
Vanderbilt takes systems offline after a cyber incident
Classes resumed November 10, but most applications stay restricted; BYOD claims it stole over one million SSNs.
86 stories, newest first · one card per story

Classes resumed November 10, but most applications stay restricted; BYOD claims it stole over one million SSNs.

A passive DNS search found 43,601 grok.me links, and more than 35,000 opened stored app data.
Officials say a security-assessment website was hit and some firms' security-status submissions may have been exposed.
Artex edition leaks posted with no need to hack.
Apiiro found 2,539 real secrets in 1,994 public GitHub repositories.
The breach affects 39 schools in Bristol, with files posted to WallStreet’s dark web leak site on October 27.
Leading Japanese beverage maker Suntory confirms unauthorized access to external cloud service exposed names and email addresses of approximately 100,000 individuals.
Office of the Privacy Commissioner for Personal Data has received notifications and logged complaints about breaches involving Hong Kong Airlines, Cathay Pacific, Malaysia Airlines, Yoho Hong Kong and Broadway.

The supplied page is mostly site navigation; incident details are not in the text.

30GB archive claim from dark web remains unverified with no confirmed breach at Parle Agro.

Officials cite data on about 260 million people since April, while leak reports rose from 303 in September to 830 in October.

The digest also covers suspected freezer tampering, an FEC filing outage, and breaches at Copenhagen and ENGIE.
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.

Records cover CBP, ICE, and CISA staff; the leaker claims an Okta SSO source, which Okta says it has no evidence was compromised.
The set includes phones, emails, job titles and some surveillance, forensics and undercover roles.

A hacker obtained more than 40,000 Homeland Security login records with work phones and emails; DHS calls it a potential breach.

The archive includes emails, phones, office addresses, and groups tied to undercover and surveillance programs.
DHS called it a potential breach; the set covers about a fifth of a workforce a little over 220,000.

Researchers reviewed an unverified export with 38,628 orders and 10,139 IP addresses covering July 18 to October 26, 2026.

The Icepick dataset, published October 28, covers ICE and CBP staff and groups tied to undercover work; Okta denies a breach.

Hudson Rock has not authenticated the files, and WhiteArmor listings do not prove intrusion or ransomware.

Distributed Denial of Secrets published records it attributes to “Department of Peace”; Reuters matched some entries but not the collection method.
The Icepick archive lists names, contacts, and internal groups, including some tied to surveillance work.

The Icepick archive, last updated August 19, lists emails, phones, supervisors, and more than 55,000 permission groups across seven DHS components.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views