Last updated
Zip Co.: Cybersecurity Incident
Australian payments firm Zip Co. flagged A$10.1 million ($7.1 million) in expenses tied to an external fraud event in the US, and its shares roughly halved.
Source: Stockhead (ASX small-caps)
- Who
- Zip Co. · Technology · USA
- What happened
- Australian payments firm Zip Co. flagged A$10.1 million ($7.1 million) in expenses tied to an external fraud event in the US, and its shares roughly halved.
- When
- 2026-10-23
Market context: The wider read — a Talent Market Index of 97.6 (Neutral), down 3.4 month-on-month — shows Americas signal flow easing (-15.6pts).
Zip Co.: 1 signal in the last 90 days — in line with the Technology median of 1 across 150 tracked companies.
MitchelLake in this thematic
From the MitchelLake archive
More signals across Technology
Cybersecurity Incident · Americas
DigiCert →DigiCert disclosed a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.
Cybersecurity Incident · Americas
Splunk →Splunk MCP Server contains a critical Remote Code Execution vulnerability (CVE-2026-76404, CVSS 9.1) caused by insecure deserialization in credential management, affecting versions prior to 1.2.1. Additionally, the MCP protocol specification itself contains a structural vulnerability allowing automatic fetching of attacker-controlled links. Both exposures are high-risk given the server's access to enterprise observability crown jewels (logs, alerts, dashboards, real-time search).
Cybersecurity Incident · Americas
Huawei Technologies →Huawei faces criminal racketeering trial in New York with charges including theft of trade secrets, plotting to steal U.S. trade secrets, wire and bank fraud, sanctions violations in North Korea, and installation of surveillance equipment used by Iran to monitor protesters in 2009.
Cybersecurity Incident · Americas
RingCentral →ShinyHunters extortion group breached RingCentral in July 2026, stealing personal information from 1.6 million customer accounts. Incident confirmed via Have I Been Pwned data breach notification service.
Cybersecurity Incident · Americas
KKR →Hackers devised phishing websites targeting employee credentials at KKR and multiple other major financial institutions and private equity firms. Attack coordinated by threat actors operating under names including Redact, Pink, Falcon and Helix.
Cybersecurity Incident · Americas
Klue →Market research company Klue experienced a data breach. Stolen customer data is being deleted by the original hacking group, but a second group of hackers is now making ransom threats.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Scale-up →
Regulated-market scale-ups add leadership layers earlier than their headcount implies.
- Executive Search: Americas →
Our Americas practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗