The week in breach news Oct 7, 2026

Denmark's Central Person Register (CPR) is notifying approximately 8.8 million people that their personal information was stolen in a data breach.

CPR is Denmark's national civil registration system, containing information on around 11 million people, including residents, emigrants and deceased individuals. On October 5, CPR announced that hackers exploited a Danish company's lawful access to the system to exfiltrate personal information. Under Danish law, private companies with a legitimate interest are granted access to the CPR to obtain information on specific individuals.

The organization confirmed that the attackers accessed the names, addresses and CPR numbers, the equivalent of Social Security numbers, of approximately 8.8 million registered individuals, both living and deceased.

Ukraine's largest grocery store chain, ATB, confirmed on October 5 that it was hit by a cyberattack after hackers posted an extortion demand directly on its website.

A hacker group calling itself DataSuckers claimed responsibility for the attack and demanded $400,000, threatening to publish data it claims to have stolen from millions of ATB customers. A countdown timer accompanying the ransom demand appeared on the retailer's website before being later removed.

ATB denied that any customer data was compromised and temporarily took some online services offline, describing the action as routine technical maintenance. The group claimed to have obtained data belonging to 7.9 million customers, including names, phone numbers, email and physical addresses, password hashes, as well as employees' passport information and records of more than 11 million orders.

Osaka Metropolitan University, one of Japan's largest universities, canceled classes and shut down a large part of its IT infrastructure following a suspected ransomware attack that began late last week.

On October 6, the university confirmed that the outage left its internal network, email and a range of administrative and academic systems unavailable. Osaka Metropolitan University said it believes ransomware caused the disruption and is investigating the attack with the assistance of outside cybersecurity specialists. It has not yet identified the attackers or confirmed whether a ransom demand was received.

The outage affected systems used for academic administration, educational support, financial accounting, payroll, human resources and library services, as well as the university's websites and internal network.

South Korea's Financial Services Commission (FSC) confirmed a data breach at several South Korean banks, including Shinhan Bank and KB Kookmin Bank.

Shinhan Bank and KB Kookmin Bank are large private South Korean commercial banks, each holding more than $400 billion in assets. Authorities launched on-site investigations after receiving incident reports from the affected institutions. In some of the incidents, signs have emerged of AI being used as part of the attack.

However, authorities have not yet disclosed details on what kind of AI tools were used in the hacking incidents or the full scale of the breaches.

Online fashion retailer Asos is investigating unauthorized access to its app system after shoppers received a notification claiming hackers had fully compromised its data.

Asos confirmed it is investigating unauthorized activity involving a third-party platform it uses to communicate with customers. The company said it took immediate action to restrict access to the notification platform and is working with internal and external specialist advisers as well as all relevant authorities.

The company confirmed that its website and app are operating as normal, with no current disruption to any aspect of its operations.