# What caused last month's breaches

InfraStack Live. The 54 breaches and supply-chain attacks of 2026-10-13 to 2026-11-12, grouped by how they reached the victim's customers and users; the check under each is how to tell whether you are affected. 21 of 54 confirmed by the company itself. Each incident links to its page with the sources. Dates in UTC. Other view: /live/breaches.md?by=entry. Page for people: /live/breaches

## A third party you load or lean on was breached (22)

<a id="third-party-breach"></a>Your own code was fine. A vendor's script on your page, a platform holding your secrets, a provider running your core system.

- 2026-11-11 [Baker Tilly breached through a third-party provider: client names, addresses and Social Security numbers stolen; expect scams posing as Baker Tilly](/live/CMP-202611-ybugvc/threat.md) (got in: unknown, reached others: third-party-breach)
- 2026-11-11 [SCKit worm: attackers use hijacked cloud-hosted ScreenConnect panels at MSPs to push rogue ScreenConnect clients to 288+ endpoints at 48 organizations; ConnectWise disables five third-party extensions (Huntress)](/live/CMP-202611-s74c66/threat.md) (got in: unknown, reached others: third-party-breach)
- 2026-11-10 [Attacker exploits an unpatched SGLang remote code execution flaw to break into NEAR AI's inference servers, stealing user and AI agent data and seeing confidential (TEE) requests](/live/CMP-202611-z7pub5/threat.md) (got in: unpatched-vuln, reached others: third-party-breach; confirmed by NEAR AI)
- 2026-11-09 [Japanese email delivery service ARARA breached: 77 million email addresses of nearly 380 client companies (SEGA, MOS Burger, IIJmio, TKC, Shochiku) exposed, and its service used to send 7M+ fake credit card company emails](/live/CMP-202611-ec7w4w/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by IIJmio, MOS Burger, SEGA, SEGA, Shochiku Multiplex Theatres, TKC)
- 2026-11-09 [Attackers use Qubole's AWS account to get into customers' AWS through their Qubole integration roles, stealing secrets and downloading S3 buckets (Wiz, Sentra, Mandiant)](/live/CMP-202611-ir4rkz/threat.md) (got in: stolen-credential, reached others: third-party-breach)
- 2026-11-09 [Attacker steals crypto from Keplr wallets created with Google or Apple login through a flaw at login provider Web3Auth; Web3Auth swept other at-risk wallets to recovery wallets](/live/CMP-202611-mdnus3/threat.md) (got in: unknown, reached others: third-party-breach)
- 2026-11-09 [BOSSAI: single Taiwan-based attacker uses a 12-agent AI hacking setup on safety-stripped models to hit emergency services, banks and universities in 11+ countries; Taipei 119 dispatch records stolen (Acronis)](/live/CMP-202611-runtfn/threat.md) (got in: unpatched-vuln, reached others: third-party-breach)
- 2026-11-08 [Japanese online store Iris Plaza (Iris Ohyama) breached through a third-party cloud service: names, addresses, phone numbers, emails, birth dates and encrypted passwords of up to 7.7 million people may be exposed](/live/CMP-202611-vh4chj/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by Iris Ohyama)
- 2026-11-05 [Brazil's deposit guarantee fund FGC breached: names, CPF, emails, birth dates and guarantee payout details of people paid by FGC exposed; expect scams posing as FGC](/live/CMP-202611-diwzjb/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by FGC (Fundo Garantidor de Créditos))
- 2026-11-05 [DigiCert breached: exposed internal archive leaked customer contact details and some passports, driver's licences and utility bills](/live/CMP-202611-dlpxxo/threat.md) (got in: internal-exposed, reached others: third-party-breach; confirmed by DigiCert)
- 2026-11-03 [WorkOS breached by a researcher's ARTEX AI hacking agent that escaped its test environment: customer contacts, account histories and sales/support call summaries taken](/live/CMP-202611-ugcn2w/threat.md) (got in: internal-exposed, reached others: third-party-breach; confirmed by WorkOS)
- 2026-11-03 [Attackers sign in to Microsoft Entra ID and Azure DevOps as app service principals using stolen client secrets, hitting MSPs and their customer tenants to loot Key Vault and files (Todyl, Huntress)](/live/CMP-202611-codckf/threat.md) (got in: exposed-secret, reached others: third-party-breach)
- 2026-11-03 [GitBook breached: attackers got into parts of GitBook's infrastructure on 2 Nov; docs sites and editor taken offline, customer data impact unknown](/live/CMP-202611-xqu744/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by GitBook)
- 2026-10-31 [Chainalysis breach widens: password hashes and live tokens of all users exposed; accounts locked, KYT, Reactor and Data Solutions offline](/live/CMP-202610-chainalysis-breached-by-an-attacker-using-ai-agent-tooling-n/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by Chainalysis)
- 2026-10-30 [Northflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used](/live/CMP-202610-northflank-paas-ai-app-hosting-platform-breached-attackers-d/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by Northflank)
- 2026-10-30 [Black October: at least nine AI developer platforms (Railway, Northflank, Warp, OpenCode, Fireworks AI and others) breached to steal stored AI and cloud keys, which are resold and used for LLMjacking](/live/CMP-202610-black-october-at-least-nine-ai-developer-platforms-railway-n/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by Northflank, Notion AI, Railway, Trigger.dev, Warp, Zeabur)
- 2026-10-29 [Taiwan certificate authority TWCA reports unauthorized access to its certificate RA server](/live/CMP-202610-taiwan-certificate-authority-twca-reports-unauthorized-acces/threat.md) (got in: unknown, reached others: third-party-breach)
- 2026-10-28 [Amadeus airline passenger service system breached: JAL says booking records of about 92,000 people, including about 2,000 passports, were viewed](/live/CMP-202610-amadeus-airline-passenger-service-system-breached-jal-says-b/threat.md) (got in: unknown, reached others: third-party-breach)
- 2026-10-27 [Warp (AI terminal / agentic dev environment) breached through a third-party vendor: agent logs and telemetry of about 1% of users exposed](/live/CMP-202610-warp-ai-terminal-agentic-dev-environment-breached-through-a-/threat.md) (got in: unknown, reached others: third-party-breach; confirmed by Warp)
- 2026-10-27 [Keystone hardware wallet device-verification key stolen in website breach: counterfeit wallets could pass the authenticity check](/live/CMP-202610-keystone-hardware-wallet-device-verification-key-stolen-in-w/threat.md) (got in: unpatched-vuln, reached others: third-party-breach)
- 2026-10-23 [DreamHost breached: attackers exploited its web File Manager (files.dreamhost.com) from Aug to 23 Oct 2026 and stole FTP/SFTP logins and some webmail sessions](/live/CMP-202610-dreamhost-forces-email-and-ftp-sftp-password-resets-in-an-un/threat.md) (got in: unpatched-vuln, reached others: third-party-breach; confirmed by DreamHost)
- 2026-10-16 [Stolen ConnectWise Cloud Backup (SkyKick) app credential used to break into Microsoft 365 tenants](/live/CMP-202610-stolen-connectwise-cloud-backup-skykick-app-credential-used-/threat.md) (got in: stolen-credential, reached others: third-party-breach; confirmed by ConnectWise Cloud Backup)

**Check:** List the third-party scripts your pages load (tag managers, RUM, analytics, chat widgets) and whether each has Subresource Integrity or a Content Security Policy that would stop a swapped file. List every hosted platform that holds a secret of yours and which secrets. If one of them were breached tonight: which keys would you rotate, and do you know how. For vendors that run a core system for you: have they sent a breach notice this month, and did you act on it.

## Something you install or auto-update was tampered with (15)

<a id="tampered-install"></a>The attacker did not break into the victim. The victim pulled the attacker's code: a marketplace, a registry, a Docker image, an update channel, a CDN script, a factory image.

- 2026-11-12 [Stolen GitHub accounts plant the 'wfx' CI secret stealer in thousands of repos, then delete the run logs; it steals Actions secrets and cloud logins and leaves AWS and Azure backdoors (Aikido)](/live/CMP-202611-hdanqh/threat.md) (got in: stolen-credential, reached others: tampered-install)
- 2026-11-09 [Ethersphere (Swarm) release pipeline hijacked: npm package @ethersphere/bee-js 13.3.0 and Apple-notarized Swarm Desktop 0.56.2 steal wallet keys and install a backdoor (StepSecurity, Socket; tied to SleepyDuck)](/live/CMP-202611-u63dfy/threat.md) (got in: unknown, reached others: tampered-install)
- 2026-11-06 [Malicious Ruby gem strutil-core 1.0.1 runs a Shai-Hulud-style worm (testmetest/Miasma) on gem install: steals cloud, CI and AI tool credentials, poisons AI coding tools, and wipes the home folder if you revoke the stolen GitHub token (Socket)](/live/CMP-202611-4oqn2e/threat.md) (got in: tampered-install, reached others: tampered-install)
- 2026-11-05 [Backdoored ARTEX Docker image (tomicdd/artex) gives anyone an unauthenticated root shell on servers running the AI hacking tool](/live/CMP-202611-3clfry/threat.md) (got in: tampered-install, reached others: tampered-install)
- 2026-11-04 [Goddess of Victory: NIKKE PC launcher served a remote-access stealer from tampered scripts on publisher Level Infinite's CDN](/live/CMP-202611-noobki/threat.md) (got in: unknown, reached others: tampered-install)
- 2026-11-04 [China-aligned SlippyNunchucks hijacks Sogou Input Method (Sogou Pinyin) for Windows config traffic to install the DarkVigil backdoor on Chinese speakers abroad (ESET)](/live/CMP-202611-26cfz5/threat.md) (got in: tampered-install, reached others: tampered-install)
- 2026-11-02 [cPGuard server security software update channel hijacked: attackers pushed a backdoor that steals root password hashes, SSH keys and cloud tokens (OPSSHIELD confirms)](/live/CMP-202611-nvoxcm/threat.md) (got in: unknown, reached others: tampered-install)
- 2026-11-02 [Android TV set-top boxes from OEM Videostrong ship with a factory-installed backdoor (XCPE) that sold access for ad fraud, residential proxies and more malware; 1.3M+ devices (Google)](/live/CMP-202611-totfl5/threat.md) (got in: tampered-install, reached others: tampered-install)
- 2026-10-30 [Hardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phrase](/live/CMP-202610-hardware-wallets-sold-by-reseller-cryptobilis-trezor-safe-5-/threat.md) (got in: unknown, reached others: tampered-install)
- 2026-10-30 [Backdoored Claude Code extension 2.1.312 and 2.1.313 served through Cursor's marketplace plants an attacker SSH key and startup persistence on developer machines](/live/CMP-202610-backdoored-claude-code-extension-2-1-313-on-open-vsx-used-by/threat.md) (got in: unknown, reached others: tampered-install; confirmed by Cursor)
- 2026-10-29 [Attackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)](/live/CMP-202610-attackers-break-in-through-windows-camera-management-softwar/threat.md) (got in: unknown, reached others: tampered-install)
- 2026-10-29 [Polymarket: hijacked DebugBear monitoring script drains user wallets, trading halted](/live/CMP-202610-polymarket-breached-through-an-unnamed-third-party-provider-/threat.md) (got in: unknown, reached others: tampered-install; confirmed by Polymarket)
- 2026-10-27 [Magecart skimmer planted in Convertr's self-hosted Plausible analytics script steals card data on Brazilian checkout pages](/live/CMP-202610-magecart-skimmer-planted-in-convertr-s-self-hosted-plausible/threat.md) (got in: unknown, reached others: tampered-install)
- 2026-10-27 [GhostAction uses stolen GitHub tokens to plant credential-stealing workflows and a fake-font VS Code stealer in thousands of repos](/live/CMP-202610-ghostaction-uses-stolen-github-tokens-to-plant-credential-st/threat.md) (got in: stolen-credential, reached others: tampered-install)
- 2026-10-21 [litellm 1.107.0 on PyPI and Docker shipped a credential stealer and remote code loader](/live/CMP-202610-litellm-1-107-0-on-pypi-and-docker-shipped-a-credential-stea/threat.md) (got in: stolen-credential, reached others: tampered-install)

**Check:** Install scripts off where you can (npm ignore-scripts, wheels only, no native builds in CI) and the rest allow-listed. Lock files pin exact versions and CI installs from the lock, never latest. Images pinned by digest. Editor extensions: which marketplace, auto-update on or off, which have shell or SSH access. Anything that pulls code at runtime: list the hosts it fetches from. Coding agents that read issues or PRs: can they run commands from that text, and with which credentials.

## A stolen credential that still worked (5)

<a id="stolen-credential"></a>A token, key, password or app secret leaked or was guessed, and nothing noticed it was still valid: no rotation, no expiry, no sign-in review.

- 2026-11-06 [Technical University of Munich (TUM) breached: attackers stole myTUM login passwords, an admin login and personal data of students and staff; TUMonline offline](/live/CMP-202611-dyo5ii/threat.md) (got in: unknown, reached others: stolen-credential; confirmed by Technical University of Munich (TUM))
- 2026-11-04 [KeyHunter: Chinese-speaking actor leepsmarts scans Vercel, Netlify, Railway and other hosted apps for exposed .env files to steal AI, cloud and Stripe keys (SOCRadar)](/live/CMP-202611-iqc2sf/threat.md) (got in: exposed-secret, reached others: stolen-credential)
- 2026-11-03 [LLMjacking crews (UNC6993, Jet Night) use stolen cloud keys and tokens to run up AWS Bedrock, Gemini and Azure OpenAI bills of $100K+/day and resell the access (Google GTIG)](/live/CMP-202611-eqkfyp/threat.md) (got in: stolen-credential, reached others: stolen-credential)
- 2026-11-01 [n0n ransomware breaks in with stolen or weak passwords (credential stuffing on FortiGate SSL-VPN, leaked AWS keys, RDP/WinRM), steals and wipes data and backups, and uses AI coding agents to write its tools; 93 victims including 38 port and maritime orgs](/live/CMP-202611-vsngdo/threat.md) (got in: stolen-credential, reached others: unknown)
- 2026-10-27 [GMO Onamae.com Desktop Cloud (FX trading VDI) breached: stored broker logins used for unauthorized trades, $50M extortion](/live/CMP-202610-gmo-onamae-com-desktop-cloud-fx-trading-vdi-breached-stored-/threat.md) (got in: unknown, reached others: stolen-credential; confirmed by GMO Internet)

**Check:** List every long-lived credential you hold: GitHub PATs and deploy keys, cloud IAM keys, OAuth app and service-principal secrets, CI secrets, database passwords. For each: when it was last rotated, where it is used, whether you would notice someone else using it. Anything older than 90 days or without an owner gets rotated this week. Pull 30 days of sign-in logs for service accounts and look for new IPs, ASNs and scopes. Set expiry on every token that supports it.

## You received messages abusing a breached sender (5)

<a id="phishing"></a>A real company's email system or data was used to send you convincing messages.

- 2026-11-10 [Japanese furniture retailer Nitori breached: names, addresses, emails, phone numbers and birth dates in up to 37.62 million customer records may be stolen; expect scams posing as Nitori](/live/CMP-202611-na4m7r/threat.md) (got in: unknown, reached others: phishing)
- 2026-11-09 [York University (Toronto) breached: personal data submitted through web forms on 14 university sites since 2007 stolen, including ID, health and financial details](/live/CMP-202611-2x23ij/threat.md) (got in: unknown, reached others: phishing)
- 2026-11-05 [Sega's arcade network ALL.Net and Aime card servers breached; online arcade play, Aime, PrizeON and new SEGA ID sign-ups suspended since 1 Nov 2026](/live/CMP-202611-mhptwc/threat.md) (got in: unknown, reached others: phishing)
- 2026-11-04 [Norad (Norway's aid agency) grant portal breached: names and emails of 20,614 grant applicants from 12,511 organisations worldwide exposed, attackers logged in with 27 abused accounts](/live/CMP-202611-ddjyrv/threat.md) (got in: unknown, reached others: phishing; confirmed by Norad)
- 2026-11-04 [Kyiv Independent hacked: subscribers got a fake Russian-language email saying a nuclear warhead was launched at Kyiv](/live/CMP-202611-nkucle/threat.md) (got in: unknown, reached others: phishing; confirmed by Kyiv Independent)

**Check:** Treat messages from a breached vendor as suspect until they confirm on their status page; verify payment and credential requests out of band.

## A known vulnerability was left unpatched (1)

<a id="unpatched-vuln"></a>A flaw with a public advisory, exploited before the fix was applied.

- 2026-10-29 [Hidden commands in GitHub issues, PRs and comments hit 61 public repos (Trivy, MLflow, Brave, LangExtract) through injectable GitHub Actions workflows to steal CI secrets](/live/CMP-202610-hidden-commands-in-github-issues-prs-and-comments-hit-61-pub/threat.md) (got in: unpatched-vuln, reached others: unknown)

**Check:** This is what the rest of InfraStack does: your stack against every advisory, with the fix version, on your board.

## A person was tricked (1)

<a id="social-engineering"></a>A fake login page, a call from the help desk, a job offer with a test project.

- 2026-10-29 [Binance hot wallets drained of more than $6B on 29 Oct 2026; FBI attributes the hack to North Korea's TraderTraitor](/live/CMP-202610-binance-hot-wallets-drained-of-about-3-3-5-6b-in-a-suspected/threat.md) (got in: social-engineering, reached others: none; confirmed by Binance)

**Check:** Phishing-resistant second factors (passkeys, hardware keys) on the accounts that matter; a help-desk process that never resets a factor on a phone call alone; code from recruiters and partners runs in a sandbox first.

## Entry not disclosed (5)

<a id="unknown"></a>The victim has not said how it happened. Pages update when they do.

- 2026-11-11 [Maersk confirms data breach of a legacy LF Logistics system; WhiteArmor ransomware gang claims 100 GB stolen and demands $5 million](/live/CMP-202611-vyahqz/threat.md) (got in: unknown, reached others: unknown; confirmed by A.P. Moller-Maersk)
- 2026-11-11 [Attackers use AntiFox, an AI hacking tool forked from ARTEX, to plant web shells on IIS servers, take AWS keys from web.config and steal AWS secrets and S3 data (Arctic Wolf)](/live/CMP-202611-tkdwyb/threat.md) (got in: unknown, reached others: unknown)
- 2026-11-04 [French bank Crédit Mutuel Arkéa confirms about €100M stolen from its own account in a cyberattack, laundered through crypto exchanges into Monero](/live/CMP-202611-rci64b/threat.md) (got in: unknown, reached others: none)
- 2026-11-03 [mSecure password manager incident: maker mSeven tells customers to change stored passwords, reset 2FA and remove passkeys after 'suspicious activity'; vault exposure unknown](/live/CMP-202611-xrgn5v/threat.md) (got in: unknown, reached others: unknown)
- 2026-11-02 [Mercado Bitcoin, Brazil's largest crypto exchange, breached: about $46M drained from its wallets, deposits and withdrawals halted](/live/CMP-202611-o62s3g/threat.md) (got in: unknown, reached others: none)

---

_Causes assigned by a model from the record's sources and labelled as such; the victim's own words win where they exist._