Researcher found hardcoded credentials in Applebee's mobile app

Ford said it's making an "explicit commitment" to its customers that "their vehicle data is safe" with the company.

 Genesys, a California-based provider of customer experience and call-center technology, has disclosed a cyberattack in which unauthorized actors accessed data from internal business systems. The company said the incident affected a learning management system and a customer relationship management environment, but stressed that its core customer-facing platforms were not compromised.  According to Genesys, attackers likely downloaded business and account information used to manage relationships with current and prospective customers. The exposed information may include names, phone numbers, business email addresses, job titles, company and account details, and other customer-interaction data. While such records can be valuable for phishing and social-engineering schemes, Genesys has not said how many individuals or organizations were affected.  The company said it acted quickly to contain the breach, including suspending the LMS platform. By October 23, Genesys announced that the incident had been fully contained, although its investigation into the scope and impact remains ongoing. It has promised further updates as it reviews the accessed information and confirms material facts.  Importantly, Genesys stated that its Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. It said there was no unauthorized access to those platforms, customer and partner environments, or the data stored and processed within them. That distinction is significant because the company’s core platforms handle sensitive communications and operational data for enterprise clients.  Genesys has not identified the attacker, but a newly emerged group called ScarlettGroup has claimed responsibility on its leak site. The company is urging customers to stay alert for suspicious messages impersonating Genesys and emphasized that it will never request sensitive information, such as passwords, through unsolicited email or other channels. The episode is a reminder that even when primary production platforms remain secure, internal systems holding customer-relationship data can still create meaningful privacy and fraud risks.

Businesses collect customer information through websites, email campaigns, sales conversations, customer support, surveys, and social media.

SHA-256 hashing gives way to encryption for Customer Match and enhanced conversions uploads. What happens to files that advertisers already hash is not stated.

Compare customer data platform capabilities with QKS Group?s SPARK Matrix™ Q3 2026, offering vendor analysis and insights to support technology decisions.

SHA-256 hashing gives way to encryption for Customer Match and enhanced conversions uploads. What happens to files that advertisers already hash is not stated.

 State Bank of India (SBI) is investigating a suspected data exposure after identifying personal information in 3,897 customer records reportedly found on the dark web. The country’s largest lender said it received alerts about the issue last week and has initiated cyber incident response procedures. The bank has also appointed an independent cybersecurity agency to assess the suspected compromise and determine the source, scope, and potential impact of the exposure.  According to SBI’s October 21 stock-exchange filing, the bank first received alerts on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In). Its initial review covered around 375,000 records found on the dark web. Of these, 3,897 records were found to contain personal customer information. SBI is now verifying whether the exposed records are genuine and complete, while also attempting to trace their origin and assess the risks for affected customers and the bank.  The exposed records reportedly included customers’ names, dates of birth, gender, registered mobile numbers, email addresses, and home addresses. They also contained branch and Customer Information File identifiers, lead IDs, and metadata linked to loan and lead records. Although the information does not appear to include banking passwords or transaction credentials, personal and loan-related details can still be misused for phishing, identity fraud, targeted scams, and social-engineering attacks.  SBI said it activated its cyber incident response and containment procedures after receiving the alerts. The bank has engaged a CERT-In-empanelled independent cybersecurity agency to investigate the matter and is working on remedial and preventive measures in line with regulatory requirements. SBI added that it is continuing to monitor the situation and will take appropriate steps to prevent similar incidents in the future.  The bank has sought to reassure customers that the incident has not materially affected its financial performance, core business operations, or ability to continue services. Core banking functions are reportedly running normally, with no disruption reported. However, customers should remain cautious: avoid clicking unexpected links claiming to be from SBI, never share OTPs, passwords, or card details, and verify suspicious communications directly through the bank’s official app, website, or customer-care channels. The investigation is ongoing, and further clarity is expected once SBI confirms whether the dark-web data is authentic and identifies how it was exposed.

SHA-256 hashing gives way to encryption for Customer Match and enhanced conversions uploads. What happens to files that advertisers already hash is not stated.

SHA-256 hashing gives way to encryption for Customer Match and enhanced conversions uploads. What happens to files that advertisers already hash is not stated.

A consumer privacy ombudsman is a neutral expert appointed under US bankruptcy law to advise a court before a debtor sells customer data its policy shields.

A consumer privacy ombudsman is a neutral expert appointed under US bankruptcy law to advise a court before a debtor sells customer data its policy shields.

 The owner of Hobbs, Phase Eight, and Whistles has become the latest major fashion retailer to be hit by a cyberattack. The Foschini Group (TFG) confirmed that its UK business, TFG London, discovered the incident on October 11, leaving several IT systems offline and disrupting customer orders across the three brands.  Although physical stores remain open, the company said some website functions may be unavailable while its investigation continues. Customers have been warned that orders placed on or after Sunday could be delayed, and TFG has apologized for the disruption while promising further updates as appropriate.  TFG says it activated its incident-response and business-continuity plans immediately, brought in external cybersecurity specialists, and notified UK authorities. The Information Commissioner’s Office confirmed it has received a breach report from TFG Brands (London) Limited and is assessing the information provided.  There is some reassurance for shoppers: TFG London said payment processing is handled by a third party and that, based on its investigation so far, it has no reason to believe payment information is at risk. However, the company is still determining whether other personal or sensitive customer data has been compromised and says it will notify affected individuals or organizations if evidence of a breach emerges. The company has not yet explained how attackers gained access, whether ransomware was involved, or when systems will be fully restored. TFG added that its White Stuff and Inside Story businesses, along with its African and Australian operations, are unaffected because they run on separate IT systems.  The attack follows a difficult stretch for fashion retail. Last week, ASOS disclosed that an attacker impersonated a trusted contact to obtain an employee’s login credentials and access third-party platforms containing customer names and contact details. H&M is also reportedly investigating claims involving the ShinyHunters group, though it says it has found no indication that its systems were compromised.  No evidence currently connects the TFG London, ASOS, and H&M incidents, and H&M has not confirmed a breach. Still, three prominent fashion businesses facing cyber trouble in just over a week suggests that retailers remain highly attractive targets for criminals seeking customer data, operational disruption, or leverage. For TFG, the immediate priority is restoring services and establishing the scope of the incident. For customers, the case is a reminder that even when payment details appear safe, retailers may hold substantial personal information whose exposure can take days or weeks to fully assess.

Marketers are uploading customer data in AI without safety guardrails. Here are three simple rules to protect your brand without losing speed.

Advanced matching is Meta's pixel feature that adds hashed customer details such as email and phone to web events so they can be matched to Meta user accounts.

Advanced matching is Meta's pixel feature that adds hashed customer details such as email and phone to web events so they can be matched to Meta user accounts.

 Japanese entertainment group Nippon Columbia hit with malware, affecting more than 8.7 million customers and employees' personal data, according to karaoke system maker Daiichi Kosho. The company asked its customers to be cautious, but it is still unclear if their personal information was stolen or leaked.  Daiichi Kosho, Japan’s biggest karaoke company, owns 521 karaoke places and provides services for the well-known chain of Big Echo. They rely on Nippon Columbia Group (NCG) to provide customer information. NCG’s businesses range from music creation, video and game software development and distribution to artist management, making it an important supplier for the karaoke entertainment sector.  The issue was raised when NCG notified Daiichi Kosho of the incident on October 5 when the malware was found on one of the staff member's computers, which was then isolated the next day. The company then proceeded to reset all the passwords and other authentication methods and investigate the incident to determine its scope and origin.  According to Daiichi Kosho's statement, the affected information includes approximately 8,631,000 customers and 93,000 employees of the company, and it may include the full name, gender, date of birth, email address, and phone number of the affected individuals. BIG ECHO, MEGA BIG, Karaoke CLUB DAM, Banana Club, B-GARAGE and DK Dining entertainments' users should be particularly wary of the security breach, as it could affect their data the most.  Daiichi Kosho reiterated that their information was not at risk and that the data contained in the breach does not include the passwords. Additionally, the company stated that there was no suspicion of unlawful interference with customer loyalty points. On the other hand, they are still not certain if the information was stolen or if it was leaked online. They are investigating the breach to find out if the data was shared, what the scope of the problem was, and if the information was shared.  The latest statement did not mention anything else about the possible leak. Customers are advised to protect themselves from scams, deception, and unlawful access to their personal information. They should be wary of strange emails, text messages, and phone numbers and avoid providing any personal and financial information. If the crooks managed to collect and compile the data of these users, it would be easy for them to engage in phishing schemes and similar scams.  BleepingComputer, as of the time of publishing this article, has not been able to find any official statement from Nippon Columbia Group about the incident. They mentioned that they contacted the company for an official comment, and they are still waiting for the response. Until an official statement is issued, the possible data theft remains an issue, as it raises several questions about the safety of the companies' data and the safety of customers' personal information.

Advanced matching is Meta's pixel feature that adds hashed customer details such as email and phone to web events so they can be matched to Meta user accounts.

Advanced matching is Meta's pixel feature that adds hashed customer details such as email and phone to web events so they can be matched to Meta user accounts.