Cybersecurity Incident

Aflac Japan data breach affecting 4.38 million customers

curated · 2026-07-02 · context →

Critical vulnerabilities (CVE-2026-38059, CVE-2026-38057) in ST Engineering iDirect iQ-Series Terminals affect Evolution iQ, 3315, and 9-Series models (versions ≤4.5.2.1). Missing authentication on REST API endpoints allows unauthetticated attackers to retrieve sensitive device information (serial number, Device ID, Terminal Private Key identifier, MAC address, firmware version) and cause denial-of-service. Affects critical infrastructure sectors worldwide (Communications, Defense, Energy, Government, Transportation).

Leadership read: A breach is a governance event before it is a technical one. For ST Engineering iDirect in Telecommunications, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a…

curated · 2026-07-02 · context →

StubHub faced massive ticket fulfillment failures during World Cup ticket resales, resulting in a federal class-action lawsuit in New York. Hundreds or thousands of customers purchased tickets that did not exist, were revoked without warning, or were erased due to infrastructure issues. StubHub blamed FIFA's ticketing infrastructure; FIFA disputed this and blamed third-party platforms. Customers experienced order cancellations, conflicting status updates, and failure of the company's FanProtect Guarantee.

curated · 2026-07-02 · context →

Singapore High Court dismissed Standard Chartered Bank's appeal to strike out a US$2.7 billion civil suit linked to the 1MDB scandal. The bank is accused of authorizing over 100 intra-bank transfers that facilitated concealment of misappropriated funds while ignoring red flags. Case will proceed to full trial.

curated · 2026-07-01 · context →

KnowBe4 hired a North Korean operative as a remote software engineer in 2024. The operative attempted to manipulate session history files and transfer potentially harmful files on the provided Mac workstation before detection.

Leadership read: A breach is a governance event before it is a technical one. For KnowBe4 in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that…

curated · 2026-06-30 · context →

Super Micro's facilities raided as part of Taiwan's investigation into alleged smuggling of Nvidia chips into China via Super Micro servers. Regulatory enforcement action targeting the company's supply chain and export compliance.

curated · 2026-06-29 · context →

SitusAMC, a mortgage vendor, suffered a data breach in November 2025 affecting approximately 662,000 individuals. The company agreed to a $5.3 million settlement.

curated · 2026-06-26 · context →

Dialog experienced a data exposure incident affecting a private group that included personal information of a senior White House intelligence official and an active-duty special operations officer. The Pentagon is investigating.

Leadership read: A breach is a governance event before it is a technical one. For Dialog in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that…

curated · 2026-06-26 · context →

Market research company Klue experienced a data breach. Stolen customer data is being deleted by the original hacking group, but a second group of hackers is now making ransom threats.

curated · 2026-06-25 · context →

Instructure (Canvas LMS provider) suffered the largest educational data breach on record in May 2026, impacting 275 million students, teachers, and staff across approximately 9,000 education institutions.

curated · 2026-06-25 · context →

One Medical (Amazon-owned primary care provider) under investigation for data breach involving unauthorized access to third-party file storage system containing archived patient data for One Medical and Iora Health/One Medical Seniors patients

curated · 2026-06-24 · context →

Bank Negara Malaysia fined Aeon Credit RM520,000 for failures in targeted financial sanctions compliance, including onboarding a sanctioned entity and delayed account freezing due to staff oversight gaps and deficient SOPs.

Leadership read: A breach is a governance event before it is a technical one. For Aeon Credit Service (M) Bhd in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a…

curated · 2026-06-24 · context →