Cybersecurity Incident

Hotel group Wyndham exposed customer data through a hardcoded credential left in its customer-facing app, allowing anyone to access customer records. The company declined to say whether it can check for past unauthorized access.

Leadership read: A breach is a governance event before it is a technical one. For Wyndham in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that…

curated · 2026-11-09 · context →

York University disclosed a breach in which a threat actor stole personal information submitted through its online forms, with records reaching back to 2007.

Leadership read: A breach is a governance event before it is a technical one. For York University in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a…

curated · 2026-11-09 · context →

Amplifon, a hearing-care provider, has reportedly suffered a data breach exposing Social Security numbers and health records of members and patients. Plaintiff firms are soliciting class action claims.

curated · 2026-11-08 · context →

Japanese manufacturer Iris Ohyama, operator of the Iris Plaza shopping platform, disclosed that personal data of about 7.7 million people may have been exposed through unauthorized access to a third-party cloud service it uses.

Leadership read: A breach is a governance event before it is a technical one. For Iris Ohyama in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-11-08 · context →

Who Gives A Crap confirmed customer data was exposed in a breach of third-party software it relies on.

Leadership read: A breach is a governance event before it is a technical one. For Who Gives A Crap in consumer, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Oceania, watch whether the response is a hire or a…

curated · 2026-11-07 · context →

Royal Cornwall Hospitals NHS Trust suffered a data exposure affecting 8,003 current and former staff and non-trust workers. Sickness absence records were retained in an FOI disclosure spreadsheet and revealed through pivot tables. A review found the subsequent helpline was poorly prepared, placing emotional strain on staff and running for 11 weeks rather than the planned two.

Leadership read: A breach is a governance event before it is a technical one. For Royal Cornwall Hospitals NHS Trust in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a…

curated · 2026-11-07 · context →

The Sussex County Prosecutor's Office (County of Sussex, New Jersey) disclosed a data privacy incident after a network disruption detected around August 10, 2026 that involved personal information.

curated · 2026-11-07 · context →

The wallet system at Bitget was compromised in a North Korean-linked theft, with related addresses linked to the wider attack cluster.

Leadership read: A breach is a governance event before it is a technical one. For Bitget in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Oceania, watch whether the response is a hire or a contractor; that…

curated · 2026-11-06 · context →

Singapore telehealth provider Doctor Anywhere disclosed a data breach caused by a 'malicious cyber incident' involving an unknown third party. The number of affected customers and the type of data compromised have not been disclosed.

curated · 2026-11-06 · context →

South Korean crypto exchange Gopax halted trading after receiving hacking threats, a precautionary security suspension rather than a confirmed breach.

Leadership read: A breach is a governance event before it is a technical one. For Gopax in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-11-06 · context →

Stockal, an Indian platform for investing in US stocks, faces allegations that an unauthorised third party accessed around 26 customer accounts using valid login credentials. Holdings in about 13 accounts were allegedly liquidated and reinvested in thinly traded Zhibao Technology microcap shares, with investor-reported losses reportedly above INR 100 Cr. An FIR has reportedly been registered in Bengaluru.

curated · 2026-11-06 · context →

South Korean brokerage Mirae Asset Securities disclosed cyberattacks that leaked account numbers for about 3,800 customers and personal data for 35,255 current and former employees and contractors, including names, employee IDs, emails, phone numbers and passwords.

curated · 2026-11-06 · context →