In August 2025, a sophisticated nation-state actor gained persistent access to F5's internal systems, specifically targeting the BIG-IP product development environment and engineering knowledge platforms. The attacker exfiltrated portions of BIG-IP source code, details of undisclosed vulnerabilities under development, customer configuration details, and internal engineering documentation. There is no evidence of compromise to CRM, financial, or support systems, nor the software supply chain. The exposure of unpublished vulnerabilities and source code significantly increases the risk of future exploits against BIG-IP deployments worldwide. Organizations using BIG-IP should urgently reassess threat models and patching strategies, anticipating that adversaries may develop exploits from the leaked information. This incident highlights the increasing targeting of critical infrastructure vendors by nation-state actors and the challenges posed by long dwell times. No known exploits are currently in the wild, but the breach is rated critical due to the potential impact. European organizations relying on BIG-IP should prioritize monitoring, segmentation, and rapid patch deployment once fixes are available.
Sotheby’s, a major auction house, suffered a data breach that exposed customer financial information. The breach was publicly disclosed in October 2025 and reported by credible sources including BleepingComputer and Reddit InfoSec News. Although detailed technical specifics of the breach are not provided, the exposure of financial data indicates a significant compromise of sensitive customer information. No known exploits are currently active in the wild, and the discussion level in public forums remains minimal. The breach poses a high risk to affected individuals and organizations due to potential financial fraud, identity theft, and reputational damage. European organizations connected to Sotheby’s or using similar systems may face indirect impacts, especially those involved in luxury goods, auctions, or financial services. Mitigation should focus on enhanced monitoring, customer notification, and strengthening data protection controls. Countries with strong luxury markets and high Sotheby’s client presence, such as the UK, France, Germany, Italy, and Switzerland, are likely to be most affected. Given the sensitivity of the data and the breach context, the severity is assessed as high.
Clothing retailer MANGO has disclosed a data breach that exposed customer information. The breach was recently reported and confirmed by a trusted cybersecurity news source. Although specific technical details and the extent of the breach have not been fully disclosed, the incident is classified as high severity due to the exposure of sensitive customer data. There are no known exploits in the wild linked to this breach at this time. The breach highlights risks related to data confidentiality and potential misuse of personal information. European organizations, especially those in retail and e-commerce sectors, should be alert to similar threats. Mitigation should focus on enhancing data protection, monitoring for suspicious activity, and preparing incident response plans. Countries with significant MANGO customer bases and retail sectors are most likely to be impacted. The overall severity is assessed as high given the potential impact on customer privacy and brand reputation without requiring user interaction or authentication to exploit the breach.
SimonMed Imaging has disclosed a significant data breach affecting over 1.2 million individuals. The breach involves unauthorized access to sensitive personal and possibly medical information, posing serious privacy risks. Although no specific technical details or exploited vulnerabilities have been publicly shared, the scale of the breach indicates a high-impact incident. There is no evidence of known exploits in the wild related to this breach at this time. European organizations should be aware of potential indirect impacts, especially if they have partnerships or data exchanges with affected entities. The breach highlights the critical need for robust data protection and incident response measures in healthcare-related sectors. Mitigation should focus on enhancing access controls, monitoring for suspicious activity, and ensuring compliance with data protection regulations such as GDPR. Countries with significant healthcare infrastructure and data exchange with US-based medical providers are more likely to be affected. Given the sensitivity of healthcare data and the large number of affected individuals, the severity is assessed as high.
A significant data breach has occurred at Red Hat, a major provider of open-source software solutions. The breach has escalated with the involvement of the threat actor group ShinyHunters, who are now engaging in extortion attempts using the stolen data. While specific technical details about the breach vector or compromised data have not been disclosed, the incident is classified as high severity due to the potential exposure of sensitive information and the reputational impact on Red Hat and its customers. No known exploits are currently reported in the wild, and the discussion around this breach remains minimal on public forums. European organizations relying on Red Hat products could face indirect risks, including supply chain exposure and targeted extortion attempts. Immediate mitigation involves monitoring for suspicious activity, reviewing access controls, and preparing incident response plans tailored to potential extortion scenarios. Countries with strong Red Hat market presence and critical infrastructure depending on its software are more likely to be affected. Given the breach's impact on confidentiality and the involvement of extortion, the suggested severity is high.
ParkMobile pays... $1 each for 2021 data breach that hit 22 million
Source: https://www.bleepingcomputer.com/news/security/parkmobile-pays-1-each-for-2021-data-breach-that-hit-22-million/
Discord Data Breach: Hackers Access IDs, Billing Details and Support Chats
Source: https://hackread.com/discord-data-breach-hackers-ids-billing-support-chats/
Allianz Life says July data breach impacts 1.5 million people
Source: https://www.bleepingcomputer.com/news/security/allianz-life-says-july-data-breach-impacts-15-million-people/
Harrods Data Breach: 430,000 Customer Records Stolen Via Third-Party Attack
Source: https://hackread.com/harrods-data-breach-records-stolen-third-party-attack/
Volvo North America disclosed a data breach following a ransomware attack on IT provider Miljödata
Source: https://securityaffairs.com/182577/data-breach/volvo-north-america-disclosed-a-data-breach-following-a-ransomware-attack-on-it-provider-miljodata.html
Boyd Gaming discloses data breach after suffering a cyberattack
Source: https://www.bleepingcomputer.com/news/security/boyd-gaming-discloses-data-breach-after-suffering-a-cyberattack/
Jeep and Dodge Parent Company Stellantis Confirms Customer Data Breach
Source: https://hackread.com/jeep-dodge-stellantis-confirms-customer-data-breach/
Fairmont Federal Credit Union 2023 data breach impacted 187K people
Source: https://securityaffairs.com/182217/data-breach/fairmont-federal-credit-union-2023-data-breach-impacted-187k-people.html
UK train operator LNER (London North Eastern Railway) discloses a data breach
Source: https://securityaffairs.com/182128/data-breach/uk-train-operator-lner-london-north-eastern-railway-discloses-a-data-breach.html
Plex tells users to reset passwords after new data breach
Source: https://www.bleepingcomputer.com/news/security/plex-tells-users-to-reset-passwords-after-new-data-breach/
