34-117f-5a56-9dc8-93808d7a4222", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--07652e75-0f2f-5b22-a09f-25d40652b3a2", "created": "2026-11-10T16:32:08.505Z", "modified": "2026-11-13T00:02:47.455Z", "name": "HKEAA reports international exam data leak", "description": "Detected automatically from 1 article in 1 outlet (RTHK English News), Oct 31, 2026. Type: data breach. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hkeaa-reports-international-exam-data-leak-20261031/" }, { "source_name": "RTHK English News", "url": "https://news.rthk.hk/rthk/en/component/k2/1876038-20261031.htm", "description": "HKEAA reports international exam data leak" } ], "x_securitystudies_occurred_on": "2026-10-31", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--399c1054-d9e5-5296-ba41-facbe6d9d2c8", "created": "2026-11-10T16:32:08.505Z", "modified": "2026-11-10T16:32:08.505Z", "relationship_type": "related-to", "source_ref": "incident--07652e75-0f2f-5b22-a09f-25d40652b3a2", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1936f227-2555-556b-92d4-7f48f4860626", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-13T00:02:47.432Z", "name": "Binance TH pauses crypto transfers, says Thai funds safe after hack", "description": "Detected automatically from 34 articles in 16 outlets (Channel News Asia, Daily NK, Free Malaysia Today, Hankyoreh, Japan Today, Liberty Times and others), Oct 30 to Nov 12, 2026. Type: cryptocurrency theft; sectors: cryptocurrency, technology. Asia-Pacific countries affected: South Korea, Thailand. Largest figure in the headlines: 200,000,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/binance-th-pauses-crypto-transfers-says-thai-funds-safe-after-hack-20261030/" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/business/binance-th-pauses-crypto-transfers-after-hack", "description": "Binance TH pauses crypto transfers, says Thai funds safe after hack" }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/north-korean-actors-steal-6-36b-from-binance-in-largest-crypto-theft-in-history/", "description": "North Korean actors steal $6.36B from Binance in largest crypto theft in history" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-30/1068375", "description": "金將軍又缺錢？ 幣安2千多億加密貨幣遭駭創歷來之最 北韓遭認是兇手" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5624143", "description": "史上最大駭客攻擊！幣安遭竊逾2000億 美分析指向北韓" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000200315", "description": "N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000251315", "description": "(LEAD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000252315", "description": "(2nd LD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/world/hackers-steal-6.3-billion-from-binance-in-record-heist-blamed-on-north-korea4", "description": "Hackers steal $6.3 billion from Binance in record heist blamed on North Korea" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921226", "description": "N. Korean hackers blamed for record $6.3b Binance cryptocurrency theft: US firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261101000300315", "description": "FBI says N. Korea responsible for over US$6 bln crypto theft from Binance" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/11/01/tech/binance-hack-fbi-north-korea/", "description": "FBI blames North Korea for $6 billion Binance crypto hack" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/world/united-states-canada/article/3372858/fbi-blames-north-korea-stolen-billions-binance-biggest-hack-history", "description": "FBI blames North Korea for stolen billions from Binance in biggest hack in history" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-01/1068564", "description": "幣安逾60億美元資產遭竊　FBI指北韓所為" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921526", "description": "FBI says N. Korea responsible for over $6b crypto theft from Binance" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261101de69102", "description": "暗号資産大手バイナンスへのサイバー攻撃 FBI“北朝鮮が関与”" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921777", "description": "North Korean cyberterrorism gains renewed scrutiny after record Binance heist" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261101000351315", "description": "(LEAD) Trump says U.S. will talk to N. Korea if it is behind Binance hack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/11/01/fbi-says-north-korea-behind-us-6bil-crypto-theft-from-binance", "description": "FBI says North Korea behind US$6bil crypto theft from Binance" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/biz/archives/2026/11/02/2003866975", "description": "N Korea behind US$6bn crypto theft, FBI says" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-02/1068750", "description": "20分鐘盜逾60億美元加密貨幣! 北韓駭客疑感情詐騙滲透幣安工程師 川普這樣說...." }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/fbi-confirms-north-korea-behind-record-6-36b-binance-crypto-heist/", "description": "FBI confirms North Korea behind record $6.36B Binance crypto heist" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/11/02/binance-outflows-north-korea-hack/", "description": "Binance outflows hit $4.7 billion after record North Korea hack" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_northkorea/1285383.html", "description": "FBI identifies North Korean hackers as responsible for unprecedented Binance breach" }, { "source_name": "NK News", "url": "https://www.nknews.org/2026/11/kim-yo-jong-denies-north-korean-involvement-in-6b-binance-crypto-theft/", "description": "Kim Yo Jong denies North Korean involvement in $6B Binance crypto theft" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/east-asia/north-korea-binance-hack-fbi-grave-provocation-6514311", "description": "North Korea slams FBI allegations over Binance hack as 'grave' provocation" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/11/03/asia-pacific/north-korea-binance-us-hacking/", "description": "North Korea calls U.S. claims it was behind Binance hack ‘a grave political provocation’" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/world/2026/11/03/n-korea-slams-fbi-allegations-over-binance-hack-as-grave-provocation", "description": "N. Korea slams FBI allegations over Binance hack as ‘grave’ provocation" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/world/united-states-canada/article/3373050/sister-north-koreas-kim-slams-fbis-binance-hack-allegations-grave-provocation", "description": "Sister of North Korea’s Kim slams FBI’s Binance hack allegations as ‘grave’ provocation" }, { "source_name": "VN Express", "url": "https://vnexpress.net/trieu-tien-dap-tra-cao-buoc-tan-cong-mang-binance-tu-fbi-5139936.html", "description": "Triều Tiên đáp trả cáo buộc 'tấn công mạng Binance' từ FBI" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261103de69881", "description": "世界的な暗号資産取引所へのサイバー攻撃　北朝鮮が関与否定" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 5, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2dc31aa3-0df9-5ff5-8935-df97ac69a0c9", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8d42d050-12da-57fe-addc-71e86dc8ac78", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--55952837-5ab0-5bcc-b705-b0d57744ac9d", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da4486a6-8e50-55a2-ac09-6542436a1c4e", "created": "2026-11-10T16:32:08.501Z", "modified": "2026-11-13T00:02:47.449Z", "name": "Foreign Ministry hit by hacking, along with ANA, Muji brand operator", "description": "Detected automatically from 4 articles in 3 outlets (Japan Today, NHK, New Talk), Oct 30 to Nov 12, 2026. Type: data breach; sectors: government, media. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 1,090,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/foreign-ministry-hit-by-hacking-along-with-ana-muji-brand-operator-20261030/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update3-japan-foreign-ministry-hit-by-hacking-along-with-ana-muji-brand-operator", "description": "Foreign Ministry hit by hacking, along with ANA, Muji brand operator" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-04/1069337", "description": "日本無印良品爆個資外洩 109萬筆信用卡資料恐遭存取" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261112de74562", "description": "無印良品 展開の良品計画 不正アクセスを受けた会見で陳謝" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-12/1070830", "description": "日無印良品爆個資外洩! 逾百萬會員資料流出 社長致歉 : 全額補償損失" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Media" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fc4020b6-2b21-5da5-8bad-468eaa960904", "created": "2026-11-10T16:32:08.501Z", "modified": "2026-11-10T16:32:08.501Z", "relationship_type": "related-to", "source_ref": "incident--da4486a6-8e50-55a2-ac09-6542436a1c4e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a967416f-84ac-5091-9236-eec7739030c4", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-13T00:02:47.442Z", "name": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack", "description": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack", "description": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516", "description": "Malaysia Airlines warns customers of data exposure in Amadeus cybersecurity breach" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus", "description": "46,000 SIA booking records accessed illegally in data breach affecting software provider Amadeus" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151", "description": "About 46,000 SIA booking records accessed in data breach involving travel tech company Amadeus" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/economy/news_5969157", "description": "การบินไทย รับถูกแฮก ข้อมูลรั่ว 6 หมื่นรายการ แต่ไม่กระทบข้อมูลบัตรเครดิต" }, { "source_name": "Bangkok Post", "url": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach", "description": "THAI passenger data compromised in Amadeus security breach" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe", "description": "Thai Airways confirms passenger data leak but credit card details safe" }, { "source_name": "Matichon", "url": "https://www.matichon.co.th/economy/news_5969937", "description": "การบินไทย แจ้ง ไซเบอร์โจมตี ข้อมูล 6 หมื่นรายการรั่วไหล ไชยชนก ถก ‘แอปเปิ้ล’ สกัด" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d8dcd32a-245a-5e4c-b9bc-e5e43b9093eb", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--317010bf-0058-51a9-b822-d6d704efbe31", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a3ed75f2-2699-5840-b35c-27be8a40c0cc", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dc48e5ec-d80c-5cbd-bea5-0fd84c8f8607", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dac9bd3-fa51-5640-8e1c-99147e4a1ad5", "created": "2026-11-10T16:32:08.491Z", "modified": "2026-11-10T16:32:08.491Z", "relationship_type": "related-to", "source_ref": "incident--a967416f-84ac-5091-9236-eec7739030c4", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--11c4e0f1-429d-54d2-9211-5695425d6870", "created": "2026-11-10T16:32:08.467Z", "modified": "2026-11-13T00:02:47.413Z", "name": "Kluang council files report over porn on hacked LED screens", "description": "Detected automatically from 4 articles in 2 outlets (Free Malaysia Today, Malay Mail), Oct 30 to Oct 31, 2026. Type: defacement; sectors: government. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "defacement", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/kluang-council-files-report-over-porn-on-hacked-led-screens-20261030/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/bahasa/tempatan/2026/10/30/skrin-led-di-kluang-digodam-papar-video-lucah", "description": "Skrin LED di Kluang digodam papar video lucah" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/10/30/kluang-council-files-report-over-porn-on-hacked-led-screens", "description": "Kluang council files report over porn on hacked LED screens" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/30/kluang-council-shuts-down-led-screens-after-obscene-video-appears-in-suspected-hack/241279", "description": "Kluang council shuts down LED screens after obscene video appears in suspected hack" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/31/police-probe-hacking-of-kluang-council-led-screens-after-obscene-content-displayed/241350", "description": "Police probe hacking of Kluang council LED screens after obscene content displayed" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2ba1fba7-a52c-5834-b182-76d96b514956", "created": "2026-11-10T16:32:08.467Z", "modified": "2026-11-10T16:32:08.467Z", "relationship_type": "related-to", "source_ref": "incident--11c4e0f1-429d-54d2-9211-5695425d6870", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1f6565c0-fcd5-5391-865f-7393e5c00f07", "created": "2026-11-11T20:35:29.573Z", "modified": "2026-11-12T00:02:26.992Z", "name": "Puma Shen's vehicle campaign system hacked; National Security Bureau mobilizes to investigate CCP election interference", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Oct 29, 2026. Title machine-translated from Chinese. Type: espionage campaign; sectors: government. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/puma-shens-vehicle-campaign-system-hacked-national-security-bureau-mob-20261029/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-29/1068075", "description": "沈伯洋車掃系統遭網駭 國安局動起來是否查中共介選" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--883b513a-9606-589c-a60e-06bc27734a0f", "created": "2026-11-10T16:32:08.400Z", "modified": "2026-11-12T06:04:36.650Z", "name": "Breaking: Apologizing for personal data leak! You Ying-lung reveals 32 IPs had entered: Not necessarily malicious", "description": "Detected automatically from 3 articles in 1 outlet (New Talk), Oct 29, 2026. Title machine-translated from Chinese. Type: data breach; sectors: government. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261028/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-28/1067851", "description": "中選會網站爆千名候選人個資外洩 台灣前進促依法通知、檢討究責" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-29/1068124", "description": "中選會出包洩候選人個資 國民黨點名沈伯洋：何時到立院質詢這題" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-29/1068159", "description": "快訊》為個資外洩道歉！游盈隆曝32個IP曾進入：未必不懷好意" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-29/1068167", "description": "1573人個資外洩！32個IP有無境外介入？中選會坦言：還沒查" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-29/1068194", "description": "游盈隆為個資外洩道歉 台灣前進促全面清查「宏碁資訊」承包項目" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8436f7fe-9ff8-58d1-937b-b8bdc7d53cdf", "created": "2026-11-10T16:32:08.400Z", "modified": "2026-11-10T16:32:08.400Z", "relationship_type": "related-to", "source_ref": "incident--883b513a-9606-589c-a60e-06bc27734a0f", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e888d447-941b-5631-b34e-86281a40d8ca", "created": "2026-11-11T20:35:29.587Z", "modified": "2026-11-12T00:02:27.000Z", "name": "Life Card: Over 330,000 customer email addresses and other data potentially leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 330,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/life-card-over-330000-customer-email-addresses-and-other-data-potentia-20261029/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261029de67594", "description": "ライフカード 顧客のメールアドレスなど33万件余 漏えい可能性" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8cfa4674-6d0c-5f32-86de-09b5ce828e7d", "created": "2026-11-11T20:35:29.587Z", "modified": "2026-11-11T20:35:29.587Z", "relationship_type": "related-to", "source_ref": "incident--e888d447-941b-5631-b34e-86281a40d8ca", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fcee7409-acab-5ba8-80dc-36cdd32cdcec", "created": "2026-11-10T16:32:08.462Z", "modified": "2026-11-12T12:05:11.550Z", "name": "NSB probes hack on Puma Shen", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Oct 29, 2026. Type: intrusion. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/nsb-probes-hack-on-puma-shen-20261029/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/10/30/2003866864", "description": "NSB probes hack on Puma Shen" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6c03f090-34e1-5ac1-a776-1f6f161112d3", "created": "2026-11-10T16:32:08.462Z", "modified": "2026-11-10T16:32:08.462Z", "relationship_type": "related-to", "source_ref": "incident--fcee7409-acab-5ba8-80dc-36cdd32cdcec", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1419d5f6-ca36-59a0-b0c1-9a2e6853f659", "created": "2026-11-10T16:32:08.458Z", "modified": "2026-11-12T12:05:11.543Z", "name": "Asahi Shimbun: Unauthorized access to email distribution company may have leaked over 70,000 items", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 70,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/7-20261029/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261030de68144", "description": "朝日新聞 メール配信会社不正アクセスで7万件余漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--76b531b6-9220-5b57-b76e-966e68831c24", "created": "2026-11-10T16:32:08.458Z", "modified": "2026-11-10T16:32:08.458Z", "relationship_type": "related-to", "source_ref": "incident--1419d5f6-ca36-59a0-b0c1-9a2e6853f659", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1d3d53c2-5120-59b0-9f4c-da41554bdc2a", "created": "2026-11-10T16:32:08.444Z", "modified": "2026-11-12T06:04:36.657Z", "name": "Hundreds of customers' personal information at Bithumb leaked in hacks", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Oct 29, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hundreds-of-customers-personal-information-at-bithumb-leaked-in-hacks-20261029/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261029012000320", "description": "Hundreds of customers' personal information at Bithumb leaked in hacks" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10919604", "description": "Hundreds of customers' personal information at Bithumb leaked in hacks" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e19c79f-fd1f-5c4f-ba87-66f4164efbba", "created": "2026-11-10T16:32:08.444Z", "modified": "2026-11-10T16:32:08.444Z", "relationship_type": "related-to", "source_ref": "incident--1d3d53c2-5120-59b0-9f4c-da41554bdc2a", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b9a7f62c-9600-5e71-b370-f255d6e26170", "created": "2026-11-10T16:32:08.434Z", "modified": "2026-11-12T00:02:27.005Z", "name": "Matsuya Foods detects unauthorized access, suspends website and app", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 29, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hp-20261029/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261029de67623", "description": "松屋フーズ 不正アクセス検知 HPとアプリを停止" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c454c012-3ff9-5fd6-98cc-acb8d9caaa1a", "created": "2026-11-10T16:32:08.434Z", "modified": "2026-11-10T16:32:08.434Z", "relationship_type": "related-to", "source_ref": "incident--b9a7f62c-9600-5e71-b370-f255d6e26170", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6eaedb7e-8c4f-5584-8536-a70622bc04a5", "created": "2026-11-10T16:32:08.424Z", "modified": "2026-11-11T20:40:49.675Z", "name": "Unauthorized access to Japan Airlines reservation system, information of over 90,000 people may have been leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 28, 2026. Title machine-translated from Japanese. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 90,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/9-20261028/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261028de67365", "description": "日本航空 予約システムに不正アクセス 9万人超の情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a514b271-2dfc-5c1f-9dd6-510e10a55127", "created": "2026-11-10T16:32:08.424Z", "modified": "2026-11-10T16:32:08.424Z", "relationship_type": "related-to", "source_ref": "incident--6eaedb7e-8c4f-5584-8536-a70622bc04a5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a68f78aa-d5fa-5a5f-a8e7-521e5f41a6c0", "created": "2026-11-10T16:32:08.407Z", "modified": "2026-11-11T20:40:49.665Z", "name": "Cyberattack wave widens across Korean financial sector", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 28, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattack-wave-widens-across-korean-financial-sector-20261028/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10917639", "description": "Cyberattack wave widens across Korean financial sector" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b4336c73-68ab-58b9-aff1-a55e7890b9df", "created": "2026-11-10T16:32:08.407Z", "modified": "2026-11-10T16:32:08.407Z", "relationship_type": "related-to", "source_ref": "incident--a68f78aa-d5fa-5a5f-a8e7-521e5f41a6c0", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b67d48ad-cdf3-518c-b49d-661bcd4202fb", "created": "2026-11-10T16:32:08.393Z", "modified": "2026-11-11T20:40:49.652Z", "name": "(LEAD) South Korean financial firms confirm data breach of customer data", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 28, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lead-south-korean-financial-firms-confirm-data-breach-of-customer-data-20261028/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261028002751320", "description": "(LEAD) South Korean financial firms confirm data breach of customer data" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b26d2c67-00b1-5985-9df0-fd5921c0f423", "created": "2026-11-10T16:32:08.393Z", "modified": "2026-11-10T16:32:08.393Z", "relationship_type": "related-to", "source_ref": "incident--b67d48ad-cdf3-518c-b49d-661bcd4202fb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7caaa6c2-f765-5f77-8946-36dab00c7c8d", "created": "2026-11-10T16:32:08.420Z", "modified": "2026-11-11T20:40:49.670Z", "name": "CEC responds after 1573 candidates data leakage", "description": "Detected automatically from 2 articles in 2 outlets (New Talk, Taipei Times), Oct 28, 2026. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261028-2/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-28/1067987", "description": "中選會爆候選人個資外洩 陳冠廷：不能把責任全推委外廠商" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/front/archives/2026/10/29/2003866804", "description": "CEC responds after 1573 candidates data leakage" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--31854921-352f-5f9a-8755-02148e76477b", "created": "2026-11-10T16:32:08.420Z", "modified": "2026-11-10T16:32:08.420Z", "relationship_type": "related-to", "source_ref": "incident--7caaa6c2-f765-5f77-8946-36dab00c7c8d", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9ab54f53-548b-590a-b93b-0064a006f43b", "created": "2026-11-10T16:32:08.384Z", "modified": "2026-11-11T20:40:49.647Z", "name": "First-time voter lottery target Yakira hit by cyberattack; Chiang office and KMT councilors show support: Do not create a chilling effect", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Oct 27, 2026. Title machine-translated from Chinese. Type: espionage campaign; sectors: government. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yakira-20261027/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-27/1067745", "description": "代抽首投族Yakira遭網攻　蔣辦、藍議員聲援：別造成寒蟬效應" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3ec711cf-4ce3-54be-a9a2-2f2abd5481c8", "created": "2026-11-10T16:32:08.384Z", "modified": "2026-11-10T16:32:08.384Z", "relationship_type": "related-to", "source_ref": "incident--9ab54f53-548b-590a-b93b-0064a006f43b", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7860c037-4c4a-5d32-a1a7-51d89dcffff5", "created": "2026-11-11T20:39:10.806Z", "modified": "2026-11-11T20:40:49.631Z", "name": "2,000 customers of Hong Kong Airlines, 2 appliance shops, get scam calls after data breach", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 27, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2000-customers-of-hong-kong-airlines-2-appliance-shops-get-scam-calls-20261027/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/hong-kong/law-and-crime/article/3372248/2000-customers-hong-kong-airlines-2-appliance-shops-get-scam-calls-after-data-breach", "description": "2,000 customers of Hong Kong Airlines, 2 appliance shops, get scam calls after data breach" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9ea6ac37-46b6-5fef-a0d0-08adfc9f6621", "created": "2026-11-11T20:39:10.806Z", "modified": "2026-11-11T20:39:10.806Z", "relationship_type": "related-to", "source_ref": "incident--7860c037-4c4a-5d32-a1a7-51d89dcffff5", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cec9f081-da7e-5bf6-bac5-728ab8fa08b4", "created": "2026-11-10T16:32:08.370Z", "modified": "2026-11-11T20:40:49.626Z", "name": "Over 1,600 affected in airline, retailer data breaches", "description": "Detected automatically from 2 articles in 2 outlets (HK Free Press, RTHK English News), Oct 27 to Oct 28, 2026. Type: data breach; sectors: transportation, retail. Asia-Pacific countries affected: Hong Kong. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-1600-affected-in-airline-retailer-data-breaches-20261027/" }, { "source_name": "RTHK English News", "url": "https://news.rthk.hk/rthk/en/component/k2/1875475-20261027.htm", "description": "Over 1,600 affected in airline, retailer data breaches" }, { "source_name": "HK Free Press", "url": "https://hongkongfp.com/2026/10/28/data-breach-at-hong-kong-airlines-yoho-and-broadway-affects-1600-customers/", "description": "Data breach at Hong Kong Airlines, YOHO, and Broadway affects 1,600 customers" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation", "Retail" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ca49ca9a-14e6-55cb-8cb0-2a25cd985dfa", "created": "2026-11-10T16:32:08.370Z", "modified": "2026-11-10T16:32:08.370Z", "relationship_type": "related-to", "source_ref": "incident--cec9f081-da7e-5bf6-bac5-728ab8fa08b4", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--165ee562-bf50-5d12-8dc7-39c3386769b5", "created": "2026-11-10T16:32:08.380Z", "modified": "2026-11-11T20:40:49.641Z", "name": "No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company", "description": "Detected automatically from 1 article in 1 outlet (The Straits Times), Oct 27, 2026. Type: intrusion. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/no-further-compromise-to-alliance-medinets-system-hacker-access-blocke-20261027/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/no-further-compromise-to-alliance-medinets-system-hacker-access-blocked-says-parent-company", "description": "No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f29d23fc-58bf-5f1a-9103-1ed882600045", "created": "2026-11-10T16:32:08.380Z", "modified": "2026-11-10T16:32:08.380Z", "relationship_type": "related-to", "source_ref": "incident--165ee562-bf50-5d12-8dc7-39c3386769b5", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a70aa50a-1738-5065-a9a1-263628d23813", "created": "2026-11-10T16:32:08.375Z", "modified": "2026-11-11T20:40:49.636Z", "name": "Okinawa Tourist announces leak of personal information of up to approximately 730,000 people", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 27, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 730,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/73-20261027/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261027de66245", "description": "沖縄ツーリスト 最大約73万人分の個人情報漏えいと発表" } ], "x_securitystudies_occurred_on": "2026-10-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6926b6bd-eea8-5fc4-96c1-accd21e23c31", "created": "2026-11-10T16:32:08.375Z", "modified": "2026-11-10T16:32:08.375Z", "relationship_type": "related-to", "source_ref": "incident--a70aa50a-1738-5065-a9a1-263628d23813", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--73663dd5-9b72-51bb-9041-a786fc997a68", "created": "2026-11-10T16:32:08.365Z", "modified": "2026-11-11T20:40:49.621Z", "name": "Critical PHP flaw forces Web sites worldwide offline, sparks cyberattack fears PHP爆重大資安漏洞　全球網站緊急下線防駭客攻擊", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Oct 26, 2026. Type: exploitation. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/critical-php-flaw-forces-web-sites-worldwide-offline-sparks-cyberattac-20261026/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/lang/archives/2026/10/27/2003866655", "description": "Critical PHP flaw forces Web sites worldwide offline, sparks cyberattack fears PHP爆重大資安漏洞　全球網站緊急下線防駭客攻擊" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4128f210-3565-57e1-97a6-8311d2d2a002", "created": "2026-11-10T16:32:08.365Z", "modified": "2026-11-10T16:32:08.365Z", "relationship_type": "related-to", "source_ref": "incident--73663dd5-9b72-51bb-9041-a786fc997a68", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--66ec61b2-f799-5529-afed-903797854930", "created": "2026-11-10T16:32:08.355Z", "modified": "2026-11-11T20:40:49.610Z", "name": "Unauthorized access to electronic gift company; 550 million yen worth issued fraudulently", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 26, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 550,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/55000-20261026/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de66013", "description": "電子ギフト会社に不正アクセス 5億5000万円分が不正発行" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e0ccd0e2-c7ea-52f9-a26f-3236d5181f24", "created": "2026-11-10T16:32:08.355Z", "modified": "2026-11-10T16:32:08.355Z", "relationship_type": "related-to", "source_ref": "incident--66ec61b2-f799-5529-afed-903797854930", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--59ebb471-b4d4-58cb-b59c-f41ac1ee87f6", "created": "2026-11-10T16:32:08.349Z", "modified": "2026-11-11T20:40:49.605Z", "name": "Email distribution company 'Yumirlink' confirms data leak of 51 million records", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 26, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 51,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/5100-20261026/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de65955", "description": "メール配信会社「ユミルリンク」のべ5100万件の情報漏えい確認" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7b45e231-ac56-5613-92c3-656b5bef4792", "created": "2026-11-10T16:32:08.349Z", "modified": "2026-11-10T16:32:08.349Z", "relationship_type": "related-to", "source_ref": "incident--59ebb471-b4d4-58cb-b59c-f41ac1ee87f6", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4231ab55-afda-5056-8c62-4cdbc68dc149", "created": "2026-11-10T16:32:08.345Z", "modified": "2026-11-11T20:40:49.600Z", "name": "KB Kookmin Bank finds 2,091 more people affected by data leak", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Oct 26, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/kb-kookmin-bank-finds-2091-more-people-affected-by-data-leak-20261026/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261026010200315", "description": "KB Kookmin Bank finds 2,091 more people affected by data leak" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10915394", "description": "KB Kookmin Bank finds 2,091 more people affected by data leak" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--76b68e3c-f5cc-5924-bc4c-a0b2dbbf84dd", "created": "2026-11-10T16:32:08.345Z", "modified": "2026-11-10T16:32:08.345Z", "relationship_type": "related-to", "source_ref": "incident--4231ab55-afda-5056-8c62-4cdbc68dc149", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--52d70ddd-bbea-5586-8bd5-27cab8296f37", "created": "2026-11-10T16:32:08.340Z", "modified": "2026-11-11T20:40:49.595Z", "name": "Government holds urgent cybersecurity meeting in response to recent data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 26, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/government-holds-urgent-cybersecurity-meeting-in-response-to-recent-da-20261026/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/26/japan/japan-government-cybersecurity/", "description": "Government holds urgent cybersecurity meeting in response to recent data breaches" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9d1a9b8b-c265-5a09-9fb0-452ecf519afa", "created": "2026-11-10T16:32:08.340Z", "modified": "2026-11-10T16:32:08.340Z", "relationship_type": "related-to", "source_ref": "incident--52d70ddd-bbea-5586-8bd5-27cab8296f37", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--251710a8-cc76-570b-8480-1ee0da4704db", "created": "2026-11-10T16:32:08.359Z", "modified": "2026-11-11T20:40:49.615Z", "name": "Rakuten Travel suffers unauthorized access, leaking names and partial credit card numbers", "description": "Detected automatically from 2 articles in 2 outlets (Liberty Times, NHK), Oct 26 to Oct 27, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261026-2/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de66040", "description": "楽天トラベル 不正アクセスで氏名やクレカ番号の一部など流出" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/society/breakingnews/5620678", "description": "日樂天旅遊爆大規模個資外洩 業者回應了" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--64c0253d-56d6-5c3e-8f8e-af8760980e5a", "created": "2026-11-10T16:32:08.359Z", "modified": "2026-11-10T16:32:08.359Z", "relationship_type": "related-to", "source_ref": "incident--251710a8-cc76-570b-8480-1ee0da4704db", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bd8f0c80-f7a9-50b7-b14d-80e3d02bffdf", "created": "2026-11-10T16:32:08.331Z", "modified": "2026-11-11T20:40:49.590Z", "name": "Japanese companies offer compensation as cyberattacks hit economy", "description": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Oct 26, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japanese-companies-offer-compensation-as-cyberattacks-hit-economy-20261026/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/10/26/japanese-companies-offer-compensation-as-cyberattacks-hit-economy", "description": "Japanese companies offer compensation as cyberattacks hit economy" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b3014e33-2ec4-5919-959b-8be9bf8422ca", "created": "2026-11-10T16:32:08.331Z", "modified": "2026-11-10T16:32:08.331Z", "relationship_type": "related-to", "source_ref": "incident--bd8f0c80-f7a9-50b7-b14d-80e3d02bffdf", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--644befdd-5b3c-5b4f-ae85-c29a0e8a8661", "created": "2026-11-10T16:32:08.326Z", "modified": "2026-11-11T20:40:49.585Z", "name": "Japan companies to compensate customers after major cyberattacks", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 26, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japan-companies-to-compensate-customers-after-major-cyberattacks-20261026/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/asia/east-asia/article/3372105/japan-companies-compensate-customers-after-major-cyberattacks", "description": "Japan companies to compensate customers after major cyberattacks" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--36abeda4-db08-5b02-9f17-5a51d5e9fbf8", "created": "2026-11-10T16:32:08.326Z", "modified": "2026-11-10T16:32:08.326Z", "relationship_type": "related-to", "source_ref": "incident--644befdd-5b3c-5b4f-ae85-c29a0e8a8661", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--49681c3d-bfc2-5e03-af18-5b9eb800449b", "created": "2026-11-10T16:32:08.321Z", "modified": "2026-11-11T20:40:49.580Z", "name": "Singapore embraces AI for cyber defence, with one caveat: breach transparency", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Oct 25, 2026. Type: data breach; sectors: defence. Asia-Pacific countries affected: Singapore, Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/singapore-embraces-ai-for-cyber-defence-with-one-caveat-breach-transpa-20261025/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/week-asia/politics/article/3371950/singapore-embraces-ai-cyber-defence-one-caveat-breach-transparency", "description": "Singapore embraces AI for cyber defence, with one caveat: breach transparency" } ], "x_securitystudies_occurred_on": "2026-10-25", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Defence" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ee3011bf-d9b0-5b2a-b2ad-c466f24616ce", "created": "2026-11-10T16:32:08.321Z", "modified": "2026-11-10T16:32:08.321Z", "relationship_type": "related-to", "source_ref": "incident--49681c3d-bfc2-5e03-af18-5b9eb800449b", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--309ecb5c-048e-5b43-90fa-f2c88e2b6d92", "created": "2026-11-10T16:32:08.321Z", "modified": "2026-11-10T16:32:08.321Z", "relationship_type": "related-to", "source_ref": "incident--49681c3d-bfc2-5e03-af18-5b9eb800449b", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6d097008-fb4e-529b-a797-43c5ddb5a93f", "created": "2026-11-10T16:32:08.312Z", "modified": "2026-11-11T20:40:49.569Z", "name": "Park24 to pay ¥3,000 to Times Car users hit by data breach", "description": "Detected automatically from 3 articles in 2 outlets (NHK, The Japan Times), Oct 24 to Oct 28, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,500,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/park24-to-pay-3000-to-times-car-users-hit-by-data-breach-20261024/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/24/park24-3000-yen-compensation/", "description": "Park24 to pay ¥3,000 to Times Car users hit by data breach" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261026de65793", "description": "「タイムズカー」個人情報漏えい問題 被害者が集団提訴へ" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/28/companies/data-breach-business-risk/", "description": "Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout" } ], "x_securitystudies_occurred_on": "2026-10-24", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ebf45b5d-0e77-5f78-85f6-82143b45e363", "created": "2026-11-10T16:32:08.312Z", "modified": "2026-11-10T16:32:08.312Z", "relationship_type": "related-to", "source_ref": "incident--6d097008-fb4e-529b-a797-43c5ddb5a93f", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2a9529b7-7fe0-536b-86b9-2f2b1423e747", "created": "2026-11-10T16:32:08.316Z", "modified": "2026-11-11T20:40:49.575Z", "name": "Personal data of 110,000 members compromised in Alliance Medinet cyber incident", "description": "Detected automatically from 2 articles in 1 outlet (Channel News Asia), Oct 24 to Oct 27, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-data-of-110000-members-compromised-in-alliance-medinet-cyber-20261024/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/cyber-incident-alliance-medinet-6489076", "description": "Personal data of 110,000 members compromised in Alliance Medinet cyber incident" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/alliance-medinet-alliance-healthcare-group-unauthorised-access-route-secured-data-breach-6496186", "description": "Alliance Medinet says access path used in data breach has been secured" } ], "x_securitystudies_occurred_on": "2026-10-24", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--094b1f1c-3569-538f-8287-a920351807be", "created": "2026-11-10T16:32:08.316Z", "modified": "2026-11-10T16:32:08.316Z", "relationship_type": "related-to", "source_ref": "incident--2a9529b7-7fe0-536b-86b9-2f2b1423e747", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a83641bb-0fea-5053-9da1-b6b7aa67b54e", "created": "2026-11-10T16:32:08.302Z", "modified": "2026-11-11T20:40:49.558Z", "name": "Digital Agency reports data breach via website vendor", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 23, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/digital-agency-reports-data-breach-via-website-vendor-20261023/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/23/japan/digital-agency-breach/", "description": "Digital Agency reports data breach via website vendor" } ], "x_securitystudies_occurred_on": "2026-10-23", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a4d418aa-8f45-5b46-a1f8-bbae6d6996a3", "created": "2026-11-10T16:32:08.302Z", "modified": "2026-11-10T16:32:08.302Z", "relationship_type": "related-to", "source_ref": "incident--a83641bb-0fea-5053-9da1-b6b7aa67b54e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--08d1c4da-72af-5a5d-89cf-735b98a8a832", "created": "2026-11-10T16:32:08.307Z", "modified": "2026-11-11T20:40:49.563Z", "name": "[3rd Report] To our business partners and retirees, a request for caution regarding unauthorized access and potential information leakage from our group management server", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 23, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/3-20261023/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/23/notice-ransomware-incident-3rd-report-jp/", "description": "【第3報】お取引先および退職者の皆さまへ、当社グループ管理サーバーへの不正アクセスおよび情報漏えいの可能性について注意喚起のお願い" } ], "x_securitystudies_occurred_on": "2026-10-23", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--46d95e1f-a490-5c0c-9b6e-40d6e6a41d84", "created": "2026-11-10T16:32:08.307Z", "modified": "2026-11-10T16:32:08.307Z", "relationship_type": "related-to", "source_ref": "incident--08d1c4da-72af-5a5d-89cf-735b98a8a832", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7d9063f7-2a37-57af-8441-a3a75f96bb72", "created": "2026-11-11T20:39:10.712Z", "modified": "2026-11-11T20:40:49.547Z", "name": "Japanese cybersecurity breach spreads: Capcom reports nearly 12 million accounts leaked globally", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 22, 2026. Title machine-translated from Chinese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 12,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japanese-cybersecurity-breach-spreads-capcom-reports-nearly-12-million-20261022/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/world/breakingnews/5615353", "description": "日本資安漏洞延燒 卡普空全球近1200萬筆帳號遭外洩" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--89a7bd07-60ff-5c4b-9fda-7628c2f54668", "created": "2026-11-11T20:39:10.712Z", "modified": "2026-11-11T20:39:10.712Z", "relationship_type": "related-to", "source_ref": "incident--7d9063f7-2a37-57af-8441-a3a75f96bb72", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--31484b1f-8644-5aed-b95f-4f1fa95565a4", "created": "2026-11-10T16:32:08.297Z", "modified": "2026-11-11T20:40:49.553Z", "name": "Data leak in Vietnam exposes 9 years of Korean airline passenger records", "description": "Detected automatically from 1 article in 1 outlet (Hankyoreh), Oct 22, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Vietnam. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-leak-in-vietnam-exposes-9-years-of-korean-airline-passenger-recor-20261022/" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_international/1283684.html", "description": "Data leak in Vietnam exposes 9 years of Korean airline passenger records" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Vietnam", "country": "VN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5885d022-c163-50ff-a01a-6d2bb1d1eae6", "created": "2026-11-10T16:32:08.297Z", "modified": "2026-11-10T16:32:08.297Z", "relationship_type": "related-to", "source_ref": "incident--31484b1f-8644-5aed-b95f-4f1fa95565a4", "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a91a3c0d-3726-56c2-ba46-715ef719e627", "created": "2026-11-10T16:32:08.292Z", "modified": "2026-11-11T20:40:49.540Z", "name": "Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 22, 2026. Type: exploitation. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/singapore-organisations-urged-to-patch-critical-php-flaws-immediately-20261022/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/php-vulnerabilities-csa-singapore-firms-cybersecurity-6482006", "description": "Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5ca11492-962f-581b-a859-f9e28b7e1254", "created": "2026-11-10T16:32:08.292Z", "modified": "2026-11-10T16:32:08.292Z", "relationship_type": "related-to", "source_ref": "incident--a91a3c0d-3726-56c2-ba46-715ef719e627", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4cfa43b2-b171-566c-a38b-542274c72b44", "created": "2026-11-11T20:39:10.702Z", "modified": "2026-11-11T20:40:49.533Z", "name": "Driver's license images and other data leaked and sold on the dark web? From an Okinawa company", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 22, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/drivers-license-images-and-other-data-leaked-and-sold-on-the-dark-web-20261022/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261022de63353", "description": "免許証画像など漏えいし闇サイトで販売か 沖縄の会社から" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--887c2f99-5c24-5984-9f41-b302b434673d", "created": "2026-11-11T20:39:10.702Z", "modified": "2026-11-11T20:39:10.702Z", "relationship_type": "related-to", "source_ref": "incident--4cfa43b2-b171-566c-a38b-542274c72b44", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3117d446-07fc-5cac-b4a4-9d4df3f2dced", "created": "2026-11-10T16:32:08.287Z", "modified": "2026-11-11T20:40:49.526Z", "name": "Yonsei Univ. portal hack leaks data of 10,000 students, graduates", "description": "Detected automatically from 2 articles in 2 outlets (Korea Times, Yonhap), Oct 22, 2026. Type: data breach; sectors: education. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yonsei-univ-portal-hack-leaks-data-of-10000-students-graduates-20261022/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261022003300315", "description": "Yonsei Univ. portal hack leaks data of 10,000 students, graduates" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/education/20261022/yonsei-university-portal-hack-leaks-data-of-10000-students-graduates?utm_source=rss", "description": "Yonsei University portal hack leaks data of 10,000 students, graduates" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cf57080e-ea93-536f-8908-4c3ecea74e3d", "created": "2026-11-10T16:32:08.287Z", "modified": "2026-11-10T16:32:08.287Z", "relationship_type": "related-to", "source_ref": "incident--3117d446-07fc-5cac-b4a4-9d4df3f2dced", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--78ef27eb-60bc-5670-94c2-70937008dde2", "created": "2026-11-10T16:32:08.267Z", "modified": "2026-11-11T20:40:49.496Z", "name": "Unauthorized access: 'Possibility that the stage has shifted to targeting financial institutions'", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 21, 2026. Title machine-translated from Japanese. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261021/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261021de62921", "description": "不正アクセス“金融機関が狙われる段階に変わってきた可能性”" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--15167757-32a5-5dae-ac45-cb8bfc38855a", "created": "2026-11-10T16:32:08.267Z", "modified": "2026-11-10T16:32:08.267Z", "relationship_type": "related-to", "source_ref": "incident--78ef27eb-60bc-5670-94c2-70937008dde2", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8ce7a0ed-77cf-5bf8-9733-3836a13d2848", "created": "2026-11-10T16:32:08.282Z", "modified": "2026-11-11T20:40:49.518Z", "name": "More data breaches reported by prefectural police forces, companies", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 21, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-data-breaches-reported-by-prefectural-police-forces-companies-20261021/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/national/update2-more-data-breaches-reported-by-japan-prefectural-police-forces-companies", "description": "More data breaches reported by prefectural police forces, companies" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--87652fed-56d7-5f82-bebd-1e45b7fb0b6f", "created": "2026-11-10T16:32:08.282Z", "modified": "2026-11-10T16:32:08.282Z", "relationship_type": "related-to", "source_ref": "incident--8ce7a0ed-77cf-5bf8-9733-3836a13d2848", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--43da04f8-915c-5441-95a5-f98215144bfb", "created": "2026-11-10T16:32:08.278Z", "modified": "2026-11-11T20:40:49.511Z", "name": "Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 21, 2026. Type: espionage campaign. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/chinese-linked-hackers-compromise-connectwise-target-hundreds-in-globa-20261021/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/chinese-linked-hackers-compromise-connectwise-target-hundreds-in-global-attack-microsoft-says-6480406", "description": "Chinese-linked hackers compromise ConnectWise, target hundreds in global attack, Microsoft says" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c9349066-9a54-5b91-bd46-a5c1b44b1934", "created": "2026-11-10T16:32:08.273Z", "modified": "2026-11-11T20:40:49.504Z", "name": "AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise", "description": "Detected automatically from 1 article in 1 outlet (Microsoft Threat Intelligence), Oct 21, 2026. Type: espionage campaign. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-driven-large-scale-nation-state-campaign-using-artex-enables-supply-20261021/" }, { "source_name": "Microsoft Threat Intelligence", "url": "https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/", "description": "AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--43517ba8-805e-5e4e-8bbb-ed2d85d3d515", "created": "2026-11-10T16:32:08.273Z", "modified": "2026-11-10T16:32:08.273Z", "relationship_type": "related-to", "source_ref": "incident--c9349066-9a54-5b91-bd46-a5c1b44b1934", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a79fcf4b-f426-5493-add9-64df31b69d4c", "created": "2026-11-10T16:32:08.273Z", "modified": "2026-11-10T16:32:08.273Z", "relationship_type": "related-to", "source_ref": "incident--c9349066-9a54-5b91-bd46-a5c1b44b1934", "target_ref": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--940a37e1-eca3-5d76-b023-76ee56251b35", "created": "2026-11-10T16:32:08.261Z", "modified": "2026-11-11T20:40:49.488Z", "name": "Data breach potentially exposes information of 125,000 police officers and staff", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 21, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-breach-potentially-exposes-information-of-125000-police-officers-20261021/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/21/japan/crime-legal/arcadia-police-data-leak/", "description": "Data breach potentially exposes information of 125,000 police officers and staff" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4d7fd5c3-1a1e-54ad-8bf3-8708a1f438cd", "created": "2026-11-10T16:32:08.261Z", "modified": "2026-11-10T16:32:08.261Z", "relationship_type": "related-to", "source_ref": "incident--940a37e1-eca3-5d76-b023-76ee56251b35", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f930550a-e9fd-5a9b-b713-a6aecbb01a92", "created": "2026-11-10T16:32:08.256Z", "modified": "2026-11-11T20:40:49.481Z", "name": "State Bank of India reports cyberattack involving nearly 3,900 customer records", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 21, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/state-bank-of-india-reports-cyberattack-involving-nearly-3900-customer-20261021/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/state-bank-india-reports-cyberattack-involving-nearly-3900-customer-records-6477746", "description": "State Bank of India reports cyberattack involving nearly 3,900 customer records" } ], "x_securitystudies_occurred_on": "2026-10-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c7d39e72-caa5-5141-9775-c82f2bf404ca", "created": "2026-11-10T16:32:08.256Z", "modified": "2026-11-10T16:32:08.256Z", "relationship_type": "related-to", "source_ref": "incident--f930550a-e9fd-5a9b-b713-a6aecbb01a92", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--42e55ebb-9292-51de-b487-f57e7f8325d6", "created": "2026-11-10T16:32:08.251Z", "modified": "2026-11-11T20:40:49.474Z", "name": "China ramps up cyberattacks for potential election meddling: officials", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Oct 20, 2026. Type: other; sectors: government. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/china-ramps-up-cyberattacks-for-potential-election-meddling-officials-20261020/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/front/archives/2026/10/21/2003866334", "description": "China ramps up cyberattacks for potential election meddling: officials" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--48031cdd-2fc3-5f0f-ad85-d33c13c24202", "created": "2026-11-10T16:32:08.242Z", "modified": "2026-11-11T20:40:49.466Z", "name": "Risk of information leakage for over 23,000 cases in national energy-saving housing project", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 20, 2026. Title machine-translated from Japanese. Type: data breach; sectors: energy. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 20,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/23000-20261020/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261020de62509", "description": "国の省エネ住宅事業で2万3000件超の情報漏えいのおそれ" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Energy" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ab48c590-863e-536a-8519-5adc90e5f3d4", "created": "2026-11-10T16:32:08.242Z", "modified": "2026-11-10T16:32:08.242Z", "relationship_type": "related-to", "source_ref": "incident--48031cdd-2fc3-5f0f-ad85-d33c13c24202", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7bb5056c-f227-5e7b-9e57-3781ff6c905b", "created": "2026-11-10T16:32:08.237Z", "modified": "2026-11-11T20:40:49.459Z", "name": "Furusato Choice announces leakage of 4.45 million pieces of personal information", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 20, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,450,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/445-20261020/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261020de62437", "description": "ふるさとチョイス 445万件の個人情報流出を発表" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7b02e7e7-7ade-5002-9e71-f61aaa0fb20d", "created": "2026-11-10T16:32:08.237Z", "modified": "2026-11-10T16:32:08.237Z", "relationship_type": "related-to", "source_ref": "incident--7bb5056c-f227-5e7b-9e57-3781ff6c905b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cd009b42-089c-5728-a2b9-6548e1296aa0", "created": "2026-11-10T16:32:08.232Z", "modified": "2026-11-11T20:40:49.450Z", "name": "Chinese AI tool used in cyberattacks on Japanese companies, investigation finds", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 20, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-used-in-cyberattacks-on-japanese-companies-investigati-20261020/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/20/japan/china-ai-cyberattacks/", "description": "Chinese AI tool used in cyberattacks on Japanese companies, investigation finds" } ], "x_securitystudies_occurred_on": "2026-10-20", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dddaae99-3d39-5e0b-b4e4-9f1ea94b42fb", "created": "2026-11-10T16:32:08.232Z", "modified": "2026-11-10T16:32:08.232Z", "relationship_type": "related-to", "source_ref": "incident--cd009b42-089c-5728-a2b9-6548e1296aa0", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8d643df4-4a20-5724-8407-3df507b05528", "created": "2026-11-10T16:32:08.208Z", "modified": "2026-11-11T20:40:49.416Z", "name": "2.76 mln pieces of customers' info at Hollys leaked in cyberattack", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Largest figure in the headlines: 2,760,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/276-mln-pieces-of-customers-info-at-hollys-leaked-in-cyberattack-20261019/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261019008600320", "description": "2.76 mln pieces of customers' info at Hollys leaked in cyberattack" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bd2b7969-b30b-52cf-a6b4-eb2628c7d6e3", "created": "2026-11-10T16:32:08.208Z", "modified": "2026-11-10T16:32:08.208Z", "relationship_type": "related-to", "source_ref": "incident--8d643df4-4a20-5724-8407-3df507b05528", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ac3e75a2-e9fe-5678-a16b-0209d714d2a3", "created": "2026-11-10T16:32:08.217Z", "modified": "2026-11-11T20:40:49.431Z", "name": "Unauthorized access: Information security company confirms use of Chinese-affiliated AI", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 19, 2026. Title machine-translated from Japanese. Type: intrusion. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-20261019/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261020de61888", "description": "不正アクセス 「中国系AIの使用確認」 情報セキュリティー会社" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--5eeafb22-6944-5ec7-ab31-490975414bc5", "created": "2026-11-10T16:32:08.212Z", "modified": "2026-11-11T20:40:49.424Z", "name": "Over 16% of Japanese companies experience data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-16-of-japanese-companies-experience-data-breaches-20261019/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/19/16pct-japan-firms-data-breaches/", "description": "Over 16% of Japanese companies experience data breaches" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--49a788bc-8fd7-5043-bc73-42f740f0a154", "created": "2026-11-10T16:32:08.212Z", "modified": "2026-11-10T16:32:08.212Z", "relationship_type": "related-to", "source_ref": "incident--5eeafb22-6944-5ec7-ab31-490975414bc5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--39a545b7-cdf8-58b1-bd4d-bb1335c83983", "created": "2026-11-10T16:32:08.203Z", "modified": "2026-11-11T20:40:49.409Z", "name": "AI makes cyberattacks cheaper, harder to ignore: Cloudflare executive", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 19, 2026. Type: other; sectors: technology. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-makes-cyberattacks-cheaper-harder-to-ignore-cloudflare-executive-20261019/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10907396", "description": "AI makes cyberattacks cheaper, harder to ignore: Cloudflare executive" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a7ec611e-106a-5fcd-bc63-a7d589c31af3", "created": "2026-11-10T16:32:08.203Z", "modified": "2026-11-10T16:32:08.203Z", "relationship_type": "related-to", "source_ref": "incident--39a545b7-cdf8-58b1-bd4d-bb1335c83983", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d588ddcb-259b-5cef-9c11-36404b8041bf", "created": "2026-11-10T16:32:08.194Z", "modified": "2026-11-11T20:40:49.402Z", "name": "JETRO, more Japanese firms report breaches to network systems", "description": "Detected automatically from 2 articles in 2 outlets (Japan Today, NHK), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/jetro-more-japanese-firms-report-breaches-to-network-systems-20261019/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261019de61442", "description": "JETROのホームページが不正アクセスで一時的に公開停止" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update3-japan-trade-agency-japanese-firms-face-unauthorized-access", "description": "JETRO, more Japanese firms report breaches to network systems" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--862f81c1-b29e-5c7a-9115-a25492a3f217", "created": "2026-11-10T16:32:08.194Z", "modified": "2026-11-10T16:32:08.194Z", "relationship_type": "related-to", "source_ref": "incident--d588ddcb-259b-5cef-9c11-36404b8041bf", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--96ac254c-4bea-5df2-a746-5f42e95e5e1d", "created": "2026-11-10T16:32:08.185Z", "modified": "2026-11-11T20:40:49.389Z", "name": "Top bank chiefs face grilling over cyberattacks", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 18, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/top-bank-chiefs-face-grilling-over-cyberattacks-20261018/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10906198", "description": "Top bank chiefs face grilling over cyberattacks" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b03b86b1-17c6-5d21-93db-0ba5bb4b1756", "created": "2026-11-10T16:32:08.185Z", "modified": "2026-11-10T16:32:08.185Z", "relationship_type": "related-to", "source_ref": "incident--96ac254c-4bea-5df2-a746-5f42e95e5e1d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0f63923b-3a81-5567-a0b6-f9f37de1e592", "created": "2026-11-10T16:32:08.190Z", "modified": "2026-11-11T20:40:49.395Z", "name": "Japan Football Association investigating unauthorized access to official app", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 18, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: technology. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261018/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261019de61320", "description": "日本サッカー協会 公式アプリに不正アクセス“影響調査中”" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fb41399f-159d-596e-ba65-13e1f9eeb9fe", "created": "2026-11-10T16:32:08.190Z", "modified": "2026-11-10T16:32:08.190Z", "relationship_type": "related-to", "source_ref": "incident--0f63923b-3a81-5567-a0b6-f9f37de1e592", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--31fe7336-d159-58b8-a813-5c9eafeef8b4", "created": "2026-11-10T16:32:08.180Z", "modified": "2026-11-11T20:40:49.384Z", "name": "Karaoke hack shows cybercrime is routine", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 18, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/karaoke-hack-shows-cybercrime-is-routine-20261018/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/commentary/2026/10/18/japan/karaoke-hack-cybercrime/", "description": "Karaoke hack shows cybercrime is routine" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ad05a77f-fa21-50ab-9f59-c419c0b2cb8c", "created": "2026-11-10T16:32:08.180Z", "modified": "2026-11-10T16:32:08.180Z", "relationship_type": "related-to", "source_ref": "incident--31fe7336-d159-58b8-a813-5c9eafeef8b4", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f3ce5f35-37d4-582a-9083-10bc1fa168b1", "created": "2026-11-10T16:32:08.176Z", "modified": "2026-11-11T20:40:49.378Z", "name": "Elderly man held over hacking of drinking buddy in Batac City", "description": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Oct 17, 2026. Type: intrusion. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/elderly-man-held-over-hacking-of-drinking-buddy-in-batac-city-20261017/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2325428/elderly-man-held-over-hacking-of-drinking-buddy-in-batac-city", "description": "Elderly man held over hacking of drinking buddy in Batac City" } ], "x_securitystudies_occurred_on": "2026-10-17", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4adba7d0-aa78-537d-a774-848a57f950c6", "created": "2026-11-10T16:32:08.176Z", "modified": "2026-11-10T16:32:08.176Z", "relationship_type": "related-to", "source_ref": "incident--f3ce5f35-37d4-582a-9083-10bc1fa168b1", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--da575374-c906-530a-a376-7ea878a04825", "created": "2026-11-10T16:32:08.171Z", "modified": "2026-11-11T20:40:49.372Z", "name": "Cyberattacks continue to menace Japan as more firms disclose data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 17, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattacks-continue-to-menace-japan-as-more-firms-disclose-data-brea-20261017/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/17/japan/crime-legal/more-data-breaches-japan/", "description": "Cyberattacks continue to menace Japan as more firms disclose data breaches" } ], "x_securitystudies_occurred_on": "2026-10-17", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ad7401f2-563f-5005-8bea-28c2e71a3c46", "created": "2026-11-10T16:32:08.171Z", "modified": "2026-11-10T16:32:08.171Z", "relationship_type": "related-to", "source_ref": "incident--da575374-c906-530a-a376-7ea878a04825", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--770aa1eb-30f0-53d5-934d-f22af8129c4e", "created": "2026-11-10T16:32:08.166Z", "modified": "2026-11-11T20:40:49.354Z", "name": "Yamato Transport confirms 5.31 mil customer records leaked", "description": "Detected automatically from 2 articles in 2 outlets (Japan Today, NHK), Oct 16, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 5,300,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yamato-transport-confirms-531-mil-customer-records-leaked-20261016/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261016de60395", "description": "ヤマト運輸 個人情報530万件あまりが外部流出" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/business/update1-japan%27s-yamato-transport-confirms-5.31-mil.-customer-records-leaked", "description": "Yamato Transport confirms 5.31 mil customer records leaked" } ], "x_securitystudies_occurred_on": "2026-10-16", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4a526097-2521-56f6-8f52-0698befdf9c1", "created": "2026-11-10T16:32:08.166Z", "modified": "2026-11-10T16:32:08.166Z", "relationship_type": "related-to", "source_ref": "incident--770aa1eb-30f0-53d5-934d-f22af8129c4e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--884eb3ed-fe9c-5f65-b3e3-188f34dbda62", "created": "2026-11-10T16:32:08.162Z", "modified": "2026-11-11T20:40:49.366Z", "name": "[Update 2] Report on Unauthorized Access to Group Managed Server and Potential Data Leak", "description": "Detected automatically from 2 articles in 1 outlet (The Japan Times), Oct 16 to Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2-20261016/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/16/notice-ransomware-incident-second-report-jp/", "description": "【第2報】当社グループ管理サーバーへの不正アクセスおよび情報漏えいの可能性に関するご報告" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/19/notice-ransomware-incident-second-report/", "description": "[Update 2] Report on Unauthorized Access to Group Managed Server and Potential Data Leak" } ], "x_securitystudies_occurred_on": "2026-10-16", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f1e5a5af-8f9d-5b2f-8b9b-65a62ddd8c60", "created": "2026-11-10T16:32:08.162Z", "modified": "2026-11-10T16:32:08.162Z", "relationship_type": "related-to", "source_ref": "incident--884eb3ed-fe9c-5f65-b3e3-188f34dbda62", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3df005c2-639b-5e51-ac5d-db71805fa2c6", "created": "2026-11-10T16:32:08.157Z", "modified": "2026-11-11T20:40:49.360Z", "name": "Comic Seymour confirms unauthorized access; member information leaked", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 16, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261016/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261016de60740", "description": "コミックシーモアが不正アクセス確認 会員情報が漏えい" } ], "x_securitystudies_occurred_on": "2026-10-16", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8226fd53-0ea4-5f2c-906b-ad69a874250e", "created": "2026-11-10T16:32:08.157Z", "modified": "2026-11-10T16:32:08.157Z", "relationship_type": "related-to", "source_ref": "incident--3df005c2-639b-5e51-ac5d-db71805fa2c6", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fddc4a05-71b8-5e8d-bc3e-3b5324194c3b", "created": "2026-11-10T16:32:08.148Z", "modified": "2026-11-11T20:40:49.348Z", "name": "ARMORY CASTLE Exploits BeyondTrust", "description": "Detected automatically from 1 article in 1 outlet (Google Threat Intelligence), Oct 15, 2026. Type: exploitation. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/armory-castle-exploits-beyondtrust-20261015/" }, { "source_name": "Google Threat Intelligence", "url": "https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/", "description": "ARMORY CASTLE Exploits BeyondTrust" } ], "x_securitystudies_occurred_on": "2026-10-15", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--464ba24d-7ee9-5826-b099-2db35c9782bb", "created": "2026-11-10T16:32:08.148Z", "modified": "2026-11-10T16:32:08.148Z", "relationship_type": "related-to", "source_ref": "incident--fddc4a05-71b8-5e8d-bc3e-3b5324194c3b", "target_ref": "intrusion-set--7872b8fa-bf74-5285-b4a4-225f6a17a083", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--6b872d82-b152-568a-b9fb-3e0c6d0a225d", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-102764", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-102764" } ], "description": "BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f4d2620e-e2fa-5f49-92b8-5d0daf502231", "created": "2026-11-10T16:32:08.148Z", "modified": "2026-11-10T16:32:08.148Z", "relationship_type": "related-to", "source_ref": "incident--fddc4a05-71b8-5e8d-bc3e-3b5324194c3b", "target_ref": "vulnerability--6b872d82-b152-568a-b9fb-3e0c6d0a225d", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--e605301f-5b42-5124-823d-7f87abe644c0", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2023-46805", "external_references": [ { "source_name": "cve", "external_id": "CVE-2023-46805" } ], "description": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2d3ba56d-2205-5059-a316-558be65e76e4", "created": "2026-11-10T16:32:08.148Z", "modified": "2026-11-10T16:32:08.148Z", "relationship_type": "related-to", "source_ref": "incident--fddc4a05-71b8-5e8d-bc3e-3b5324194c3b", "target_ref": "vulnerability--e605301f-5b42-5124-823d-7f87abe644c0", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--eacf01b0-6294-574d-aded-655c2c972960", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2024-21887", "external_references": [ { "source_name": "cve", "external_id": "CVE-2024-21887" } ], "description": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8defc091-73a1-5a08-b157-a0fb894179c7", "created": "2026-11-10T16:32:08.148Z", "modified": "2026-11-10T16:32:08.148Z", "relationship_type": "related-to", "source_ref": "incident--fddc4a05-71b8-5e8d-bc3e-3b5324194c3b", "target_ref": "vulnerability--eacf01b0-6294-574d-aded-655c2c972960", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--80bdb79e-b771-53c3-a919-a5429e71344e", "created": "2026-11-10T16:32:08.143Z", "modified": "2026-11-11T20:40:49.342Z", "name": "DOJ reports five pending espionage-related cybercrime cases", "description": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Oct 15, 2026. Type: espionage campaign. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/doj-reports-five-pending-espionage-related-cybercrime-cases-20261015/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2324410/doj-reports-five-pending-espionage-related-cybercrime-cases", "description": "DOJ reports five pending espionage-related cybercrime cases" } ], "x_securitystudies_occurred_on": "2026-10-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--259ace9d-afe2-5c05-ab74-7614f0dd39a0", "created": "2026-11-10T16:32:08.143Z", "modified": "2026-11-10T16:32:08.143Z", "relationship_type": "related-to", "source_ref": "incident--80bdb79e-b771-53c3-a919-a5429e71344e", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8b89e28d-97bf-5e6a-8c09-f5c85148525c", "created": "2026-11-10T16:32:08.139Z", "modified": "2026-11-11T20:40:49.336Z", "name": "Sourcenext: Approximately 22.51 million customer records may have been leaked", "description": "Detected automatically from 2 articles in 1 outlet (NHK), Oct 15 to Oct 16, 2026. Title machine-translated from Japanese. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 22,510,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2251-20261015/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261015de60043", "description": "ソースネクスト 顧客情報 約2251万件が情報漏えいか" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261016de60556", "description": "ソースネクスト パスワード暗号化がない状態で流出 再設定を" } ], "x_securitystudies_occurred_on": "2026-10-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--73baef93-7997-5aac-bca4-0e07526869a6", "created": "2026-11-10T16:32:08.139Z", "modified": "2026-11-10T16:32:08.139Z", "relationship_type": "related-to", "source_ref": "incident--8b89e28d-97bf-5e6a-8c09-f5c85148525c", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fa05e398-d0d7-580f-84ce-45eda05ae2fa", "created": "2026-11-10T16:32:08.135Z", "modified": "2026-11-11T20:40:49.331Z", "name": "Unauthorized access to system for obstetrics and gynecology clinics, medical institutions forced to respond", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 15, 2026. Title machine-translated from Japanese. Type: intrusion; sectors: health. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261015/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261015de59731", "description": "産婦人科向けシステムに不正アクセス 医療機関は対応追われる" } ], "x_securitystudies_occurred_on": "2026-10-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Health" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fd6b5f7c-d7d9-59c8-8c3a-7fe776d75e7a", "created": "2026-11-10T16:32:08.135Z", "modified": "2026-11-10T16:32:08.135Z", "relationship_type": "related-to", "source_ref": "incident--fa05e398-d0d7-580f-84ce-45eda05ae2fa", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3cd6b16a-63f4-50d5-a1e3-fb001ad18311", "created": "2026-11-10T16:32:08.130Z", "modified": "2026-11-11T20:40:49.325Z", "name": "Unstoppable personal information leaks, possibility of police involvement revealed", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 14, 2026. Title machine-translated from Japanese. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261014/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261014de59388", "description": "止まらない個人情報漏えい 警察でも漏えいの可能性明らかに" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ca02749e-1c09-5e86-97c6-f52330f0f305", "created": "2026-11-10T16:32:08.130Z", "modified": "2026-11-10T16:32:08.130Z", "relationship_type": "related-to", "source_ref": "incident--3cd6b16a-63f4-50d5-a1e3-fb001ad18311", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6221fecc-3d64-5ef6-a6ef-a1f25237b97b", "created": "2026-11-10T16:32:08.122Z", "modified": "2026-11-11T20:40:49.312Z", "name": "Personal info presumed to have leaked from 16 financial institutions: regulator", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 14, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-info-presumed-to-have-leaked-from-16-financial-institutions-r-20261014/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261014006900320", "description": "Personal info presumed to have leaked from 16 financial institutions: regulator" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5befa658-ee9d-5594-9f90-c11bee7ee5d9", "created": "2026-11-10T16:32:08.122Z", "modified": "2026-11-10T16:32:08.122Z", "relationship_type": "related-to", "source_ref": "incident--6221fecc-3d64-5ef6-a6ef-a1f25237b97b", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b30a84ed-a9c2-51aa-abbf-9beebf91015a", "created": "2026-11-10T16:32:08.126Z", "modified": "2026-11-11T20:40:49.319Z", "name": "What happens to your information after a data breach", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 14, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/what-happens-to-your-information-after-a-data-breach-20261014/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/cyberattacks-japan-response/", "description": "What happens to your information after a data breach" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a76b8c31-f1d2-54d2-baae-505ea458e14d", "created": "2026-11-10T16:32:08.126Z", "modified": "2026-11-10T16:32:08.126Z", "relationship_type": "related-to", "source_ref": "incident--b30a84ed-a9c2-51aa-abbf-9beebf91015a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6ff0e4e1-410d-55bb-a367-328e3be95c5e", "created": "2026-11-10T16:32:08.117Z", "modified": "2026-11-11T20:40:49.307Z", "name": "Customer data breach suspected at sushi delivery operator", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 14, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/customer-data-breach-suspected-at-sushi-delivery-operator-20261014/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/14/japan/crime-legal/sushi-data-breach/", "description": "Customer data breach suspected at sushi delivery operator" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f2f4d8b2-7090-5fae-995c-4b4812ab6ca0", "created": "2026-11-10T16:32:08.117Z", "modified": "2026-11-10T16:32:08.117Z", "relationship_type": "related-to", "source_ref": "incident--6ff0e4e1-410d-55bb-a367-328e3be95c5e", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--609a5cab-b3b8-56d8-a7ad-04606f4c3f2a", "created": "2026-11-10T16:32:08.112Z", "modified": "2026-11-11T20:40:49.302Z", "name": "Japan's information service firm serving municipalities reports data leak", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 13, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/japans-information-service-firm-serving-municipalities-reports-data-le-20261013/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/national/japan%27s-information-service-firm-serving-municipalities-reports-data-leak", "description": "Japan's information service firm serving municipalities reports data leak" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3a40f1f0-dd80-5548-8162-eedc50cc2698", "created": "2026-11-10T16:32:08.112Z", "modified": "2026-11-10T16:32:08.112Z", "relationship_type": "related-to", "source_ref": "incident--609a5cab-b3b8-56d8-a7ad-04606f4c3f2a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--57ecc8ba-e740-5351-8bb5-6f7e89561778", "created": "2026-11-10T16:32:08.103Z", "modified": "2026-11-11T20:40:49.296Z", "name": "Local government disaster prevention email distribution; addresses and other info leaked due to unauthorized access", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 13, 2026. Title machine-translated from Japanese. Type: data breach; sectors: government. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261013/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261013de58789", "description": "自治体の防災メール配信 不正アクセスでアドレスなど漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4f46e89a-e913-582e-b9c9-39321771479c", "created": "2026-11-10T16:32:08.103Z", "modified": "2026-11-10T16:32:08.103Z", "relationship_type": "related-to", "source_ref": "incident--57ecc8ba-e740-5351-8bb5-6f7e89561778", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--efb2078d-bfea-5182-830d-8f48f72ae6e9", "created": "2026-11-10T16:32:08.094Z", "modified": "2026-11-11T20:40:49.283Z", "name": "S’pore asks AI firms for full transparency after Australian government hack: Shanmugam", "description": "Detected automatically from 1 article in 1 outlet (The Straits Times), Oct 13, 2026. Type: intrusion; sectors: government. Asia-Pacific countries affected: Australia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/spore-asks-ai-firms-for-full-transparency-after-australian-government-20261013/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/tech/spore-asks-ai-firms-for-full-transparency-after-australian-government-hack-shanmugam", "description": "S’pore asks AI firms for full transparency after Australian government hack: Shanmugam" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2ac85cfd-f31e-5f4b-bf5c-90b69d46f460", "created": "2026-11-10T16:32:08.094Z", "modified": "2026-11-10T16:32:08.094Z", "relationship_type": "related-to", "source_ref": "incident--efb2078d-bfea-5182-830d-8f48f72ae6e9", "target_ref": "location--982fc425-3b6a-5dbb-9934-af733bbc405c", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--449b3606-2a73-5176-b6df-07f0f06ba2a8", "created": "2026-11-10T16:32:08.090Z", "modified": "2026-11-11T20:40:49.274Z", "name": "National Youth Council mistakenly leaks personal data of 600 SG Youth Forum participants", "description": "Detected automatically from 1 article in 1 outlet (The Straits Times), Oct 13, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/national-youth-council-mistakenly-leaks-personal-data-of-600-sg-youth-20261013/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/courts-crime/national-youth-council-mistakenly-leaks-personal-data-of-600-sg-youth-forum-participants", "description": "National Youth Council mistakenly leaks personal data of 600 SG Youth Forum participants" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--357d13ff-8fd7-5223-8a04-60f1e5337782", "created": "2026-11-10T16:32:08.090Z", "modified": "2026-11-10T16:32:08.090Z", "relationship_type": "related-to", "source_ref": "incident--449b3606-2a73-5176-b6df-07f0f06ba2a8", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d69b6729-1e94-5bbb-8b58-bc5fb98fe98d", "created": "2026-11-10T16:32:08.099Z", "modified": "2026-11-11T20:40:49.290Z", "name": "Series of unauthorized access incidents analyzed as 'possibility of AI agent abuse'", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 13, 2026. Title machine-translated from Japanese. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-20261013/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261013de58380", "description": "一連の不正アクセスは“AIエージェント悪用の可能性”解析で" } ], "x_securitystudies_occurred_on": "2026-10-13", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--740485c9-77a1-5364-9de1-f520706a4f52", "created": "2026-11-10T16:32:08.099Z", "modified": "2026-11-10T16:32:08.099Z", "relationship_type": "related-to", "source_ref": "incident--d69b6729-1e94-5bbb-8b58-bc5fb98fe98d", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3a1c6fa6-3d01-5851-8284-659c151198aa", "created": "2026-11-10T16:32:08.085Z", "modified": "2026-11-10T16:40:20.478Z", "name": "Tabung Haji services back following cyberattack", "description": "Detected automatically from 2 articles in 2 outlets (Free Malaysia Today, Malay Mail), Oct 12, 2026. Type: other. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/tabung-haji-services-back-following-cyberattack-20261012/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/10/12/tabung-haji-services-back-following-cyberattack", "description": "Tabung Haji services back following cyberattack" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/12/tabung-haji-systems-resume-after-cyberattack-depositors-savings-confirmed-safe/238782", "description": "Tabung Haji systems resume after cyberattack, depositors’ savings confirmed safe" } ], "x_securitystudies_occurred_on": "2026-10-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d0d7ef8a-2574-5aa2-8689-058634a1f9cd", "created": "2026-11-10T16:32:08.085Z", "modified": "2026-11-10T16:32:08.085Z", "relationship_type": "related-to", "source_ref": "incident--3a1c6fa6-3d01-5851-8284-659c151198aa", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d6468d56-d3a3-50ad-b9e9-c5ab7907faa9", "created": "2026-11-10T16:32:08.076Z", "modified": "2026-11-10T16:40:20.469Z", "name": "AI-powered attacks on Korean financial sectors linked to Chinese DDoS group: report", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 11, 2026. Type: ddos; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ddos", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-powered-attacks-on-korean-financial-sectors-linked-to-chinese-ddos-20261011/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10898597", "description": "AI-powered attacks on Korean financial sectors linked to Chinese DDoS group: report" } ], "x_securitystudies_occurred_on": "2026-10-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--59232b12-3a82-524b-86f9-b024681123d6", "created": "2026-11-10T16:32:08.076Z", "modified": "2026-11-10T16:32:08.076Z", "relationship_type": "related-to", "source_ref": "incident--d6468d56-d3a3-50ad-b9e9-c5ab7907faa9", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--81ee0f93-0a7c-52cb-a992-d71c77785c36", "created": "2026-11-10T16:32:08.081Z", "modified": "2026-11-10T16:40:20.473Z", "name": "Driver’s license data breaches becoming major concern", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 11, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/drivers-license-data-breaches-becoming-major-concern-20261011/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/10/11/japan/crime-legal/japan-drivers-license-data-breach-spread/", "description": "Driver’s license data breaches becoming major concern" } ], "x_securitystudies_occurred_on": "2026-10-11", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--837ef8aa-4532-5757-829d-eb0c9b9db062", "created": "2026-11-10T16:32:08.081Z", "modified": "2026-11-10T16:32:08.081Z", "relationship_type": "related-to", "source_ref": "incident--81ee0f93-0a7c-52cb-a992-d71c77785c36", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4b71dcd8-d94c-5772-9998-0cadd2336700", "created": "2026-11-10T16:32:08.071Z", "modified": "2026-11-10T16:40:20.464Z", "name": "Man loses over RM12mil in suspected crypto theft", "description": "Detected automatically from 2 articles in 2 outlets (Free Malaysia Today, Malay Mail), Oct 10, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: Malaysia. Largest figure in the headlines: 12,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/man-loses-over-rm12mil-in-suspected-crypto-theft-20261010/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/nation/2026/10/10/man-loses-over-rm12mil-in-suspected-crypto-theft", "description": "Man loses over RM12mil in suspected crypto theft" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/10/man-loses-over-rm12m-in-suspected-crypto-theft/238570", "description": "Man loses over RM12m in suspected crypto theft" } ], "x_securitystudies_occurred_on": "2026-10-10", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--437f539d-d38e-565c-83bb-b7434db3be93", "created": "2026-11-10T16:32:08.071Z", "modified": "2026-11-10T16:32:08.071Z", "relationship_type": "related-to", "source_ref": "incident--4b71dcd8-d94c-5772-9998-0cadd2336700", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--caa5c820-c692-514c-8a46-d6c2888353d5", "created": "2026-11-10T16:32:08.066Z", "modified": "2026-11-10T16:40:20.460Z", "name": "More Japanese firms hit by large-scale data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 10, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-japanese-firms-hit-by-large-scale-data-breaches-20261010/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/10/tech/japanese-firms-data-breaches/", "description": "More Japanese firms hit by large-scale data breaches" } ], "x_securitystudies_occurred_on": "2026-10-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1658b347-ef1f-5378-9555-25c9dc6a4293", "created": "2026-11-10T16:32:08.066Z", "modified": "2026-11-10T16:32:08.066Z", "relationship_type": "related-to", "source_ref": "incident--caa5c820-c692-514c-8a46-d6c2888353d5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--47b62d3c-b4e3-5aff-803d-d34c7bc69eba", "created": "2026-11-10T16:32:08.057Z", "modified": "2026-11-10T16:40:20.450Z", "name": "宿泊予約管理システム「手間いらず」最大445万人情報漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 4,450,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/445-20261009/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261010de57536", "description": "宿泊予約管理システム「手間いらず」最大445万人情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fcf08611-d437-5369-b696-e31ec6702dcb", "created": "2026-11-10T16:32:08.057Z", "modified": "2026-11-10T16:32:08.057Z", "relationship_type": "related-to", "source_ref": "incident--47b62d3c-b4e3-5aff-803d-d34c7bc69eba", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3626c8fa-584c-5bba-84c1-14dfb085e8e9", "created": "2026-11-10T16:32:08.047Z", "modified": "2026-11-10T16:40:20.442Z", "name": "JR東日本 えきねっとなどで最大200万件の情報漏えいの可能性", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 2,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/jr-200-20261009/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261009de57177", "description": "JR東日本 えきねっとなどで最大200万件の情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--63542ffa-70f0-525f-a15d-506125efed78", "created": "2026-11-10T16:32:08.047Z", "modified": "2026-11-10T16:32:08.047Z", "relationship_type": "related-to", "source_ref": "incident--3626c8fa-584c-5bba-84c1-14dfb085e8e9", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e6e48c01-c30c-5e58-8632-9695cff1c225", "created": "2026-11-10T16:32:08.041Z", "modified": "2026-11-10T16:40:20.437Z", "name": "「スカイチケット」に不正アクセス 1400万件超 個人情報流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 14,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/1400-20261009/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261009de57103", "description": "「スカイチケット」に不正アクセス 1400万件超 個人情報流出か" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--eb4672cf-026e-55a2-ba5e-d328ce1841f5", "created": "2026-11-10T16:32:08.041Z", "modified": "2026-11-10T16:32:08.041Z", "relationship_type": "related-to", "source_ref": "incident--e6e48c01-c30c-5e58-8632-9695cff1c225", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--23ee6f9d-d827-59ba-a13a-7d2df370055b", "created": "2026-11-10T16:32:08.062Z", "modified": "2026-11-10T16:40:20.455Z", "name": "Bookoff, JR East each report 6 mil customer records leak in newest breach", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/bookoff-jr-east-each-report-6-mil-customer-records-leak-in-newest-brea-20261009/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update1-bookoff-jr-east-each-report-6-mil.-customer-records-leak-in-newest-breach", "description": "Bookoff, JR East each report 6 mil customer records leak in newest breach" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--97070962-3cd0-5dd1-8998-84636ed67c27", "created": "2026-11-10T16:32:08.062Z", "modified": "2026-11-10T16:32:08.062Z", "relationship_type": "related-to", "source_ref": "incident--23ee6f9d-d827-59ba-a13a-7d2df370055b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--279e8f3c-1543-55f8-8830-3a4517b40954", "created": "2026-11-10T16:32:08.053Z", "modified": "2026-11-10T16:40:20.446Z", "name": "Data leaks at travel companies could impact millions of customer records", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 9, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-leaks-at-travel-companies-could-impact-millions-of-customer-recor-20261009/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/09/tech/travel-companies-data-breach/", "description": "Data leaks at travel companies could impact millions of customer records" } ], "x_securitystudies_occurred_on": "2026-10-09", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ed442b8d-3d1d-5b87-af52-8b6de3e8bdfb", "created": "2026-11-10T16:32:08.053Z", "modified": "2026-11-10T16:32:08.053Z", "relationship_type": "related-to", "source_ref": "incident--279e8f3c-1543-55f8-8830-3a4517b40954", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c84baddd-8436-5a7e-bf6f-249d8454cd51", "created": "2026-11-10T16:32:08.013Z", "modified": "2026-11-10T16:40:20.414Z", "name": "South Korea bank hack suspect may be 26-year-old in China, U.S. firm says", "description": "Detected automatically from 4 articles in 4 outlets (Channel News Asia, New York Times China, Taipei Times, The Japan Times), Oct 8, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: China. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korea-bank-hack-suspect-may-be-26-year-old-in-china-us-firm-says-20261008/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/08/south-korea-cyberattack-china-suspect/", "description": "South Korea bank hack suspect may be 26-year-old in China, U.S. firm says" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/crowdstrike-says-china-based-suspect-used-ai-tools-in-south-korean-bank-hacks-6441386", "description": "CrowdStrike says China-based suspect used AI tools in South Korean bank hacks" }, { "source_name": "New York Times China", "url": "https://www.nytimes.com/2026/10/08/world/australia/south-korea-bank-hack-china-us-ai.html", "description": "Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks, CrowdStrike Says" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/front/archives/2026/10/09/2003865655", "description": "S Korean banks likely hacked by China-based actor: CrowdStrike" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 5, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2c908ce6-1ad8-53ce-862f-6f73cc5830a9", "created": "2026-11-10T16:32:08.013Z", "modified": "2026-11-10T16:32:08.013Z", "relationship_type": "related-to", "source_ref": "incident--c84baddd-8436-5a7e-bf6f-249d8454cd51", "target_ref": "location--231e90b4-4920-54e1-af65-e3447d240a54", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c06f86e7-c64e-512c-8a8f-73add9d090b1", "created": "2026-11-10T16:32:08.034Z", "modified": "2026-11-10T16:40:20.432Z", "name": "ブックオフグループ 最大で643万件の会員情報漏えいの可能性", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 6,430,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/643-20261008/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261009de56955", "description": "ブックオフグループ 最大で643万件の会員情報漏えいの可能性" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--923ae75f-9947-53f7-a194-4b76ad38616f", "created": "2026-11-10T16:32:08.034Z", "modified": "2026-11-10T16:32:08.034Z", "relationship_type": "related-to", "source_ref": "incident--c06f86e7-c64e-512c-8a8f-73add9d090b1", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ce55355e-48f3-531c-b759-5bdb2d6a0c01", "created": "2026-11-10T16:32:08.028Z", "modified": "2026-11-10T16:40:20.428Z", "name": "53 companies in Japan hit by Qilin ransomware group", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 8, 2026. Type: ransomware. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/53-companies-in-japan-hit-by-qilin-ransomware-group-20261008/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/update3-53-companies-in-japan-hit-by-qilin-ransomware-group-police-agency", "description": "53 companies in Japan hit by Qilin ransomware group" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--00bc07e6-fc8b-5b83-8683-c3a059facd63", "created": "2026-11-10T16:32:08.028Z", "modified": "2026-11-10T16:32:08.028Z", "relationship_type": "related-to", "source_ref": "incident--ce55355e-48f3-531c-b759-5bdb2d6a0c01", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6fd5ef5a-59dd-51a5-aeda-8180c8946429", "created": "2026-11-10T16:32:08.023Z", "modified": "2026-11-10T16:40:20.423Z", "name": "カラオケ店運営の第一興商 約872万件の個人情報漏えいのおそれ", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 8,720,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/872-20261008/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261008de56831", "description": "カラオケ店運営の第一興商 約872万件の個人情報漏えいのおそれ" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bc8a9597-4c78-56e5-bdd0-3acef17d60b5", "created": "2026-11-10T16:32:08.023Z", "modified": "2026-11-10T16:32:08.023Z", "relationship_type": "related-to", "source_ref": "incident--6fd5ef5a-59dd-51a5-aeda-8180c8946429", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a738999a-f2b0-5880-ba7f-6aaae536cea4", "created": "2026-11-10T16:32:08.019Z", "modified": "2026-11-10T16:40:20.419Z", "name": "Coupang files lawsuits against 620 bln-won fine over data leak", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/coupang-files-lawsuits-against-620-bln-won-fine-over-data-leak-20261008/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261008008700320", "description": "Coupang files lawsuits against 620 bln-won fine over data leak" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--856314ea-e003-53c3-9319-562106fe2866", "created": "2026-11-10T16:32:08.019Z", "modified": "2026-11-10T16:32:08.019Z", "relationship_type": "related-to", "source_ref": "incident--a738999a-f2b0-5880-ba7f-6aaae536cea4", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--27acc24b-612d-5aeb-8722-ac242eefbaeb", "created": "2026-11-10T16:32:08.007Z", "modified": "2026-11-10T16:40:20.409Z", "name": "Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks", "description": "Detected automatically from 1 article in 1 outlet (Hankyoreh), Oct 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/online-only-lenders-kakaobank-and-kbank-are-latest-targets-of-cyberatt-20261007/" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_business/1281364.html", "description": "Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b735b72-62fa-5c94-980b-26bd9658327a", "created": "2026-11-10T16:32:08.007Z", "modified": "2026-11-10T16:32:08.007Z", "relationship_type": "related-to", "source_ref": "incident--27acc24b-612d-5aeb-8722-ac242eefbaeb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a8b50939-898c-5419-aafa-598548ea4742", "created": "2026-11-10T16:32:07.969Z", "modified": "2026-11-10T16:40:20.376Z", "name": "Multiple IPs used to hide origin of recent cyberattacks against financial firms", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 7, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/multiple-ips-used-to-hide-origin-of-recent-cyberattacks-against-financ-20261007/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261007005000315", "description": "Multiple IPs used to hide origin of recent cyberattacks against financial firms" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--081f6066-cb7b-5414-9b9e-323d0cb28f43", "created": "2026-11-10T16:32:07.969Z", "modified": "2026-11-10T16:32:07.969Z", "relationship_type": "related-to", "source_ref": "incident--a8b50939-898c-5419-aafa-598548ea4742", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--88ca12c2-29c9-598b-928a-7f6a89141991", "created": "2026-11-10T16:32:08.002Z", "modified": "2026-11-10T16:40:20.404Z", "name": "鴻海研究院資安所所長李維斌：一天遭6億次攻擊 不如控制波及範圍", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 7, 2026. Type: other. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/6-20261007-2/" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5598981", "description": "鴻海研究院資安所所長李維斌：一天遭6億次攻擊 不如控制波及範圍" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--92ba1955-b004-5b1b-886e-86405de4a8d4", "created": "2026-11-10T16:32:08.002Z", "modified": "2026-11-10T16:32:08.002Z", "relationship_type": "related-to", "source_ref": "incident--88ca12c2-29c9-598b-928a-7f6a89141991", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7f214974-e737-585d-908a-e4d3d128ade8", "created": "2026-11-10T16:32:07.995Z", "modified": "2026-11-10T16:40:20.399Z", "name": "ソフトバンク子会社に不正アクセス クラウドサービスに障害", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261007/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261007de56048", "description": "ソフトバンク子会社に不正アクセス クラウドサービスに障害" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9358ec37-0a06-51c6-8478-05d5a870ea00", "created": "2026-11-10T16:32:07.995Z", "modified": "2026-11-10T16:32:07.995Z", "relationship_type": "related-to", "source_ref": "incident--7f214974-e737-585d-908a-e4d3d128ade8", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e78a95af-04e5-53a1-9a36-d5e48b7ce5a3", "created": "2026-11-10T16:32:07.991Z", "modified": "2026-11-10T16:40:20.395Z", "name": "損保ジャパン のべ6万件の顧客情報が流出か 不正アクセス", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 60,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/6-20261007/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261007de55973", "description": "損保ジャパン のべ6万件の顧客情報が流出か 不正アクセス" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8edff817-51e9-5ef5-9c8d-36592716319b", "created": "2026-11-10T16:32:07.991Z", "modified": "2026-11-10T16:32:07.991Z", "relationship_type": "related-to", "source_ref": "incident--e78a95af-04e5-53a1-9a36-d5e48b7ce5a3", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--04bf7ebb-41e8-5afb-a554-536d26737b5c", "created": "2026-11-10T16:32:07.985Z", "modified": "2026-11-10T16:40:20.390Z", "name": "Prankster appears to hack voicemail of North Korea’s UN mission to mock country", "description": "Detected automatically from 1 article in 1 outlet (NK News), Oct 7, 2026. Type: intrusion. Asia-Pacific countries affected: North Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/prankster-appears-to-hack-voicemail-of-north-koreas-un-mission-to-mock-20261007/" }, { "source_name": "NK News", "url": "https://www.nknews.org/2026/10/prankster-appears-to-hack-voicemail-of-north-koreas-un-mission-to-mock-country/", "description": "Prankster appears to hack voicemail of North Korea’s UN mission to mock country" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--20bc17ce-ce51-5a11-9197-83050610015b", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "North Korea", "country": "KP" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b0805440-4a02-5a43-9a1d-e515b22d5bce", "created": "2026-11-10T16:32:07.985Z", "modified": "2026-11-10T16:32:07.985Z", "relationship_type": "related-to", "source_ref": "incident--04bf7ebb-41e8-5afb-a554-536d26737b5c", "target_ref": "location--20bc17ce-ce51-5a11-9197-83050610015b", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ff257aa0-5aba-5fb1-917c-bc40dcda6f76", "created": "2026-11-10T16:32:07.980Z", "modified": "2026-11-10T16:40:20.386Z", "name": "South Korean megachurches probe suspected AI-linked cyberattacks", "description": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Oct 7, 2026. Type: other. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korean-megachurches-probe-suspected-ai-linked-cyberattacks-20261007/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/world/2026/10/07/south-korean-megachurches-probe-suspected-ai-linked-cyberattacks", "description": "South Korean megachurches probe suspected AI-linked cyberattacks" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a16085e9-8e8f-5f63-a5f3-bfa653bedf81", "created": "2026-11-10T16:32:07.980Z", "modified": "2026-11-10T16:32:07.980Z", "relationship_type": "related-to", "source_ref": "incident--ff257aa0-5aba-5fb1-917c-bc40dcda6f76", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c979302a-20ef-559d-902a-1ce544bd066d", "created": "2026-11-10T16:32:07.975Z", "modified": "2026-11-10T16:40:20.381Z", "name": "Cyberattacks against Japanese firms continue, putting millions at risk of identity theft", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 7, 2026. Type: other. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattacks-against-japanese-firms-continue-putting-millions-at-risk-20261007/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/07/tech/more-companies-data-leak/", "description": "Cyberattacks against Japanese firms continue, putting millions at risk of identity theft" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--43eba7eb-3670-5ea0-b7a9-de83c8587ef6", "created": "2026-11-10T16:32:07.975Z", "modified": "2026-11-10T16:32:07.975Z", "relationship_type": "related-to", "source_ref": "incident--c979302a-20ef-559d-902a-1ce544bd066d", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c869f62c-9995-5dd5-a470-cf8eed935deb", "created": "2026-11-10T16:32:07.964Z", "modified": "2026-11-10T16:40:20.371Z", "name": "Two mega churches hit by suspected data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 7, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/two-mega-churches-hit-by-suspected-data-breaches-20261007/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10895635", "description": "Two mega churches hit by suspected data breaches" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b0e0b9f2-e27c-5240-af26-87257270aeb1", "created": "2026-11-10T16:32:07.964Z", "modified": "2026-11-10T16:32:07.964Z", "relationship_type": "related-to", "source_ref": "incident--c869f62c-9995-5dd5-a470-cf8eed935deb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9ca06372-b640-5b3c-bbbe-f3d2f56f9c7c", "created": "2026-11-10T16:32:07.954Z", "modified": "2026-11-10T16:40:20.362Z", "name": "104人力銀行遭駭！12萬筆求職者個資恐外洩 官方發重訊證實了", "description": "Detected automatically from 1 article in 1 outlet (Liberty Times), Oct 6, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 120,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/10412-20261006/" }, { "source_name": "Liberty Times", "url": "https://news.ltn.com.tw/news/life/breakingnews/5597618", "description": "104人力銀行遭駭！12萬筆求職者個資恐外洩 官方發重訊證實了" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cf3fc73f-9638-5020-b9e5-6214278e1199", "created": "2026-11-10T16:32:07.954Z", "modified": "2026-11-10T16:32:07.954Z", "relationship_type": "related-to", "source_ref": "incident--9ca06372-b640-5b3c-bbbe-f3d2f56f9c7c", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--cb26a1f1-78b3-5e40-967a-728e6f29231c", "created": "2026-11-10T16:32:07.937Z", "modified": "2026-11-10T16:40:20.349Z", "name": "South Korea’s Lee says AI appears to have been used in bank hacks", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 6, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-koreas-lee-says-ai-appears-to-have-been-used-in-bank-hacks-20261006-2/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/10/06/south-korea-bank-hacks/", "description": "South Korea’s Lee says AI appears to have been used in bank hacks" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bba5181e-a265-5339-b72f-a50a8cb172b5", "created": "2026-11-10T16:32:07.937Z", "modified": "2026-11-10T16:32:07.937Z", "relationship_type": "related-to", "source_ref": "incident--cb26a1f1-78b3-5e40-967a-728e6f29231c", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--80ce7b83-eaad-5122-a476-86c735734af7", "created": "2026-11-10T16:32:07.931Z", "modified": "2026-11-10T16:40:20.344Z", "name": "ミスターマックスで不正アクセス 個人情報最大170万人超流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 6, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 1,700,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/170-20261006/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261006de55099", "description": "ミスターマックスで不正アクセス 個人情報最大170万人超流出か" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ddb5ddb9-3f83-5f64-892d-a7933d06b2ae", "created": "2026-11-10T16:32:07.931Z", "modified": "2026-11-10T16:32:07.931Z", "relationship_type": "related-to", "source_ref": "incident--80ce7b83-eaad-5122-a476-86c735734af7", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8560875a-c105-5b1b-9f18-146635126e17", "created": "2026-11-10T16:32:07.925Z", "modified": "2026-11-10T16:40:20.340Z", "name": "South Korea’s Lee says AI appears to have been used in bank hacks", "description": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Oct 6, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-koreas-lee-says-ai-appears-to-have-been-used-in-bank-hacks-20261006/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/10/06/south-korea-s-lee-says-ai-appears-to-have-been-used-in-bank-hacks", "description": "South Korea’s Lee says AI appears to have been used in bank hacks" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--d0de1fb1-1e6e-58f2-879f-92c195592038", "created": "2026-11-10T16:32:07.925Z", "modified": "2026-11-10T16:32:07.925Z", "relationship_type": "related-to", "source_ref": "incident--8560875a-c105-5b1b-9f18-146635126e17", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14", "created": "2026-11-10T16:32:07.919Z", "modified": "2026-11-10T16:40:20.335Z", "name": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog", "description": "Detected automatically from 6 articles in 2 outlets (Korea Times, Yonhap), Oct 6 to Oct 9, 2026. Type: intrusion; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-20261006/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261006005000320", "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261006005051320", "description": "(LEAD) 28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss", "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/28-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss", "description": "28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261009003600315", "description": "Police expand team investigating recent hacking of financial institutions" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261009003651315", "description": "(LEAD) Police expand team investigating recent hacking of financial institutions" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--342e01dd-fd32-5929-98e6-d047144faa8f", "created": "2026-11-10T16:32:07.919Z", "modified": "2026-11-10T16:32:07.919Z", "relationship_type": "related-to", "source_ref": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--74d032d6-7ec6-5f38-8305-3224e545a9de", "created": "2026-11-10T16:32:07.959Z", "modified": "2026-11-10T16:40:20.366Z", "name": "タイムズカー情報漏えい 業界団体に対策の点検を要請 国交省", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261006/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261006de55582", "description": "タイムズカー情報漏えい 業界団体に対策の点検を要請 国交省" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--09f0ecb2-33da-5e52-b5e7-8f82eaf941e3", "created": "2026-11-10T16:32:07.959Z", "modified": "2026-11-10T16:32:07.959Z", "relationship_type": "related-to", "source_ref": "incident--74d032d6-7ec6-5f38-8305-3224e545a9de", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3974aed3-cf56-573d-a423-73ef6335b54b", "created": "2026-11-10T16:32:07.948Z", "modified": "2026-11-10T16:40:20.358Z", "name": "More Japan firms report customer data leaks as unauthorized access widens", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 6, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-japan-firms-report-customer-data-leaks-as-unauthorized-access-wid-20261006/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/crime/GMO-internet-service-unit-retailer-Mr-Max-both-report-massive-customer-data-leaks", "description": "More Japan firms report customer data leaks as unauthorized access widens" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b5146b79-ea29-519e-b4ec-c3e6e882649a", "created": "2026-11-10T16:32:07.948Z", "modified": "2026-11-10T16:32:07.948Z", "relationship_type": "related-to", "source_ref": "incident--3974aed3-cf56-573d-a423-73ef6335b54b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fc628008-8939-5f2f-b928-6496ee23e7c5", "created": "2026-11-10T16:32:07.942Z", "modified": "2026-11-10T16:40:20.353Z", "name": "Jaya Grocer warns customers after Instagram account hacked, fake ‘Anniversary Promo’ posts push Telegram links", "description": "Detected automatically from 1 article in 1 outlet (Malay Mail), Oct 6, 2026. Type: intrusion. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/jaya-grocer-warns-customers-after-instagram-account-hacked-fake-annive-20261006/" }, { "source_name": "Malay Mail", "url": "https://www.malaymail.com/news/malaysia/2026/10/06/jaya-grocer-warns-customers-after-instagram-account-hacked-fake-anniversary-promo-posts-push-telegram-links/237925", "description": "Jaya Grocer warns customers after Instagram account hacked, fake ‘Anniversary Promo’ posts push Telegram links" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--af984955-d44d-5ce7-be58-ed527c96d684", "created": "2026-11-10T16:32:07.942Z", "modified": "2026-11-10T16:32:07.942Z", "relationship_type": "related-to", "source_ref": "incident--fc628008-8939-5f2f-b928-6496ee23e7c5", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2017bb33-41ac-5fea-a089-82f50987462d", "created": "2026-11-10T16:32:07.912Z", "modified": "2026-11-10T16:40:20.329Z", "name": "Yakiniku King BBQ chain says over 10 mil customer records leaked", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 5, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yakiniku-king-bbq-chain-says-over-10-mil-customer-records-leaked-20261005/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/business/update2-japan%27s-yakiniku-king-bbq-chain-says-over-10-mil.-customer-records-leaked", "description": "Yakiniku King BBQ chain says over 10 mil customer records leaked" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ab9e44b8-b084-505f-8b2c-0fd93570edfb", "created": "2026-11-10T16:32:07.912Z", "modified": "2026-11-10T16:32:07.912Z", "relationship_type": "related-to", "source_ref": "incident--2017bb33-41ac-5fea-a089-82f50987462d", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--2aeca8fb-bf43-5727-85e0-ac3a8fa28ba0", "created": "2026-11-10T16:32:07.907Z", "modified": "2026-11-10T16:40:20.325Z", "name": "大起水産 不正アクセスで約17万5000人分の個人情報漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 5, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 170,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/175000-20261005/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261005de54848", "description": "大起水産 不正アクセスで約17万5000人分の個人情報漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a08f19af-bdb4-539e-bac0-9758499cd45f", "created": "2026-11-10T16:32:07.907Z", "modified": "2026-11-10T16:32:07.907Z", "relationship_type": "related-to", "source_ref": "incident--2aeca8fb-bf43-5727-85e0-ac3a8fa28ba0", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ef744a4b-8adf-5e7e-8e88-b22951f462ad", "created": "2026-11-10T16:32:07.902Z", "modified": "2026-11-10T16:40:20.320Z", "name": "大和証券 委託先サーバー不正アクセス 個人情報11万人分流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 5, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 110,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/11-20261005/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261005de54568", "description": "大和証券 委託先サーバー不正アクセス 個人情報11万人分流出か" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--88074568-a0ad-5b11-8d24-ba7235634890", "created": "2026-11-10T16:32:07.902Z", "modified": "2026-11-10T16:32:07.902Z", "relationship_type": "related-to", "source_ref": "incident--ef744a4b-8adf-5e7e-8e88-b22951f462ad", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3e175698-9ffd-56e1-baba-dca2aa571bd5", "created": "2026-11-10T16:32:07.897Z", "modified": "2026-11-10T16:40:20.315Z", "name": "Loạt ngân hàng Hàn Quốc liên tiếp bị tấn công mạng", "description": "Detected automatically from 1 article in 1 outlet (VN Express), Oct 5, 2026. Type: intrusion. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/loat-ngan-hang-han-quoc-lien-tiep-bi-tan-cong-mang-20261005/" }, { "source_name": "VN Express", "url": "https://vnexpress.net/loat-ngan-hang-han-quoc-lien-tiep-bi-tan-cong-mang-5128451.html", "description": "Loạt ngân hàng Hàn Quốc liên tiếp bị tấn công mạng" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--abaa3db1-ca6b-5924-bb3a-bfcdfa15f988", "created": "2026-11-10T16:32:07.897Z", "modified": "2026-11-10T16:32:07.897Z", "relationship_type": "related-to", "source_ref": "incident--3e175698-9ffd-56e1-baba-dca2aa571bd5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6f5156f9-5f9e-5456-8f92-230a38cf55c6", "created": "2026-11-10T16:32:07.880Z", "modified": "2026-11-10T16:40:20.298Z", "name": "South Korean president orders probe into data leaks across financial industry", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Oct 4, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korean-president-orders-probe-into-data-leaks-across-financial-i-20261004/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/asia/south-korea-president-orders-probe-data-leaks-financial-industry-6430516", "description": "South Korean president orders probe into data leaks across financial industry" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--75edd744-1691-5da2-9f30-fae61cdd8f81", "created": "2026-11-10T16:32:07.880Z", "modified": "2026-11-10T16:32:07.880Z", "relationship_type": "related-to", "source_ref": "incident--6f5156f9-5f9e-5456-8f92-230a38cf55c6", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--61ace89f-32c9-5427-9f54-e7a8c1c953fa", "created": "2026-11-10T16:32:07.875Z", "modified": "2026-11-10T16:40:20.291Z", "name": "Lee calls for thorough probe into personal data leaks at financial institutions", "description": "Detected automatically from 3 articles in 2 outlets (The Korea Herald, Yonhap), Oct 4, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lee-calls-for-thorough-probe-into-personal-data-leaks-at-financial-ins-20261004/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261004002100315", "description": "Lee calls for thorough probe into personal data leaks at financial institutions" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10892927", "description": "Lee calls for thorough probe into personal data leaks at financial institutions" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261004002151315", "description": "(LEAD) Lee calls for thorough probe into personal data leaks at financial institutions" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--16d855d5-8dd3-53b0-83bb-77524c4ee27f", "created": "2026-11-10T16:32:07.875Z", "modified": "2026-11-10T16:32:07.875Z", "relationship_type": "related-to", "source_ref": "incident--61ace89f-32c9-5427-9f54-e7a8c1c953fa", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--708adee5-ceb5-5c54-b9e7-d1755b3c182a", "created": "2026-11-10T16:32:07.892Z", "modified": "2026-11-10T16:40:20.308Z", "name": "日経新聞サイバー攻撃で情報漏えいか なりすましメールが送信", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 4, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261004/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261004de54358", "description": "日経新聞サイバー攻撃で情報漏えいか なりすましメールが送信" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--95fc676e-0938-5107-81c8-1ff5f8e36473", "created": "2026-11-10T16:32:07.892Z", "modified": "2026-11-10T16:32:07.892Z", "relationship_type": "related-to", "source_ref": "incident--708adee5-ceb5-5c54-b9e7-d1755b3c182a", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a7848b05-58f7-5601-b2af-2e0b00d4b9ce", "created": "2026-11-10T16:32:07.886Z", "modified": "2026-11-10T16:40:20.304Z", "name": "Two men hacked during drinking spree in Bukidnon", "description": "Detected automatically from 1 article in 1 outlet (Philippine Daily Inquirer), Oct 4, 2026. Type: intrusion. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/two-men-hacked-during-drinking-spree-in-bukidnon-20261004/" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2316742/two-men-hacked-during-drinking-spree-in-bukidnon", "description": "Two men hacked during drinking spree in Bukidnon" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6a1f424f-b352-52cb-9288-f38929e5aec6", "created": "2026-11-10T16:32:07.886Z", "modified": "2026-11-10T16:32:07.886Z", "relationship_type": "related-to", "source_ref": "incident--a7848b05-58f7-5601-b2af-2e0b00d4b9ce", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8de0d3fb-4329-5ba5-85db-492c681ed5b5", "created": "2026-11-10T16:32:07.869Z", "modified": "2026-11-10T16:40:20.284Z", "name": "Thousands sign up for legal action website in car-share service data leak", "description": "Detected automatically from 1 article in 1 outlet (Japan Today), Oct 3, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/thousands-sign-up-for-legal-action-website-in-car-share-service-data-l-20261003/" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/national/update1-thousands-sign-up-for-legal-action-website-in-car-share-service-data-leak", "description": "Thousands sign up for legal action website in car-share service data leak" } ], "x_securitystudies_occurred_on": "2026-10-03", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5744f1c5-8e7f-57ea-8ae2-d8f89330cc6a", "created": "2026-11-10T16:32:07.869Z", "modified": "2026-11-10T16:32:07.869Z", "relationship_type": "related-to", "source_ref": "incident--8de0d3fb-4329-5ba5-85db-492c681ed5b5", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--50a2b64e-ac29-5d5e-af40-dae6d80f7796", "created": "2026-11-10T16:32:07.864Z", "modified": "2026-11-10T16:40:20.278Z", "name": "第一ライフに不正アクセス 12万人分の従業員情報が流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 3, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 120,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/12-20261003/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261003de54037", "description": "第一ライフに不正アクセス 12万人分の従業員情報が流出か" } ], "x_securitystudies_occurred_on": "2026-10-03", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dfdfc7c-d2f6-5164-a0bb-bc196e5b6295", "created": "2026-11-10T16:32:07.864Z", "modified": "2026-11-10T16:32:07.864Z", "relationship_type": "related-to", "source_ref": "incident--50a2b64e-ac29-5d5e-af40-dae6d80f7796", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f3551d60-9f23-534d-8f93-bea2091114c5", "created": "2026-11-10T16:32:07.859Z", "modified": "2026-11-10T16:40:20.272Z", "name": "(2nd LD) Regulator instructs financial firms to check security systems over series of cyberattacks on banks", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 2, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2nd-ld-regulator-instructs-financial-firms-to-check-security-systems-o-20261002/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009152320", "description": "(2nd LD) Regulator instructs financial firms to check security systems over series of cyberattacks on banks" } ], "x_securitystudies_occurred_on": "2026-10-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--215fec95-ed3f-5c28-8fae-6a186de0e378", "created": "2026-11-10T16:32:07.859Z", "modified": "2026-11-10T16:32:07.859Z", "relationship_type": "related-to", "source_ref": "incident--f3551d60-9f23-534d-8f93-bea2091114c5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e9cd4260-4348-51b3-9433-2f66babf7c47", "created": "2026-11-10T16:32:07.853Z", "modified": "2026-11-10T16:40:20.265Z", "name": "摩斯漢堡爆個資外洩！母公司重訊證實：已責成委外廠商改善", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Oct 2, 2026. Type: data breach. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261002-2/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-02/1063172", "description": "摩斯漢堡爆個資外洩！母公司重訊證實：已責成委外廠商改善" } ], "x_securitystudies_occurred_on": "2026-10-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e2677e85-3bf9-5095-bd50-60e96da4f7f2", "created": "2026-11-10T16:32:07.853Z", "modified": "2026-11-10T16:32:07.853Z", "relationship_type": "related-to", "source_ref": "incident--e9cd4260-4348-51b3-9433-2f66babf7c47", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a5bca504-4398-5972-84d6-e5b87b9da762", "created": "2026-11-10T16:32:07.847Z", "modified": "2026-11-10T16:40:20.259Z", "name": "当社グループ管理サーバーへの不正アクセスに関するお知らせ", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Oct 2, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261002/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/press/2026/10/02/noticeransomware-incident-jp/", "description": "当社グループ管理サーバーへの不正アクセスに関するお知らせ" } ], "x_securitystudies_occurred_on": "2026-10-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--19bae428-9b78-5c15-a94a-4cb900ee2b0e", "created": "2026-11-10T16:32:07.847Z", "modified": "2026-11-10T16:32:07.847Z", "relationship_type": "related-to", "source_ref": "incident--a5bca504-4398-5972-84d6-e5b87b9da762", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--55a6564d-68e7-5cef-b137-2793678a5244", "created": "2026-11-10T16:32:07.837Z", "modified": "2026-11-10T16:40:20.246Z", "name": "(LEAD) Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking", "description": "Detected automatically from 7 articles in 2 outlets (The Korea Herald, Yonhap), Oct 1 to Oct 2, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lead-some-25000-customers-info-leaked-from-shinhan-bank-in-apparent-ai-20261001/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261001006351320", "description": "(LEAD) Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10891104", "description": "Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002004900320", "description": "KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002004951320", "description": "(LEAD) KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009100320", "description": "89 customers' personal information leaked from Hana Bank" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10892290", "description": "Hana, BNK report data breaches as hacking hits Korean banks" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009151320", "description": "(LEAD) 89 customers' personal information leaked from Hana Bank" } ], "x_securitystudies_occurred_on": "2026-10-01", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--66702bc7-25a3-54c6-9570-7554fdb4d672", "created": "2026-11-10T16:32:07.837Z", "modified": "2026-11-10T16:32:07.837Z", "relationship_type": "related-to", "source_ref": "incident--55a6564d-68e7-5cef-b137-2793678a5244", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--69cbaa89-c50c-536f-8b53-d4a314e575bc", "created": "2026-11-10T16:32:07.843Z", "modified": "2026-11-10T16:40:20.253Z", "name": "佐川急便に不正アクセス 住所など個人情報が漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Oct 1, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261001/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261002de53762", "description": "佐川急便に不正アクセス 住所など個人情報が漏えいか" } ], "x_securitystudies_occurred_on": "2026-10-01", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e68f508c-d30d-5046-9681-0d87cef8b087", "created": "2026-11-10T16:32:07.843Z", "modified": "2026-11-10T16:32:07.843Z", "relationship_type": "related-to", "source_ref": "incident--69cbaa89-c50c-536f-8b53-d4a314e575bc", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--695e3be0-1e05-553f-b1d9-dd2d36f4b0f1", "created": "2026-11-10T16:32:07.831Z", "modified": "2026-11-10T16:40:20.239Z", "name": "NUG rejects regime data hack claims, accuses financial service providers of exposing donors", "description": "Detected automatically from 1 article in 1 outlet (Democratic Voice of Burma), Sep 30, 2026. Type: intrusion; sectors: financial services. Asia-Pacific countries affected: Myanmar. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/nug-rejects-regime-data-hack-claims-accuses-financial-service-provider-20260930/" }, { "source_name": "Democratic Voice of Burma", "url": "https://english.dvb.no/nug-rejects-regime-data-hack-claims-accuses-financial-service-providers-of-exposing-donors/", "description": "NUG rejects regime data hack claims, accuses financial service providers of exposing donors" } ], "x_securitystudies_occurred_on": "2026-09-30", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--8d7679ef-0988-5804-ab25-ab55820d473d", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Myanmar", "country": "MM" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe18290a-f2c4-5996-9057-a9dfe2b58a6f", "created": "2026-11-10T16:32:07.831Z", "modified": "2026-11-10T16:32:07.831Z", "relationship_type": "related-to", "source_ref": "incident--695e3be0-1e05-553f-b1d9-dd2d36f4b0f1", "target_ref": "location--8d7679ef-0988-5804-ab25-ab55820d473d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--feb5bc10-84f6-56cb-9835-6711413c9806", "created": "2026-11-10T16:32:07.817Z", "modified": "2026-11-10T16:40:20.228Z", "name": "Times Car Rental says data breach affected 6.6 million accounts", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Sep 30, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 6,600,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/times-car-rental-says-data-breach-affected-66-million-accounts-20260930/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/09/30/japan/crime-legal/times-car-rental-hack/", "description": "Times Car Rental says data breach affected 6.6 million accounts" } ], "x_securitystudies_occurred_on": "2026-09-30", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7724d6fd-3c4c-5af4-9763-d013120db06d", "created": "2026-11-10T16:32:07.817Z", "modified": "2026-11-10T16:32:07.817Z", "relationship_type": "related-to", "source_ref": "incident--feb5bc10-84f6-56cb-9835-6711413c9806", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c7ef06ef-f31b-5c18-a387-e666987d3f5f", "created": "2026-11-10T16:32:07.825Z", "modified": "2026-11-10T16:40:20.234Z", "name": "Bee Cheng Hiang customers’ e-mail addresses exposed in first case of AI-related data breach in S’pore", "description": "Detected automatically from 2 articles in 2 outlets (Channel News Asia, The Straits Times), Sep 30, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/bee-cheng-hiang-customers-e-mail-addresses-exposed-in-first-case-of-ai-20260930/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/tech/bad-ai-prompt-exposes-bee-cheng-hiang-customers-e-mail-addresses-in-first-case-of-ai-related-data", "description": "Bee Cheng Hiang customers’ e-mail addresses exposed in first case of AI-related data breach in S’pore" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/bee-cheng-hiang-data-breach-ai-pdpc-emails-6421711", "description": "Nearly 100,000 Bee Cheng Hiang customers' email addresses exposed in first AI-related data breach in Singapore" } ], "x_securitystudies_occurred_on": "2026-09-30", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f0fc45da-5c58-56e0-a762-a13385a8da51", "created": "2026-11-10T16:32:07.825Z", "modified": "2026-11-10T16:32:07.825Z", "relationship_type": "related-to", "source_ref": "incident--c7ef06ef-f31b-5c18-a387-e666987d3f5f", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--5b11bf30-683c-548f-b4bd-0d46363123cc", "created": "2026-11-10T16:32:07.810Z", "modified": "2026-11-10T16:40:20.223Z", "name": "セイコーマート 不正アクセスで約57万アカウント漏えいか", "description": "Detected automatically from 1 article in 1 outlet (NHK), Sep 29, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 570,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/57-20260929/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20260929de53020", "description": "セイコーマート 不正アクセスで約57万アカウント漏えいか" } ], "x_securitystudies_occurred_on": "2026-09-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2ce6429d-f3d0-5d66-9adc-9e8dc3973871", "created": "2026-11-10T16:32:07.810Z", "modified": "2026-11-10T16:32:07.810Z", "relationship_type": "related-to", "source_ref": "incident--5b11bf30-683c-548f-b4bd-0d46363123cc", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1f8cdaf7-d425-569c-8957-6d06f3b766dc", "created": "2026-11-10T16:32:07.797Z", "modified": "2026-11-10T16:40:20.219Z", "name": "Mảnh đất màu mỡ cho lừa đảo và lộ lọt thông tin", "description": "Detected automatically from 1 article in 1 outlet (Thanh Nien News), Sep 28, 2026. Type: data breach. Asia-Pacific countries affected: Vietnam. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/manh-at-mau-mo-cho-lua-ao-va-lo-lot-thong-tin-20260928/" }, { "source_name": "Thanh Nien News", "url": "https://thanhnien.vn/manh-dat-mau-mo-cho-lua-dao-va-lo-lot-thong-tin-185260928231548891.htm", "description": "Mảnh đất màu mỡ cho lừa đảo và lộ lọt thông tin" } ], "x_securitystudies_occurred_on": "2026-09-28", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ce8c3033-b142-5c64-89d2-cf1d8b29c105", "created": "2026-11-10T16:32:07.797Z", "modified": "2026-11-10T16:32:07.797Z", "relationship_type": "related-to", "source_ref": "incident--1f8cdaf7-d425-569c-8957-6d06f3b766dc", "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--9d70c832-ef53-58c0-ae83-a70f38bb55a0", "created": "2026-11-10T16:32:07.790Z", "modified": "2026-11-10T16:40:20.214Z", "name": "More than 23,500 Simba customers affected in data breach involving IC numbers, birth dates", "description": "Detected automatically from 3 articles in 3 outlets (Channel News Asia, Mothership, The Straits Times), Sep 27 to Sep 28, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/more-than-23500-simba-customers-affected-in-data-breach-involving-ic-n-20260927/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/more-23500-simba-customers-affected-in-data-breach-involving-ic-numbers-birth-dates-6413636", "description": "More than 23,500 Simba customers affected in data breach involving IC numbers, birth dates" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/personal-information-of-over-23500-simba-customers-leaked-in-data-breach", "description": "Personal information of over 23,500 Simba customers leaked in data breach" }, { "source_name": "Mothership", "url": "https://mothership.sg/2026/09/simba-data-breach-ic-phone-numbers/", "description": "23,549 Simba customers' IC & phone numbers exposed in data breach" } ], "x_securitystudies_occurred_on": "2026-09-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--eaa6d491-de51-5f91-8483-3bd2e51784b4", "created": "2026-11-10T16:32:07.790Z", "modified": "2026-11-10T16:32:07.790Z", "relationship_type": "related-to", "source_ref": "incident--9d70c832-ef53-58c0-ae83-a70f38bb55a0", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ec034b29-0c62-505e-afce-8e73db89287b", "created": "2026-11-10T16:32:07.783Z", "modified": "2026-11-10T16:40:20.209Z", "name": "東京メトロ 不正アクセスでメールアドレス 約5万9000件流出か", "description": "Detected automatically from 1 article in 1 outlet (NHK), Sep 27, 2026. Type: intrusion. Asia-Pacific countries affected: Japan. Largest figure in the headlines: 50,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/59000-20260927/" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20260927de52694", "description": "東京メトロ 不正アクセスでメールアドレス 約5万9000件流出か" } ], "x_securitystudies_occurred_on": "2026-09-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--29ff8193-37ff-5a5b-b7f3-609db7b42096", "created": "2026-11-10T16:32:07.783Z", "modified": "2026-11-10T16:32:07.783Z", "relationship_type": "related-to", "source_ref": "incident--ec034b29-0c62-505e-afce-8e73db89287b", "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e1a61d0d-4fce-5343-acc6-e7b20391bcc3", "created": "2026-11-10T16:32:07.776Z", "modified": "2026-11-10T16:40:20.204Z", "name": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Sep 27, 2026. Type: data breach; sectors: manufacturing. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/nearly-4-in-10-s-korean-industrial-technology-leaks-involve-semiconduc-20260927/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20260927000800320", "description": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10885167", "description": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data" } ], "x_securitystudies_occurred_on": "2026-09-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Manufacturing" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f68948f2-b13a-5880-92b1-b86e7dff596a", "created": "2026-11-10T16:32:07.776Z", "modified": "2026-11-10T16:32:07.776Z", "relationship_type": "related-to", "source_ref": "incident--e1a61d0d-4fce-5343-acc6-e7b20391bcc3", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--baec1a13-8eb1-5558-ab71-f81eea027b1c", "created": "2026-11-10T16:32:07.768Z", "modified": "2026-11-10T16:40:20.199Z", "name": "DICT probes possible data breach involving 48 firms in accreditation program", "description": "Detected automatically from 1 article in 1 outlet (GMA Network), Sep 26, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/dict-probes-possible-data-breach-involving-48-firms-in-accreditation-p-20260926/" }, { "source_name": "GMA Network", "url": "https://www.gmanetwork.com/news/topstories/nation/1003779/dict-probes-possible-data-breach-involving-48-firms-in-accreditation-program/story/", "description": "DICT probes possible data breach involving 48 firms in accreditation program" } ], "x_securitystudies_occurred_on": "2026-09-26", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--08582de2-6fa1-5314-a238-9ad193909537", "created": "2026-11-10T16:32:07.768Z", "modified": "2026-11-10T16:32:07.768Z", "relationship_type": "related-to", "source_ref": "incident--baec1a13-8eb1-5558-ab71-f81eea027b1c", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bb33be26-9cb1-55d1-813e-f1315b7600ad", "created": "2026-11-10T16:32:07.760Z", "modified": "2026-11-10T16:40:20.195Z", "name": "North Korean cybercriminals linked to $352M heist from crypto exchange Bitget", "description": "Detected automatically from 4 articles in 3 outlets (Channel News Asia, NK Pro, Thanh Nien News), Sep 25 to Sep 30, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: Vietnam, Singapore. Largest figure in the headlines: 352,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/north-korean-cybercriminals-linked-to-352m-heist-from-crypto-exchange-20260925/" }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/north-korean-cybercriminals-linked-to-352m-heist-from-crypto-exchange-bitget/", "description": "North Korean cybercriminals linked to $352M heist from crypto exchange Bitget" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/crypto-exchange-bitget-pauses-withdrawals-after-350-million-stolen-in-hack-6410806", "description": "Crypto exchange Bitget pauses withdrawals after $350 million stolen in hack" }, { "source_name": "Thanh Nien News", "url": "https://thanhnien.vn/gia-bitcoin-hom-nay-2892026-tin-tac-tau-tan-xong-83-trieu-usd-trong-vu-hack-bitget-185260928081934906.htm", "description": "Giá Bitcoin hôm nay 28.9.2026: Tin tặc tẩu tán xong 83 triệu USD trong vụ hack Bitget" }, { "source_name": "Thanh Nien News", "url": "https://thanhnien.vn/ceo-bitget-khong-may-lac-quan-ve-kha-nang-thu-hoi-3875-trieu-usd-bi-hack-185260930112333106.htm", "description": "CEO Bitget: 'Không mấy lạc quan về khả năng thu hồi 387,5 triệu USD bị hack'" } ], "x_securitystudies_occurred_on": "2026-09-25", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--db02ef0f-ae60-50ba-8bc8-cf8199b3ccbb", "created": "2026-11-10T16:32:07.760Z", "modified": "2026-11-10T16:32:07.760Z", "relationship_type": "related-to", "source_ref": "incident--bb33be26-9cb1-55d1-813e-f1315b7600ad", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--03abcbf0-41cf-5c95-a2ec-d4428c33673c", "created": "2026-11-10T16:32:07.760Z", "modified": "2026-11-10T16:32:07.760Z", "relationship_type": "related-to", "source_ref": "incident--bb33be26-9cb1-55d1-813e-f1315b7600ad", "target_ref": "location--0db555ff-32c2-502e-b17e-a5deb6a6218d", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--df647d8d-ec75-5718-9d55-2e53d4eef250", "created": "2026-11-10T16:32:07.751Z", "modified": "2026-11-10T16:40:20.189Z", "name": "Taiwan faces 2.6m daily cyberattacks, minister says", "description": "Detected automatically from 1 article in 1 outlet (Taipei Times), Sep 21, 2026. Type: other. Asia-Pacific countries affected: Taiwan. Largest figure in the headlines: 2,600,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/taiwan-faces-26m-daily-cyberattacks-minister-says-20260921/" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/taiwan/archives/2026/09/22/2003864682", "description": "Taiwan faces 2.6m daily cyberattacks, minister says" } ], "x_securitystudies_occurred_on": "2026-09-21", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--df2978f2-77b1-5690-aaa2-2e30a2f861ec", "created": "2026-11-10T16:32:07.751Z", "modified": "2026-11-10T16:32:07.751Z", "relationship_type": "related-to", "source_ref": "incident--df647d8d-ec75-5718-9d55-2e53d4eef250", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--290561ca-30e3-5285-a009-abd8b087da6b", "created": "2026-11-10T16:32:07.743Z", "modified": "2026-11-10T16:40:20.185Z", "name": "LTFRB flags data breach", "description": "Detected automatically from 1 article in 1 outlet (PhilStar Global), Sep 21, 2026. Type: data breach. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ltfrb-flags-data-breach-20260921/" }, { "source_name": "PhilStar Global", "url": "https://www.philstar.com/nation/2026/09/22/2557918/ltfrb-flags-data-breach", "description": "LTFRB flags data breach" } ], "x_securitystudies_occurred_on": "2026-09-21", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1b9da3b5-2c40-5379-a717-21f309a3f5ce", "created": "2026-11-10T16:32:07.743Z", "modified": "2026-11-10T16:32:07.743Z", "relationship_type": "related-to", "source_ref": "incident--290561ca-30e3-5285-a009-abd8b087da6b", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ffd64fb8-b3d1-5d11-97ee-72b2259d5004", "created": "2026-11-10T16:32:07.731Z", "modified": "2026-11-10T16:40:20.176Z", "name": "North Korean hackers behind crypto thefts across 100 countries, including Japan", "description": "Detected automatically from 1 article in 1 outlet (The Japan Times), Sep 19, 2026. Type: cryptocurrency theft; sectors: cryptocurrency. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/north-korean-hackers-behind-crypto-thefts-across-100-countries-includi-20260919/" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/09/19/japan/crime-legal/north-korean-hackers-crypto-thefts-japan/", "description": "North Korean hackers behind crypto thefts across 100 countries, including Japan" } ], "x_securitystudies_occurred_on": "2026-09-19", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f1476ab0-3323-5ac3-b877-7ff0d1f46d07", "created": "2026-11-10T16:32:07.738Z", "modified": "2026-11-10T16:40:20.181Z", "name": "LTFRB addresses security breach in online support platform", "description": "Detected automatically from 3 articles in 3 outlets (GMA Network, Philippine Daily Inquirer, The Manila Times), Sep 19 to Sep 20, 2026. Type: data breach; sectors: technology. Asia-Pacific countries affected: Philippines. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ltfrb-addresses-security-breach-in-online-support-platform-20260919/" }, { "source_name": "The Manila Times", "url": "https://www.manilatimes.net/2026/09/19/news/ltfrb-addresses-security-breach-in-online-support-platform/2428770", "description": "LTFRB addresses security breach in online support platform" }, { "source_name": "Philippine Daily Inquirer", "url": "https://newsinfo.inquirer.net/2308133/ltfrb-probes-data-breach-as-platform-goes-offline", "description": "LTFRB probes data breach as platform goes offline" }, { "source_name": "GMA Network", "url": "https://www.gmanetwork.com/news/topstories/nation/1003007/ltfrb-platform-down-amid-security-breach-probe/story/", "description": "LTFRB platform down amid security breach probe" } ], "x_securitystudies_occurred_on": "2026-09-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--08b0afc8-fe02-5675-8326-09abad2d8e8b", "created": "2026-11-10T16:32:07.738Z", "modified": "2026-11-10T16:32:07.738Z", "relationship_type": "related-to", "source_ref": "incident--f1476ab0-3323-5ac3-b877-7ff0d1f46d07", "target_ref": "location--0d9b3799-93cc-5514-bcce-1b14ce539dc0", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--95278c9a-b6e3-56cc-9452-fb41c33de6ee", "created": "2026-11-10T16:32:07.725Z", "modified": "2026-11-10T16:40:20.172Z", "name": "Gemini hacked 3 companies in first known breakout by Google’s AI", "description": "Detected automatically from 1 article in 1 outlet (Free Malaysia Today), Sep 19, 2026. Type: intrusion. Asia-Pacific countries affected: Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/gemini-hacked-3-companies-in-first-known-breakout-by-googles-ai-20260919/" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/09/19/gemini-hacked-3-companies-in-first-known-breakout-by-google-s-ai", "description": "Gemini hacked 3 companies in first known breakout by Google’s AI" } ], "x_securitystudies_occurred_on": "2026-09-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e136678e-e44d-52fa-a7a6-d509f0500d27", "created": "2026-11-10T16:32:07.725Z", "modified": "2026-11-10T16:32:07.725Z", "relationship_type": "related-to", "source_ref": "incident--95278c9a-b6e3-56cc-9452-fb41c33de6ee", "target_ref": "location--15974012-cc36-5adc-accd-f3f0770e8d4f", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--167ea1de-40ba-55d9-81b2-cbf681891ff2", "created": "2026-11-10T16:32:07.714Z", "modified": "2026-11-10T16:40:20.163Z", "name": "Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties", "description": "Detected automatically from 1 article in 1 outlet (SentinelLabs), Sep 18, 2026. Type: espionage campaign; sectors: cryptocurrency. Asia-Pacific countries affected: India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-20260918/" }, { "source_name": "SentinelLabs", "url": "https://www.sentinelone.com/labs/dont-call-us-well-call-your-apis-tradertraitor-backdoors-resurface-on-victim-with-no-crypto-ties/", "description": "Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties" } ], "x_securitystudies_occurred_on": "2026-09-18", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b4e71c1e-9c90-5ae0-9b58-182232b8dfbc", "created": "2026-11-10T16:32:07.714Z", "modified": "2026-11-10T16:32:07.714Z", "relationship_type": "related-to", "source_ref": "incident--167ea1de-40ba-55d9-81b2-cbf681891ff2", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--f7ec5c4f-7c84-552d-9249-9fd7f5a9263c", "created": "2026-11-09T04:30:08.704Z", "modified": "2026-11-09T04:30:08.704Z", "name": "WageMole", "aliases": [ "Contagious Interview", "DEV#POPPER", "DeceptiveDevelopment", "Famous Chollima", "Gwisin Gang", "Nickel Tapestry", "PurpleBravo", "Storm-1877", "TAG-121", "Tenacious Pungsan", "UNC5267", "Void Dokkaebi", "Wagemole", "WaterPlum" ], "external_references": [ { "source_name": "mitre-attack", "external_id": "G1052", "url": "https://attack.mitre.org/groups/G1052/" }, { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/wagemole/" } ], "description": "WageMole is a North Korean state-sponsored APT that employs social engineering and technology to secure remote job opportunities in Western countries, leveraging stolen personal data from the Contagious Interview campaign. Threat actors create fake identities, including passports and driver's licenses, and prepare study guides for interviews, often utilizing generative AI for well-structured responses. They target small to mid-sized businesses and utilize job platforms like Upwork and Indeed, while employing automation scripts for account creation. WageMole's activities include sharing code within their group and requesting payments through platforms like PayPal to conceal their identity." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--dc23a4b9-3aa3-52ec-a3a8-c6407a7f72db", "created": "2026-11-10T16:32:07.714Z", "modified": "2026-11-10T16:32:07.714Z", "relationship_type": "related-to", "source_ref": "incident--167ea1de-40ba-55d9-81b2-cbf681891ff2", "target_ref": "intrusion-set--f7ec5c4f-7c84-552d-9249-9fd7f5a9263c", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3a247528-c110-53bd-b87a-2b6a76eacef6", "created": "2026-11-10T16:32:07.720Z", "modified": "2026-11-10T16:40:20.168Z", "name": "Gemini hacked three companies in first known breakout by Google's AI", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 18, 2026. Type: intrusion. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/gemini-hacked-three-companies-in-first-known-breakout-by-googles-ai-20260918/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/gemini-hacked-three-companies-in-first-known-breakout-googles-ai-6396036", "description": "Gemini hacked three companies in first known breakout by Google's AI" } ], "x_securitystudies_occurred_on": "2026-09-18", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--da8a8096-1010-5dc7-b2a9-0cddd17aaa87", "created": "2026-11-10T16:32:07.720Z", "modified": "2026-11-10T16:32:07.720Z", "relationship_type": "related-to", "source_ref": "incident--3a247528-c110-53bd-b87a-2b6a76eacef6", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d92588ab-f6c4-5d8e-a541-58365baaec06", "created": "2026-11-10T16:32:07.707Z", "modified": "2026-11-10T16:40:20.158Z", "name": "資安院電腦系統遭入侵案　4人遭北檢起訴", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Sep 18, 2026. Type: intrusion. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/4-20260918/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-09-18/1060537", "description": "資安院電腦系統遭入侵案　4人遭北檢起訴" } ], "x_securitystudies_occurred_on": "2026-09-18", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--4e887678-52eb-5241-98f5-61c36a9ca958", "created": "2026-11-10T16:32:07.707Z", "modified": "2026-11-10T16:32:07.707Z", "relationship_type": "related-to", "source_ref": "incident--d92588ab-f6c4-5d8e-a541-58365baaec06", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d7d997fa-7cc2-5f06-adf2-3066585e84d0", "created": "2026-11-10T16:32:07.697Z", "modified": "2026-11-10T16:40:20.149Z", "name": "長榮航空、長榮航太深夜發重訊！證實內部系統遭駭、員工資料外洩", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Sep 16, 2026. Type: data breach; sectors: transportation. Asia-Pacific countries affected: Taiwan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20260916/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-09-16/1060128", "description": "長榮航空、長榮航太深夜發重訊！證實內部系統遭駭、員工資料外洩" } ], "x_securitystudies_occurred_on": "2026-09-16", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Transportation" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bf89b091-9b96-5d20-bd25-ed13b792178e", "created": "2026-11-10T16:32:07.697Z", "modified": "2026-11-10T16:32:07.697Z", "relationship_type": "related-to", "source_ref": "incident--d7d997fa-7cc2-5f06-adf2-3066585e84d0", "target_ref": "location--d7045683-84de-5d5f-9d3a-9c69b67a5023", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e196dacf-d3d9-5640-ae76-cdb124f2af2a", "created": "2026-11-10T16:32:07.703Z", "modified": "2026-11-10T16:40:20.153Z", "name": "Ex-HDB group director accused of breaching its database 161 times", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 16, 2026. Type: data breach. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ex-hdb-group-director-accused-of-breaching-its-database-161-times-20260916/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/hdb-former-group-director-breach-database-obtain-information-6388441", "description": "Ex-HDB group director accused of breaching its database 161 times" } ], "x_securitystudies_occurred_on": "2026-09-16", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5fbbbc7e-b216-5312-adb0-0cdf4085313b", "created": "2026-11-10T16:32:07.703Z", "modified": "2026-11-10T16:32:07.703Z", "relationship_type": "related-to", "source_ref": "incident--e196dacf-d3d9-5640-ae76-cdb124f2af2a", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--7b7ff217-776c-55c4-b841-55a61d4401c8", "created": "2026-11-10T16:32:07.691Z", "modified": "2026-11-10T16:40:20.145Z", "name": "首度承認大量重要數據被駭! 公網伺服器「裸奔」運行 中國國安部公布3案例", "description": "Detected automatically from 1 article in 1 outlet (New Talk), Sep 16, 2026. Type: intrusion. Asia-Pacific countries affected: China. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/3-20260916/" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-09-16/1060108", "description": "首度承認大量重要數據被駭! 公網伺服器「裸奔」運行 中國國安部公布3案例" } ], "x_securitystudies_occurred_on": "2026-09-16", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--44daeea1-554e-5843-b16b-7e744a8aa327", "created": "2026-11-10T16:32:07.691Z", "modified": "2026-11-10T16:32:07.691Z", "relationship_type": "related-to", "source_ref": "incident--7b7ff217-776c-55c4-b841-55a61d4401c8", "target_ref": "location--231e90b4-4920-54e1-af65-e3447d240a54", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8ce1cbff-9538-5b42-bccc-c10bef9fa864", "created": "2026-11-10T16:32:07.685Z", "modified": "2026-11-10T16:40:20.140Z", "name": "MUIS says human resource management system hit by cybersecurity incident", "description": "Detected automatically from 2 articles in 2 outlets (Channel News Asia, The Straits Times), Sep 15 to Sep 17, 2026. Type: ransomware. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/muis-says-human-resource-management-system-hit-by-cybersecurity-incide-20260915/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/singapore/muis-human-resource-payroll-management-system-cyberattack-6386546", "description": "MUIS says human resource management system hit by cybersecurity incident" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/no-evidence-large-amount-of-data-compromised-from-hr-system-hit-by-ransomware-says-muis", "description": "No evidence a large amount of data compromised from HR system hit by ransomware, says MUIS" } ], "x_securitystudies_occurred_on": "2026-09-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--db7a4fae-1456-521e-96c4-53be2c178531", "created": "2026-11-10T16:32:07.685Z", "modified": "2026-11-10T16:32:07.685Z", "relationship_type": "related-to", "source_ref": "incident--8ce1cbff-9538-5b42-bccc-c10bef9fa864", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c2b4cedc-2441-5b02-8455-2fc84aaa9cc9", "created": "2026-11-10T16:32:07.678Z", "modified": "2026-11-10T16:40:20.136Z", "name": "Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised", "description": "Detected automatically from 1 article in 1 outlet (The Straits Times), Sep 15, 2026. Type: ransomware. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-po-20260915/" }, { "source_name": "The Straits Times", "url": "https://www.straitstimes.com/singapore/courts-crime/payroll-system-of-mosques-madrasahs-hit-by-ransomware-staff-details-potentially-compromised", "description": "Payroll system of mosques, madrasahs hit by ransomware; staff details potentially compromised" } ], "x_securitystudies_occurred_on": "2026-09-15", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b3dafa51-5529-5fe7-afb4-42ab8fe73880", "created": "2026-11-10T16:32:07.678Z", "modified": "2026-11-10T16:32:07.678Z", "relationship_type": "related-to", "source_ref": "incident--c2b4cedc-2441-5b02-8455-2fc84aaa9cc9", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b214b011-e352-5ad1-8fdb-06ed77f71141", "created": "2026-11-10T16:32:07.673Z", "modified": "2026-11-10T16:40:20.131Z", "name": "Coupang forms security panel after massive data breach", "description": "Detected automatically from 2 articles in 1 outlet (The Korea Herald), Sep 15 to Sep 16, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/coupang-forms-security-panel-after-massive-data-breach-20260915/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10874209", "description": "Coupang forms security panel after massive data breach" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10876064", "description": "Coupang rejects 100,000 won compensation plan for users affected by data breach" } ], "x_securitystudies_occurred_on": "2026-09-15", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f5d5862b-148a-5851-8514-e0c3bfb9e9fd", "created": "2026-11-10T16:32:07.673Z", "modified": "2026-11-10T16:32:07.673Z", "relationship_type": "related-to", "source_ref": "incident--b214b011-e352-5ad1-8fdb-06ed77f71141", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c3a3cbb8-d115-5b62-ac52-2b710e0fa9b9", "created": "2026-11-10T16:32:07.666Z", "modified": "2026-11-10T16:40:20.126Z", "name": "CenterPoint Energy discloses customer data breach in SEC filing", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 14, 2026. Type: data breach; sectors: energy. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/centerpoint-energy-discloses-customer-data-breach-in-sec-filing-20260914/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/centerpoint-energy-discloses-customer-data-breach-in-sec-filing-6384491", "description": "CenterPoint Energy discloses customer data breach in SEC filing" } ], "x_securitystudies_occurred_on": "2026-09-14", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Energy" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6f6c0d1b-16bf-5d49-8457-dfff49b62923", "created": "2026-11-10T16:32:07.666Z", "modified": "2026-11-10T16:32:07.666Z", "relationship_type": "related-to", "source_ref": "incident--c3a3cbb8-d115-5b62-ac52-2b710e0fa9b9", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1a2cb03c-a257-5861-8325-1839d810c1be", "created": "2026-11-10T16:32:07.659Z", "modified": "2026-11-10T16:40:20.119Z", "name": "Revolut confirms sensitive customer data breach, falling for fake government requests", "description": "Detected automatically from 1 article in 1 outlet (Channel News Asia), Sep 12, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: Singapore. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/revolut-confirms-sensitive-customer-data-breach-falling-for-fake-gover-20260912/" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/business/revolut-confirms-sensitive-customer-data-breach-falling-fake-government-requests-6380536", "description": "Revolut confirms sensitive customer data breach, falling for fake government requests" } ], "x_securitystudies_occurred_on": "2026-09-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--76df8cbd-8d3c-573d-b864-ed466c970ce6", "created": "2026-11-10T16:32:07.659Z", "modified": "2026-11-10T16:32:07.659Z", "relationship_type": "related-to", "source_ref": "incident--1a2cb03c-a257-5861-8325-1839d810c1be", "target_ref": "location--b22cb7ad-b9b2-5b37-8ef2-4d0765314d7e", "description": "affected country" } ] }