Last updated
Staples: Cybersecurity Incident
Hackers accessed Staples' internal customer-support system and used active employee sessions to issue more than 15,000 gift cards worth over $5 million; about $425,000 in redeemed cards traced to the breach.
Source: Risky Business News
- What happened
- Hackers accessed Staples' internal customer-support system and used active employee sessions to issue more than 15,000 gift cards worth over $5 million; about $425,000 in redeemed cards traced to the breach.
- Who
- Staples · USA
- When
- 2026-10-19
- Source
- Risky Business News
- So what
- A breach is a governance event before it is a technical one.
The leadership read
A breach is a governance event before it is a technical one. For Staples in the sector, the hiring consequence is rarely more engineers; it is senior accountability: security, risk and data governance reporting high enough to change decisions. Across Americas, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: MitchelLake's Talent Market Index sits at 122.7 (Hot), up 17.8 on the prior month; Americas hiring signal is running rising (+34.4pts).
Staples: 1 signal in the last 90 days; 2 tracked across 158 days.
MitchelLake in this thematic
Also at Staples →
More signals across Americas
Cybersecurity Incident · Americas
Paradigm Healthcare Services →Paradigm Healthcare Services suffered an intrusion detected in October 2025 that exposed data of about 970,000 Medi-Cal members; notifications to individuals were delayed by nearly a year.
Cybersecurity Incident · Americas
23andMe →23andMe's successor agreed to pay $6 million to California to settle allegations it failed to properly protect customer data before a 2023 breach.
Cybersecurity Incident · Americas
Educational Testing Service (ETS) →Assessment contractor Educational Testing Service suffered a months-long data breach. The California Department of Education has warned all public school students that their data was stolen.
Cybersecurity Incident · Americas
Conduent →Conduent agreed to pay $80m to settle a class action over its 2024 cyber incident, which affected healthcare data of about 62 million people.
Cybersecurity Incident · Americas
Brightmoor Hospice, LLC →Brightmoor Hospice, LLC of Griffin, Georgia is notifying of a data security incident that may have exposed protected health information. It discovered suspicious activity around March 25, 2026, and public notification came October 16, 2026.
Cybersecurity Incident · Americas
Anne Arundel County, Maryland →Anne Arundel County, Maryland confirmed an August data breach after ransomware claims; an intruder stole files from government systems and the scope of exposed data is still being assessed.
Where this lands in our work
- Executive Search: Americas →
Our Americas practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗