The week in breach news Oct 14, 2026

Fashion retail brands are firmly in the crosshairs of cybercriminals, with retail giants TFG London and H&M both investigating separate cyber incidents.

TFG London, the UK arm of retail conglomerate The Foschini Group and the owner of high-end fashion brands, including Hobbs, Whistles, and Phase Eight, confirmed it is investigating a cybersecurity incident that affected some of its IT systems. The brand said that while some website capabilities may be temporarily unavailable, its stores are operating as normal. H&M is also separately investigating a claim that it was targeted by a notorious hacking group.

The attacks add to a growing pattern of cybercriminals targeting fashion retail brands. Online fashion retailer Asos is also currently investigating unauthorized access to its app system, as reported last week.

A June cyberattack on medical technology provider iRhythm may have potentially exposed the patient information of more than 8.2 million people across the U.S.

iRhythm is a San Francisco-based medical technology company that offers wearable cardiac monitoring devices. The company identified unauthorized activity on June 8 and confirmed that attackers accessed and downloaded information between June 3 and June 8. State regulatory disclosures filed in October identify 298,647 affected individuals in Texas and 69,526 in South Carolina, bringing confirmed state-specific figures to 368,173. However, a separate aggregation of regulatory filings reports 8,179,772 affected individuals nationwide, although iRhythm has not disclosed a comprehensive total in its public notification.

According to the company, the compromised information includes patient names, residential addresses, email addresses, telephone numbers, dates of birth, patient account numbers, cardiac monitoring device serial numbers, health insurance numbers and dates of medical services.

A ransomware attack on SoftBank’s cloud subsidiary IDC Frontier affected close to 500 organizations across Japan, including internet service providers and public sector bodies.

IDC Frontier, a subsidiary of Japanese multinational SoftBank Group, provides infrastructure-as-a-service (IaaS) services to Japanese operators and service providers. On October 7, the company confirmed an attack on its IDCF Cloud service affecting almost 500 corporate and municipal customers. Virtual servers in four availability zones were taken down, and the company warned that it would be difficult to retrieve or restore customer data from the affected infrastructure, with many customers potentially having to restore everything from their own backups.

Public sector organizations as well as firms spanning logistics, education and financial services were among those caught up in the attack.

Frontline Education is notifying multiple U.S. school districts of a data breach in which attackers stole employee information, including Social Security numbers.

Frontline Education is a Pennsylvania-based edtech company that provides administration and workforce management software and services for school districts. The company informed affected school districts that attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information. Exposed data includes Social Security numbers, email addresses and physical addresses belonging to employees across multiple school districts.

Frontline Education has not disclosed which third-party application was involved in the breach or when the unauthorized access first occurred.

Hackers targeted hundreds of French supermarkets in a cyberattack that reportedly caused refrigerators and freezers to overheat, spoiling food and sparking fires across multiple locations.

Attackers raised the temperature of refrigerators and freezers at hundreds of supermarkets to as high as 50 degrees Celsius (122 degrees Fahrenheit) overnight, causing fires and widespread food spoilage. While the precise mechanism by which attackers compromised the refrigerators has not been publicly disclosed, cybersecurity experts say failure to apply security updates to internet-connected devices was a key factor in the incident. Major supermarket chains across France were affected, including Carrefour, Monoprix, and Coopérative U.

No group has yet claimed responsibility for the attack and no ransom demand has been made at this time.