Data Breaches
US Government Confirms New Breach Affecting Federal Systems in Sector-Advisory Disclosure
Another federal-agency disclosure — sector-advisory tracking for federal-adjacent defenders this week.
Data Breaches
Nissan Oracle PeopleSoft Campaign Reportedly Targeted 100 Organizations
One confirmed victim, a reported 99 more not yet named — Oracle PeopleSoft customers stay in patch-verification posture this week.
Data Breaches
Aflac Japan Discloses Data Breach Affecting 4.38 Million People
Another scale-significant Japanese-sector disclosure: Aflac Life Insurance Japan says intruders sat in its policyholder portal for ten days and exfiltrated the personal data of roughly 4.38 million customers and agents.
Data Breaches
Nissan Discloses Employee Data Breach Linked to Oracle PeopleSoft Zero-Day
A high-profile Oracle PeopleSoft customer disclosure: Nissan says current and former employees' data was exposed via CVE-2026-35273, with sector-advisory implications for the broader Oracle exploitation cycle.
Data Breaches
UK and Insurer Reporting Pegs Jaguar Land Rover Incident at $2.5 Billion
Fresh reporting around the Jaguar Land Rover cyber incident pegs the toll near $2.5 billion and points to Russian-linked actors — a scale-significant automotive-manufacturing disclosure whose figure source and attribution both warrant careful reading.
Data Breaches
Insurance Regulator Body NAIC Confirms Breach Linked to Oracle PeopleSoft Flaw
Another insurance-sector confirmation in the Oracle PeopleSoft vulnerability cycle: the body that supports US state insurance regulators says attackers reached its environment through CVE-2026-35273, exposing statutory financial and credit-rating data.
Data Breaches
One Million Passport Records Reported Leaked Online From Cannabis-Club App
Identity-data exposures continue at scale. A cannabis-club membership platform reportedly left nearly a million passports and ID photos reachable on the open internet with no password — a consumer-notification story for the week.
Data Breaches
Polymarket Discloses $3.1M User-Fund Theft After Vendor Compromise
A high-profile prediction-market disclosure of user-fund theft: a compromised third-party vendor injected a malicious script into Polymarket's frontend, draining roughly $3.1 million from eleven user wallets, with the platform pledging full refunds.
Data Breaches
Tata Electronics Confirms Cyberattack After Reported Data Leak
An Indian industrial-sector confirmation — sector-advisory work for the week. Tata Electronics says a recent incident hit some of its systems while an extortion group leaks data it claims to have stolen, putting manufacturing and supply-chain risk back in focus.
Data Breaches
KDDI Discloses Breach Affecting Six Japanese ISPs and 14.2 Million Email Credentials
A scale-significant telecom disclosure from Japan: KDDI says a breach of an email platform it operates for six internet service providers may have exposed up to 14.22 million customer email credentials.
Healthcare Cybersecurity
Phishing Attack on Healthcare Firm Xsolis Affects 1.4 Million People
Another healthcare-sector disclosure at scale — a single phishing email at an AI utilization-management vendor exposed the protected health information of nearly 1.4 million patients, and it reads as sector-advisory work for the week.
Data Breaches
Madison Square Garden Breach: ShinyHunters Leaks 26 Million Records
ShinyHunters published roughly 45GB of Madison Square Garden data after an extortion deadline passed, exposing millions of customer records and biometric facial-recognition files — a high-profile entertainment-venue incident with sector-wide implications.