SOGO Hong Kong says intruders obtained loyalty data, including point balances
The department store identified names and contact details among the affected fields. Its public notice directs members to verify unexpected messages with customer service.
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
The department store identified names and contact details among the affected fields. Its public notice directs members to verify unexpected messages with customer service.

Two October notices describe different exposures. The November findings matter even for customers who never stored a prompt.
A newly filed notice describes possible webmail session exposure, while the company’s investigation leaves customer-specific scope unresolved.
The company reports exposed user and role records, with no evidence so far of access to investigation content or session tokens.

Court notices show why restoring a service and resolving its business consequences are separate milestones.
The laboratory company reports restored access while the affected-patient and information scope remains unresolved.
Helpfeel separates account records, image metadata and confirmed image access, giving businesses a clearer basis for reviewing shared screenshots.

New York and Connecticut announced a settlement involving Boston Children’s Health Physicians and its IT services provider.

Canada’s privacy regulator says the airline completed corrective commitments following its 2025 breach, including external assessment of new safeguards.
Swiss authorities confirmed a leak involving a pension fund’s software supplier while investigators were still determining the affected data.
A newly issued notification separates the earlier intrusion from the personal-data consequences now being communicated to recipients.

An infrastructure investigation and precautionary validator exits leave businesses with separate questions about asset access, operational recovery and provider updates.

The Dutch security organization has identified an entry point but has not yet closed its investigation into the affected information.

The exchange’s latest account separates a staged service restart from an unfinished inquiry into unauthorized wallet transfers.

A disclosed isolation flaw offers cloud customers a concrete way to examine how providers handle residual data and incident communication.
250 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source

























