Security Breach

Hackers breached a US military personnel database and exfiltrated records belonging to millions of service members during a months-long intrusion, according to reports published on September 30, 2026. The breach went undetected for an extended period, raising fresh questions about how the military protects sensitive personnel data and whether adversaries could exploit the stolen information.

China has described an intrusion into its embassy in Tokyo as a serious breach of diplomatic protections, condemning the incident under the rules governing diplomatic premises. The statement signals a sharp protest to Japan over security at the Chinese mission. Details about who carried out the intrusion, whether anyone was detained, and Japan's response have not been confirmed, but the language suggests Beijing considers the matter grave and is demanding accountability.

Reports say 5.3 billion won was stolen in a security breach involving MetaMask and Near, with a further 2 trillion won in Ethereum moved. The figures have drawn widespread attention among Korean-speaking crypto users, who are questioning the safety of wallet software and the scale of funds shifted on the Ethereum network.

The city of McMinnville, Oregon, missed a legal deadline to notify the public about a data breach, and officials are declining to explain why. The KPTV report has raised questions about transparency and compliance with state disclosure laws, though details about the breach itself, the data affected, and the number of residents impacted have not been made public.

Trading infrastructure firm DriveWealth has disclosed a data breach affecting 62,074 people, according to reports circulating online. The incident exposed personally identifiable information, raising concerns about security practices at firms handling brokerage and investment data. Details on how the breach occurred and what specific data types were compromised have not yet been widely reported.

US lawmaker Mike Waltz accused Russia and China of killing the United Nations panel responsible for snapback sanctions on Iran, which would have restored international penalties if Tehran breached the 2015 nuclear deal. He criticised the two powers for blocking the mechanism at the UN. The charge highlights ongoing tensions over enforcement of Iranian nuclear restrictions and great-power divisions at the Security Council.

Kookmin Bank and Hana Bank have reported customer data leaks, following a breach disclosed at Shinhan Bank. The back-to-back disclosures suggest a possible coordinated or systemic security lapse affecting major South Korean lenders. Customers and regulators are expected to press for details on what data was exposed and how the banks plan to respond.

KB Kookmin Bank, one of South Korea's largest lenders, has suffered an information leak, according to Yonhap News Agency. The incident is raising broader concerns that customer data breaches could extend to other banks in the country's financial sector, prompting questions about data security practices across the industry.

A reported data breach at the Pentagon is said to have exposed the Social Security numbers of roughly three million people. The claim is circulating widely in cybersecurity discussions, but no details have been confirmed about how the breach occurred, when it took place, or who is affected.

A series of data breaches at South Korean banks has put customer information at risk, prompting security firm AhnLab to advise the public to stop reusing passwords across services as a first defensive step. The incidents add to growing concerns over financial-sector cybersecurity in South Korea, with customers being urged to use unique passwords and watch for unauthorized account activity.

DentaQuest, a US dental insurance provider, has suffered a data breach affecting roughly 15 million people. Exposed information reportedly includes health and personal data. The incident adds to a string of large healthcare-sector cyberattacks, raising renewed concerns about the security of sensitive medical records held by insurers and the potential risk of identity theft for affected patients.

MetaMask disclosed an infrastructure security incident affecting its Ethereum staking service after an attacker redirected validator rewards to an attacker-controlled wallet. Independent analysts report roughly 16,965 validators affected, with mass exits under way as users pull funds. The breach has reignited debate over security risks in staking services tied to major crypto wallet providers.

A breach at the Pentagon reportedly exposed unencrypted records belonging to around 3 million people. Reports indicate sensitive personal data was left unprotected, raising concerns over how government systems safeguard information. Security experts and commentators are likely to press for details on the cause of the breach, who was affected, and what steps are being taken to prevent future lapses in data protection.

A weekly roundup of security scandals covers three main stories: connected cars leaking owners' location and personal data, a pair of scammers running fake iPhone sales schemes, and a crypto heist worth $351 million. The stories highlight growing privacy and fraud risks across consumer technology and digital finance, prompting discussion about how much data vehicles collect and how easily buyers are being deceived.

French computer hardware retailer LDLC has reportedly suffered a fourth data breach, according to coverage by Next. The news is circulating among French-speaking cybersecurity observers, who are flagging the repeated failures of the company to protect customer data. The frequency of the incidents is drawing attention to LDLC's security practices.

A large data breach involving United States military information is being reported as the week's standout security story. Details about the scale of the breach, the data exposed, and who may be responsible have not yet been confirmed. Observers are closely watching for official statements on potential impacts to national security and affected personnel.

A Pentagon data breach has exposed the Social Security numbers of millions of people, according to reports from the United States. The scale of the leak and who is responsible remain under scrutiny, and officials have not yet detailed how the exposure occurred or what support will be offered to those affected.

Pay Tel Communications, a US prison telephone provider, has suffered a data breach that exposed Social Security numbers, according to reports from Claim Depot. The incident raises concerns about the security of sensitive personal data held by companies serving the corrections industry, and about potential identity theft risks for affected individuals. Details on the number of people impacted and the method of the attack have not yet been disclosed.

Venture capital firm Bessemer Venture Partners has reportedly suffered a data breach that exposed Social Security numbers. Details on how many people are affected or how the breach occurred have not been confirmed, but the exposure of sensitive identifiers raises identity theft concerns for those involved.

The Pentagon has suffered a data breach exposing the personal information of millions of US service members. Details about how the breach occurred and what specific data was compromised remain limited, but the scale makes it one of the larger security incidents involving US military personnel records. The breach is likely to renew scrutiny of how the Defence Department safeguards sensitive personal data.

NEAR Intents is publicly demanding the return of roughly $3.8 million in funds lost in a security breach. The team is pressing those holding the stolen assets to send them back, the latest in a series of crypto exploits where projects appeal directly to attackers or intermediaries for restitution. The size of the loss and the public demand have drawn attention across the crypto community.

Security Industry Specialists, a firm providing security personnel, reportedly suffered a data breach that exposed Social Security numbers. A lawsuit-tracking outlet has flagged the incident, suggesting potential legal action over the exposure of sensitive personal data. Affected individuals may face heightened identity theft risks, and observers are watching for confirmation of the breach's scope and the company's response to those impacted.