Cybersecurity Incident

CTOS Digital's credit reporting environment was accessed by an unauthorised party (announced 23 Sept), exposing a limited subset of consumer data. CTOS Score and CCRIS-related services remain offline pending independent validation; Kenanga estimates FY26 core net profit could fall by RM22 million if outage runs to end-December, and it downgraded the stock.

Leadership read: A breach is a governance event before it is a technical one. For CTOS Digital Bhd in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Asia, watch whether the response is a hire or a contractor…

curated · 2026-10-14 · context →

KDB Capital is among credit finance companies affected by suspected AI agent-driven cyberattacks in South Korea, part of a 16-firm sector incident.

curated · 2026-10-14 · context →

Websites and apps for five Ahold Delhaize USA grocery banners have been offline for several days while the parent company responds to a cybersecurity incident.

Leadership read: A breach is a governance event before it is a technical one. For Ahold Delhaize USA in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a…

curated · 2026-10-14 · context →

Business customers in two lawsuits allege callers impersonating them passed First Horizon's phone-based identity checks, resulting in more than $23 million in fraudulent wires.

curated · 2026-10-14 · context →

Sidebar headline in a TechRound article says ASOS customers received a 'hacked' alert in the app, suggesting a security incident at the retailer.

curated · 2026-10-13 · context →

Fortnum Private Wealth agreed to pay a $1.35m penalty plus ASIC's costs to settle proceedings over a cyber governance failure that occurred between April 2021 and May 2023.

Leadership read: A breach is a governance event before it is a technical one. For Fortnum Private Wealth in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Oceania, watch whether the response is a hire or a…

curated · 2026-10-13 · context →

Attackers remotely took control of refrigeration controllers at hundreds of French supermarkets on the night of October 11, warming fridges and freezers up to 50°C and forcing stores to discard food. The entry point was a Danfoss store-controller that maintenance firms manage remotely.

Leadership read: A breach is a governance event before it is a technical one. For Les Mousquetaires in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a…

curated · 2026-10-13 · context →

TFG London, owner of Hobbs, Phase Eight and Whistles, discovered a cybersecurity incident on October 11 that took several IT systems offline and delayed customer orders. Incident response and business continuity plans were activated and external cybersecurity specialists brought in. Scope of any customer data compromise is still unknown.

Leadership read: A breach is a governance event before it is a technical one. For The Foschini Group (TFG London) in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire…

curated · 2026-10-13 · context →

TFG London, owner of Hobbs, Phase Eight and Whistles, disclosed a cyber-attack on its websites and IT systems across three UK retail chains that may have compromised customer personal data. It follows a recent attack on Asos.

curated · 2026-10-13 · context →

Funen-based IT services firm Pays ApS had its authorised access to Denmark's Central Register of Persons (CPR) abused via an account protected by the password '123456'. The intrusion affected data on 8.8 million people; the attacker ran about 14 million automated searches between Sept 10 and Sept 20, and was detected Oct 2. Pays' website is offline and its managing director confirmed the access was exploited.

curated · 2026-10-13 · context →

Cyberattack on refrigeration control software took over freezers and fridges at about 80 Carrefour stores in France, pushing temperatures to 50°C, spoiling stock and sparking fires. French PM has tasked ANSSI with investigating.

curated · 2026-10-13 · context →

Research by AI security startup AIR found a network filtering flaw in Vercel Sandbox that could let AI agents exploit certificate validation to move data outside approved networks.

Leadership read: A breach is a governance event before it is a technical one. For Vercel in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Oceania, watch whether the response is a hire or a contractor; that…

curated · 2026-10-13 · context →