Sergiu Gatlan reports: Binance, the world’s largest crypto exchange, has denied claims of a new security breach made by a threat actor using the ‘ShinyHunters’ handle on a newly emerged underground cybercrime forum. This follows the threat actor, believed to impersonate the ShinyHunters extortion gang, putting up for sale what they claimed were records of...

Seen on Epichealth: 4 November 2026 What has happened Epichealth operates four medical clinics including the Warrnambool Medicare Urgent Care Clinic,  Epichealth Ocean Grove Marketplace, Epichealth Ocean Plaza, and Epichealth Portarlington. Epichealth recently experienced a cyber incident, during which an unauthorised third party accessed a part of our IT systems. As soon we became aware...

Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets. The hacking software, called Artex, is an open source autonomous penetration testing tool, meaning software that automatically probes computer systems for...

Robbie Meredith reports: Parents have been told to be alert for unexpected emails or phone calls after a Northern Ireland school app used by almost 50,000 people was affected by a data breach. The Equipple app is used by many schools to schedule and book meetings between parents and teachers. There have been concerns that...

There’s yet another update in the Coupang data breach case. Previous coverage on DataBreaches.net of the incident, enforcement actions, and Coupang’s objections to the fines and enforcement actions can be found in links under this update. Now Jeong Hye-Jeong reports: A Seoul court on Thursday rejected Coupang’s request to suspend a 423.6 billion won ($315.6 million) fine...

November 3, 2026: ROCHESTER, N.Y.-U.S. Attorney Michael DiGiacomo announced today that a federal grand jury has returned an indictment charging Ryan James Roach, 35 of Saskatchewan, Canada, and Mathiew James Stubbings, 41, of Ontario, Canada, with conspiracy to obtain information from a protected computer and to cause damage to a protected computer, obtaining information from a...

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

The post Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist appeared first on SecurityWeek.

In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.

The post North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack appeared first on SecurityWeek.

Ahmad Umar Agha (also known as Th3Pr0) had spent more than a decade as a fugitive for targeting of Western media entities, businesses, NGOs, and U.S. and allied government entities October 29 – Today a federal district court in the Eastern District of Virginia sentenced Ahmad Umar Agha to 42 months in prison for his...

DataBreaches.net previously covered the 2023 Lehigh Valley Health Network breach by AlphV (aka “BlackCat”). The breach garnered a lot of public attention when  the threat actors crossed a line by posting nude pictures of patients on their leak site. In 2024, patients settled civil litigation for $65 million. Now HHS has settled its own charges...

Kyodo News reports: Leading beverage manufacturer Suntory Holdings Ltd. on Monday joined a growing list of firms reporting personal data leaks, saying information relating to around 100,000 people, including employees, was leaked following unauthorized access to an external cloud service used by the group. Suntory said it has not confirmed any misuse of the information...

Dickson Tam reports: The Office of the Privacy Commissioner for Personal Data said it has received multiple notifications of data breaches involving Hong Kong Airlines, Cathay Pacific, Malaysia Airlines, as well as electronics retailers Yoho Hong Kong and Broadway. As at 30th October, the authority had logged 51 complaints and 48 enquiries related to these...

Killingly Public Schools (“KPS”), a school district located in Killingly, Connecticut, was the victim of a recent data privacy incident involving certain personally identifiable information (“PII”). What Happened: In October 2025, KPS detected a disruption to its computer network. Upon learning of the activity, KPS took immediate action to secure its systems which included taking...

Lee Hae-rin reports: HYBE, the music agency behind K-pop group BTS, disclosed a cyberattack that exposed personal information of current and former employees and business partners, including resident registration numbers, credit card numbers and medical records. In an apology posted on its website, Oct. 18, the company said an internal security inspection detected unauthorized access...

James Hopkin reports: The Sault’s police chief says it’s currently unclear how many anonymous tips received by Crime Stoppers locally were potentially exposed in a massive data breach. Both the Sault Ste. Marie Police Service and the Anishinabek Police Service have paused their relationship with the local Crime Stoppers chapter — causing the organization to...

David DiMolfetta reports: Searchable records identifying more than 41,000 current and former Department of Homeland Security employees and contractors were published Wednesday, exposing contact information and details about sensitive assignments across the department, according to the organizations behind the release. The transparency nonprofit Distributed Denial of Secrets — known as DDoSecrets — said it received...

Maddie Baker and Spencer Landers As cyberattacks continue across Japan, companies are coming to realize the great financial risk of such attacks if their lax cybersecurity systems cause millions of peoples’ personal information to be leaked. Times Car, which saw personal data that included the driver’s licenses of 1.46 million people leaked in September, is learning...

CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system earlier this week, Yonhap News Agency reported Wednesday. Bithumb discovered the breach of its in-house mobile system — the platform used by employees to communicate internally — on Tuesday and notified...

In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of healthcare under the wording of the California Confidentiality of Medical Information Act. With that opinion as precedent, PowerSchool failed to get plaintiffs’ complaint referring to it as a provider of healthcare dismissed. But...

Nicholas Jones reports: A major cyber attack has caused delays to coronial investigations, with one grieving family wanting answers after their mother’s unexpected death telling Stuff the wait had been “incredibly stressful”. The family has waited nine months and counting for answers after the death and had been told the ransomware attack had contributed. “We...