Breach news & practical guidance
Make sense of the latest breach news.
Dated reporting, clear sources and useful next steps. We separate confirmed facts from claims—and a new incident from an old breach newly reported.
Practical recovery · Published 27 October 2026
Received a data breach email? Start with these five checks.
Not sure whether a breach email is genuine? Check the message safely, understand what was exposed and decide which account-security steps come first.
Practical guide · reviewed 27 October 2026
Customer alerts · Published 27 October 2026
ASOS data breach: what the October 2026 notification means for customers
What ASOS confirmed about its October 2026 cyber incident, why an app notification can be misleading, and the sensible steps customers can take.
Company statement: 6 October 2026
UK data security · Published 27 October 2026
Legal Aid Agency data breach: what changed in the October 2026 update
The Legal Aid Agency’s October 2026 update concerns its 2025 attack. Understand the revised scope, individual uncertainty and where to find official advice.
Official update: 14 October 2026 · incident identified April 2025
Understanding breach results · Published 27 October 2026
Assurance Retraite added to HIBP: why a 2024 breach can trigger a 2026 alert
Assurance Retraite was added to HIBP in October 2026 after a September 2024 incident. Understand breach dates, newly added records and the password distinction.
Breach: September 2024 · added to HIBP: 20 October 2026
Third-party breaches · Published 27 October 2026
Publica supplier cyberattack: what a third-party data breach means for you
Swiss authorities confirmed a Publica software-supplier data leak in October 2026. What the announcement establishes, what it leaves open and how to check updates safely.
Official announcement: 8 October 2026 · attack detected late September
Reading breach notices · Published 27 October 2026
Advantest data breach notice: why an October letter refers to a February incident
Advantest’s October 2026 notification describes data taken earlier in the year. How to read an individual breach letter and distinguish possible exposure from confirmed misuse.
Notification dated 6 October 2026 · incident identified February 2026