ATB (Victim): news timeline & CVEs

Moscow detains suspected DataSuckers hackers linked to breaches in Ukraine and Russia

Moscow placed a suspected DataSuckers member under house arrest over the Dodo Pizza customer-data breach.

Russian authorities detained three suspected members of the financially motivated DataSuckers group after a Dodo Pizza breach that reportedly exposed records tied to hundreds of millions of orders over 15 years. A Moscow court placed 19-year-old Denis Fridman under house arrest until December 8, while a fourth suspect remains at large. Investigators say the attackers used corporate credentials found on GitHub and later sold the database for $100,000. The group has also claimed attacks on Tez Tour and Ukraine’s ATB chain, including a $400,000 extortion demand; several data-theft claims remain disputed or unverified.

The Recordupdated Oct 16, 17:45 UTC · 11h agofirst Oct 16, 13:30 UTC · 16h agoPolicy & legal 2 sources

12th October – Threat Intelligence Report

Check Point's weekly report covers a Denmark registry breach of 8.8 million people, ransomware, and exploited enterprise flaws.

Check Point's 12 October threat bulletin leads with breaches and attacks: Denmark's Central Register of Persons exposure of about 8.8 million people via a supplier, credential theft at ASOS claimed by Xuanye, a DataSuckers extortion claim of 7.9 million ATB customer records, and a suspected ransomware attack on Osaka Metropolitan University affecting about 500 servers and possibly 130,000 people. Citrix confirmed targeted exploitation of NetScaler CVE-2026-88779, while critical patches cover Veeam CVE-2025-64393, Cisco NX-OS CVE-2026-76455, and Atlassian CVE-2026-21589. The bulletin also describes UAC-0099 espionage, ongoing FortiBleed credential theft on more than 86,000 Fortinet devices, and AI-assisted intrusions and phishing.

Check Point ResearchOct 12, 14:51 UTC · 4d agoData breach in the wildCVE-2025-64393 CVE-2026-88779 CVE-2026-76455+1 CVEs10· 4 reads

Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data

Ukraine's ATB grocery chain confirmed a cyberattack after DataSuckers demanded $400,000 and threatened to leak customer data.

Ukraine's largest grocer, ATB, confirmed a cyberattack after DataSuckers posted a $400,000 extortion demand and countdown on its website. The group claimed records on 7.9 million customers, including names, phones, emails, addresses, password hashes, employee passport data, and more than 11 million orders, then posted samples on Telegram. ATB denied that customer data was compromised and said the site remained under its control; the claimed breach has not been independently verified. The financially motivated group has also claimed recent attacks on Russia's Dodo Pizza and Tez Tour.

The RecordOct 5, 17:00 UTC · 11d agoRansomware in the wild

ATB

Timeline3 articles

Related CVEsby mentions

Appears with

Moscow detains suspected DataSuckers hackers linked to breaches in Ukraine and Russia

12th October – Threat Intelligence Report

Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data