> ## Content Index > Fetch the complete content index at: https://www.privacyguides.org/llms.txt > Use this file to discover other available public pages before exploring further. # Data Breach Roundup (Oct 16 - 22, 2026) - URL: https://www.privacyguides.org/news/2026/10/23/data-breach-roundup-oct-16-22-2026/ - Published: 2026-10-23T16:11:41.000Z - Updated: 2026-10-23T16:11:41.000Z - Description: This week's data breaches featured a lot of big, well known names from fast food and gaming to schools and government agencies. - Author: Nate Bartram - Tags: News Briefs, Data Breaches ## Burger King Japan data breach exposes 11 million customer records The breached servers stored the personal information for users of the company's official smartphone app, including their names, dates of birth, gender, email addresses, phone numbers, and order history. However, the company says the compromised server did not store customer credit card numbers and that it found no evidence that the threat actors accessed user credentials. [Burger King Japan data breach exposes 11 million customer recordsBurger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.![](https://www.privacyguides.org/content/images/icon/bleeping-945c2ce7-1624-4072-9d7c-1d6490adcabf.ico)BleepingComputerSergiu Gatlan![](https://www.privacyguides.org/content/images/thumbnail/Burger-King-Japan-9c48dbb2-4fc8-4123-8be1-fa5fa57d3278.jpg)](https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/) ## Hackers steal personal data of millions of California students in massive breach Educational Testing Services (ETS) is a nonprofit that helps manage and provide testing-related services for students in California public schools, including the annual standardized tests. ETS suffered a data breach, exposing the data of 5.7 million students as far back as 2006\. Impacted data includes names, addresses, disability records, grade level, date of birth, what school the student attends, student ID number, gender, race, primary language, country of origin, and more. [Hackers steal personal data of millions of California students in massive breachHackers stole data from millions of California students who took state tests. The security breach affects current and former students who attended public schools over the last three years.![](https://www.privacyguides.org/content/images/icon/favicon-32x32-7bcf64f0-72c4-42e9-8c65-c7baa02152fb.png)Los Angeles TimesHoward Blume and Andrew Khouri and Jaweed Kaleem![](https://www.privacyguides.org/content/images/thumbnail/75-87d125ea-cbbd-4153-8ca2-c1ea17f15c5e.jpg)](https://www.latimes.com/california/story/2026-10-16/state-testing-student-data-hack) ## Florida DMV hacked after police dept insecurely stored login info This hack appears unrelated to last month's IDscan.net breach. This breach occurred on September 4th, though the Florida Department of Highway Safety and Motor Vehicles (FLHSMV) is just now sending out notifications. There are few details at this time, such as how many people or what data was impacted. The FLHSMV says that they may not have current records for impacted victims who have moved out of state. The article offers an email address to contact if you want to ask if you were impacted. [Florida DMV hacked after police dept insecurely stored login infoFlorida issues alerts after statewide DMV data breach linked to ShinyHunters.![](https://www.privacyguides.org/content/images/icon/cropped-ars-logo-512_480-300x300-6558ccc2-ab00-4019-8fb3-731931977360.png)Ars TechnicaAshley Belanger![](https://www.privacyguides.org/content/images/thumbnail/GettyImages-1384284626-1152x648-66530e01-48f2-4dcb-9b84-a475504e8bbc.jpg)](https://arstechnica.com/tech-policy/2026/10/huge-dmv-data-breach-impacted-current-and-former-florida-residents/) ## Nikkei discloses third data breach in a month, 1.8M records exposed The company said that 150,000 records contained at least one of the following data types: full names, email addresses, physical addresses, telephone numbers, and dates of birth. Email addresses appeared in 120,000 records. The remaining 1.68 million records contain no identifiers, the company said, and no credit card information was exposed. [Nikkei discloses third data breach in a month, 1.8M records exposedNikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.![](https://www.privacyguides.org/content/images/icon/bleeping-b5dee5be-dfcd-4827-ac82-faaaeecf0285.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/nikkei-c0ddcecd-f5ae-4a76-bafa-9b90701d9fc9.jpg)](https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/) ## Zeabur shutting down after second security breach in two months Zeabur is a developer hosting and deployment platform that lets developers connect a GitHub repository and have the platform handle deployment, databases, HTTPS, and infrastructure management. Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. Also, Zeabur confirmed root sign-ins on 101 GCP servers by 92 users, with the attackers adding SSH keys to 50 servers and attaching 16 customer disk copies to their own virtual machines. After discovering the latest security incident, Zeabur announced over the weekend that it will shut down its services starting December 1, 2026, and finish by December 31, 2026. [Zeabur shutting down after second security breach in two monthsDevelopment platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts.![](https://www.privacyguides.org/content/images/icon/bleeping-4a288644-60e7-49da-9e76-54e9b58b0719.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/zeabur-63a0f1bd-401f-4034-9d92-ef00a9593bed.jpg)](https://www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/) ## More than 1.5 million Canadian Crime Stoppers tips leaked, CBC exclusive finds The data was stolen last March by hacktivist collective Internet Yiff Machine. The group said it wanted to disprove the claim that the platform was "anonymous" and "secure." The stolen data goes back 25 years. More than 850,000 tips — about half of all Canadian records identified by CBC — included personally identifiable information about tipsters, individuals named in allegations and even Crime Stoppers staff and police. Street addresses and phone numbers appeared most frequently, alongside tens of thousands of personal emails, licence plates and hundreds of banking details related to cash rewards. In over 4,300 reports, tipsters introduced themselves with a full name. Copies of the data are not publicly available online, though general consensus is that it's probably somewhere if it's already being shared this widely. ## Capcom confirms data breach affecting 11.7 million accounts Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. Apart from emails, exposed data includes account creation date, last login timestamp, number of logins, and the IP address used at the last login. Capcom found that for a small subset of 43 accounts, dates of birth, gender, nicknames, and countries were also exposed. For another subset of 196 accounts, the hackers changed the CAPCOM ID login passwords in an attempt to lock the owners out, but the company took action and reset them. Although the timing of the breach remains unclear, Capcom said it detected suspicious activity and confirmed unauthorized access on October 19. [Capcom confirms data breach affecting 11.7 million accountsJapanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.![](https://www.privacyguides.org/content/images/icon/bleeping-cdf2efbd-08c1-4462-a990-e48d03d0f4ef.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/capcom-8c2d0b7c-8a3b-41ea-be09-8c430b9444d3.jpg)](https://www.bleepingcomputer.com/news/security/capcom-confirms-data-breach-affecting-117-million-accounts/)