Cybersecurity Incident

Proposed class action settlement administered by Simpluris, Inc. over The Merchant of Tennis cybersecurity incident (Victor Estrada v. The Merchant of Tennis, Inc. et al., Case No. 24STCV09656, Los Angeles Superior Court). Settlement provides cash payments and other benefits to affected individuals.

Leadership read: A breach is a governance event before it is a technical one. For The Merchant of Tennis, Inc. in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire…

curated · 2026-10-30 · context →

Bennett Jones LLP confirmed it was compromised in a data breach, the third named victim so far in a broader campaign targeting Bay Street law firms to gain access to client files.

curated · 2026-10-30 · context →

US-based IT managed services provider ChiBiTek was compromised by the n0n ransomware operation, which used credential stuffing against FortiGate SSL-VPN portals to gain access, then stole and encrypted data and in some cases deleted data and backups.

curated · 2026-10-30 · context →

BCD Travel is the subject of a third-party attack that exposed traveler personal data. A law firm is soliciting affected travelers for class action claims, indicating a likely legal and regulatory response.

curated · 2026-10-30 · context →

GMO's cybersecurity team is investigating a hacker group that posted GMO client personal data on a website, which was taken down Wednesday. The group has since gone silent.

Leadership read: A breach is a governance event before it is a technical one. For GMO in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-10-29 · context →

Hackers stole about 2.6 million customer records from So-net, the Sony-owned Japanese ISP, including data for So-net and Plala customers, 54,401 email account passwords and 16 bank account records.

curated · 2026-10-29 · context →

Belgium's federal finance and tax agency (FOD Financiën) confirmed a cyberattack that forced several digital services offline, including the MyMinfin tax portal, Tax-on-web and Biztax. The agency says the attack was contained within hours with no confirmed data access, but restoration will take considerable time in an isolated environment.

curated · 2026-10-29 · context →

A US federal OIG audit found GSA repeatedly left controlled unclassified information exposed in its Google Drive, including building site plans, security layouts, and employee PII, with 116 files found improperly shared with all GSA users in a limited search and a DLP tool that is misconfigured and incompletely managed.

Leadership read: A breach is a governance event before it is a technical one. For General Services Administration in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a…

curated · 2026-10-29 · context →

RMS Cloud suffered a cyberattack, which has been followed by a hotel booking scam targeting Western Australian travellers. The source excerpt is truncated, so the attack's scale and technical details are unclear.

curated · 2026-10-29 · context →

Lumara Bio USA is the subject of a data breach in which current and former employee information, including Social Security numbers, may have been exposed. A plaintiff-side law firm is soliciting class action claims.

curated · 2026-10-29 · context →

Korean corporate card and expense-management fintech Gowid disclosed a breach on 27 Oct 2026. Customer data (contact names, emails, phone numbers, job titles, addresses, masked card numbers, GWS billing details) was exposed, and abnormal recurring charges hit its GWS subscription billing function. The company reported the incident to KISA and blocked the attack path, IP and affected payment function.

Leadership read: A breach is a governance event before it is a technical one. For 고위드 (Gowid) in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor; that…

curated · 2026-10-28 · context →

Mirae Asset Global Investment was also named as a victim in the same series of Korean financial-sector breaches, under FSS investigation.

Leadership read: A breach is a governance event before it is a technical one. For Mirae Asset Global Investment in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or…

curated · 2026-10-28 · context →