As your dedicated cybersecurity services provider, CyberOne equips you with timely and in-depth information about current cyber attacks. Discover a weekly cybersecurity report of the latest exploits and breaches shaping the ever-evolving cybersecurity landscape.
Weekly Cybersecurity Report | Week 30, 2026
Information security updates and events from the past week
1. Upbound Group, a financial services company, reports a data breach that led to fraud worth approximately $13 million
The company reports to the US Stock Exchange that attackers obtained details of identified customers and other documents without authorization.
Some of the stolen information was used to make fraudulent purchases, contributing to losses of approximately $13 million.
The incident is still under investigation.
2. A cyberattack has disabled the systems of the Romanian Land Authority (ANCPI) and caused widespread disruptions.
According to media reports, an attack group called ByteToBreach used the identification details of an employee, stole internal documents and additional information, and attempted to demand a ransom.
After the ransom demand was not met, the attackers deleted a large amount of information and caused the systems to be down.
As a result of the downgrade, it is not possible to generate tabu drafts, verify sales transactions, register mortgages and more, causing significant disruptions in the country’s real estate market.
3. Another attack group claims to have stolen data from pharmaceutical company Abbott.
The ShadowByt3$ group claims to have managed to gather sensitive business information from the company’s Labcentral portal.
This attack is in addition to the attack published by the ShinyHunters group. Abbott shares are still reacting by ignoring the messages from the two attack groups and have risen by 7% in the past week.
4. Cyber attack on Nichirei disrupts food supply to all KFC branches in Japan
Following the incident, the company disconnected some of the systems, which caused widespread disruptions in the operation of cold storage facilities and frozen food deliveries.
Nichirei, which provides refrigerated and frozen food storage, transportation and distribution services, confirms that attackers have managed to penetrate the company’s systems.
The company also notes that some of the affected servers stored personal information, and therefore the company reported to the Privacy Protection Authority in Japan about concerns about information leaks.
Following the attack, thousands of businesses in Japan are experiencing disruptions in receiving raw materials, etc., with KFC among the victims.
Some KFC branches in Japan have already reported Product shortages and as a result, menus were changed/restricted, operating hours were shortened, and the option to place online orders was disabled.
https://share.google/ScWmU7QS8hzoGv7T8
5. The American health insurance company Clover reports to the US Stock Exchange about unauthorized access to customer medical information.
In a statement published by the company, it claims that attackers managed to obtain the account details of 3 employees through social engineering. The attackers were exposed to customer medical information but not financial information.
6. The municipality of Wriezen, Germany, was hit by a ransomware attack.
The mayor, Carsten Illem, confirmed the incident and said that the affected systems were disconnected from the network to minimize damage. Information security teams are working to investigate the attack and gradually restore services.
The incident is causing delays in handling inquiries and partial availability of the municipality by phone and email. At this time, no details have been released about the attack group, the method of infiltration, or a possible leak of information.
The cybersecurity attacks highlighted in this report aren’t just incidents, they’re blueprints of the adversary’s arsenal. To protect your business you need the right partner. CyberOne is here to help! Check out our services.
