Hackmanac

🚨Cyber Alert ‼️ 🇨🇿Czech Republic - 𝗪𝗮𝗿𝗵𝗼𝗿𝘀𝗲 𝗦𝘁𝘂𝗱𝗶𝗼𝘀 Warhorse Studios, a Czech video game developer, confirmed a cyberattack involving unauthorised access to its internal systems and company data. The company is investigating the breach.

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗡𝗧𝗧 𝗗𝗼𝗰𝗼𝗺𝗼 NTT Docomo confirmed a third-party data breach affecting 443,495 customers of its Docomo Hikari “plala (S Course)” service.

Threat actor: Not specified Sector: Telco Data exposure (claimed): 443,495 customer records Data type: Names, telephone numbers, dates of birth, genders, email addresses, So-net account login IDs, internet connection IDs Observed: Oct 27, 2026 Status: Confirmed ESIX©: 5.76

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗡𝗧𝗧 𝗗𝗼𝗰𝗼𝗺𝗼 NTT Docomo confirmed a third-party data breach affecting 443,495 customers of its Docomo Hikari “plala (S Course)” service.

🚨Cyber Alert ‼️ 🇬🇧UK - 𝗕𝗿𝗶𝘀𝘁𝗼𝗹 𝗖𝗶𝘁𝘆 𝗖𝗼𝘂𝗻𝗰𝗶𝗹 The Wallstreet hacking group claims to have breached Bristol City Council. The attackers allegedly compromised documents, databases, emails, personal data and media files.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗧𝗿𝗼𝗽𝗶𝗣𝗮𝘆 The threat actor Emzywemzy claims to have breached TropiPay, allegedly compromising 294,998 user records. The reportedly stolen data includes personal information, password hashes, and KYC verification records in JSON format.

Threat actor: Emzywemzy Sector: Financial Data exposure (claimed): 294,998 user records Data type: Names, email addresses, phone numbers, physical addresses, SHA-1 password hashes, dates of birth, KYC verification information

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗝𝘂𝗺𝗼𝗻𝗷𝗶 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 The Safepay ransomware group claims to have breached Jumonji University. Threat actor: Safepay Sector: Education Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 26, 2026 Status: Pending verification ESIX©: 5.23

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗨𝗻𝗶𝘀𝗮 The Gentlemen ransomware group claims to have breached Unisa. Threat actor: The Gentlemen Sector: Wholesale / Retail Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 26, 2026 Status: Pending verification ESIX©: 5.58

🚨Cyber Alert ‼️ 🇮🇹Italy - 𝗦𝗽𝗼𝗻𝘁𝗶𝗻𝗶 The Gentlemen ransomware group claims to have breached Spontini. Threat actor: The Gentlemen Sector: Hospitality Data exposure (claimed): Not specified Data type: Not specified Observed: Oct 26, 2026 Status: Pending verification ESIX©: 5.05

🚨Cyber Alert ‼️ 🇺🇸US - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗼𝗳 𝗡𝗲𝘄 𝗠𝗲𝘅𝗶𝗰𝗼 The Byod hacking group claims to have breached the University of New Mexico, compromising approximately 36,000 machines and allegedly accessing internal systems, student and employee PII, financial records, and patient data.

Data type: Oracle databases, HR and payroll records, student records, internal emails, research information, electronic health records (EHR), personally identifiable information (PII), Social Security numbers (SSNs), patient information and appointment records

🚨Cyber Alert ‼️ 🇺🇸US - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝘁𝘆 𝗼𝗳 𝗡𝗲𝘄 𝗠𝗲𝘅𝗶𝗰𝗼 The Byod hacking group claims to have breached the University of New Mexico, compromising approximately 36,000 machines and allegedly accessing internal systems, student and employee PII, financial records, and patient data.

🚨Cyber Alert ‼️ 🇲🇽Mexico - 𝗨𝗻𝗶𝘃𝗲𝗿𝘀𝗶𝗱𝗮𝗱 𝗔𝘂𝘁𝗼́𝗻𝗼𝗺𝗮 𝗱𝗲 𝗔𝗴𝘂𝗮𝘀𝗰𝗮𝗹𝗶𝗲𝗻𝘁𝗲𝘀 (𝗨𝗔𝗔) The Safepay ransomware group claims to have breached Universidad Autónoma de Aguascalientes (UAA) in Mexico.

🚨Cyber Alert Update‼️ 🇧🇷Brazil - 𝗣𝗮𝗿𝘁𝗶𝗱𝗼 𝗟𝗶𝗯𝗲𝗿𝗮𝗹 The WHITEARMOR hacking group, which claimed yesterday to have breached Brazil's Partido Liberal, has today published all the allegedly stolen data for free.

Threat actor: WHITEARMOR Sector: Organizations Data exposure (claimed): 79,000 records and 340,000 files Data type: Personal data, voter ID records, credentials, audit logs, vendor PII, member images Observed: Oct 26, 2026 Status: Pending verification ESIX©: 5.60

🚨Cyber Alert Update‼️ 🇧🇷Brazil - 𝗣𝗮𝗿𝘁𝗶𝗱𝗼 𝗟𝗶𝗯𝗲𝗿𝗮𝗹 The WHITEARMOR hacking group, which claimed yesterday to have breached Brazil's Partido Liberal, has today published all the allegedly stolen data for free.

🚨Cyber Alert ‼️ 🇻🇳Vietnam - 𝗩𝗶𝗲𝘁𝗻𝗮𝗺 𝗔𝗶𝗿𝗹𝗶𝗻𝗲𝘀 The Gentlemen ransomware group claims to have breached Vietnam Airlines.

🚨Cyber Alert ‼️ 🇨🇳China - 𝗛𝗶𝘀𝗲𝗻𝘀𝗲 The cybercriminal group WHITEARMOR claims to have breached Hisense, allegedly stealing 19 GB of data from its GCRM production repository and warranty claims archives for Malaysia and Singapore.

Threat actor: WHITEARMOR Sector: Manufacturing Data exposure (claimed): 19 GB Data type: Customer personal information, supplier records, invoices, payment details, contracts, internal CRM files Observed: Oct 25, 2026 Status: Pending verification ESIX©: 5.58

🚨Cyber Alert ‼️ 🇨🇳China - 𝗛𝗶𝘀𝗲𝗻𝘀𝗲 The cybercriminal group WHITEARMOR claims to have breached Hisense, allegedly stealing 19 GB of data from its GCRM production repository and warranty claims archives for Malaysia and Singapore.

🚨Cyber Alert ‼️ 🇪🇸Spain - 𝗛𝗼𝘆 𝗩𝗼𝘆 Kazu claims to have breached Hoy Voy, allegedly compromising personal information of approximately 58,000 users, 3.6 million messages, and data related to 42 driving centres.

Threat actor: Kazu Sector: Education Data exposure (claimed): 58,000 users, 3.6 million messages, 42 driving centres Data type: Personally identifiable information (PII), messages, driving centre information Observed: Oct 25, 2026 Status: Pending verification ESIX©: 5.40

🚨Cyber Alert ‼️ 🇺🇸US - 𝗘𝗠𝗔𝗥𝗞𝗘𝗧𝗘𝗥 FulcrumSec hacking group claims to have breached EMARKETER, allegedly exfiltrating 15.8 TB of data containing over 21.5 million files.

Threat actor: FulcrumSec Sector: Professional Data exposure (claimed): 15.8 TB Data type: Subscriber profiles, behavioural tracking data, search queries, proprietary research, financial documents, source code Observed: Oct 23, 2026 Status: Pending verification ESIX©: 7.45

🚨Cyber Alert ‼️ 🇺🇸US - 𝗘𝗠𝗔𝗥𝗞𝗘𝗧𝗘𝗥 FulcrumSec hacking group claims to have breached EMARKETER, allegedly exfiltrating 15.8 TB of data containing over 21.5 million files.

🚨Cyber Alert ‼️ 🇿🇦South Africa - 𝗥𝗮𝗻𝗱 𝗠𝘂𝘁𝘂𝗮𝗹 𝗔𝘀𝘀𝘂𝗿𝗮𝗻𝗰𝗲 (𝗥𝗠𝗔) Kazu hacking group claims to have breached Rand Mutual Assurance (RMA), allegedly exfiltrating 366 GB of data.

According to the threat actor, the allegedly stolen dataset includes 1,683,810 workers' compensation claim records and 593,786 files.

🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗣𝗶𝘇𝘇𝗮 𝗛𝘂𝘁 𝗝𝗮𝗽𝗮𝗻 𝗟𝘁𝗱. Pizza Hut Japan Ltd. disclosed a data breach affecting its online ordering service after unidentified attackers gained unauthorised access to a payment API on October 19, 2026, retrieving customer information from a connected database.

According to the company, the compromised data includes customer IDs, email addresses, phone numbers, deleted account records, session login tokens, and transaction records.