MEDIUMData Breach
Global

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

·Source: The Hacker News

Updated:

Executive Summary

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026 alert on those reports and other information. The alert names no attacker and no affected organization. JPCERT/

Analysis

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026 alert on those reports and other information. The alert names no attacker and no affected organization. JPCERT/
Source Attribution

Originally published by The Hacker News on Oct 8, 2026.

Related Threats

HIGHData Breach

Ridgeway Pharmacy Data Breach Affects 259,000 Individuals

A data breach at Ridgeway Pharmacy in Montana has affected almost 259,000 individuals. Data breaches have also been announced by […] The post Ridgeway Pharmacy Data Breach Affects 259,000 Individuals appeared first on The HIPAA Journal .

HIPAA Journal
HIGHData Breach

Innovative Renal Care Pays $900,000 to Settle Data Breach Litigation

American Renal Management LLC, doing business as Innovative Renal Care, a kidney care specialist with more than 200 locations in […] The post Innovative Renal Care Pays $900,000 to Settle Data Breach Litigation appeared first on The HIPAA Journal .

HIPAA Journal
HIGHData Breach

China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants

A China-state-aligned threat actor compromised a ConnectWise cloud backup application and used an open-source agentic AI framework to turn its stolen credentials against more than 2,250 Microsoft 365 tenants, Microsoft said. Microsoft Threat Intelligence attributed the activity to Storm-0940, which it said has used the ARTEX framework since as early as September 2026 to automate attacks on hundred

CSO Online