> ## Content Index
> Fetch the complete content index at: https://www.privacyguides.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# Data Breach Roundup (Oct 23 - Oct 29, 2026)
- URL: https://www.privacyguides.org/news/2026/10/30/data-breach-roundup-oct-23-oct-29-2026/
- Published: 2026-10-30T17:12:38.000Z
- Updated: 2026-10-30T17:12:38.000Z
- Description: Japan was hit with a lot of data breaches this week, but the real headline-maker was DHS.
- Author: Nate Bartram
- Tags: News Briefs, Data Breaches

## Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach

Medical lab testing giant Quest Diagnostics has confirmed a cyberattack and data breach affecting an as-yet unspecified amount of sensitive patient information stored in its systems. Quest said in an 8-K filing with the U.S. Securities and Exchange Commission that it learned of a cyberattack on Wednesday targeting one of its lab testing systems, Quanum, which allows doctor’s offices, hospitals, and healthcare practices to request lab tests for patients while also handling billing. The platform stores a large amount of patient health and medical records, as well as associated diagnostic and billing data. In the notice, Quest said that some patients’ protected health information was taken, including “personal information and patient records,” but the company is still investigating what specific kinds of data were taken. (The website post currently contains “noindex” code, which tells search engines not to list the page in search results, making it far more difficult for people to find the page.)

[Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach | TechCrunchQuest is the latest in a series of healthcare technology companies that have been hacked in recent months.![](https://www.privacyguides.org/content/images/icon/cropped-cropped-favicon-gradient-18d8689b-846a-4497-b45d-f1090e790dad.webp)TechCrunchZack Whittaker![](https://www.privacyguides.org/content/images/thumbnail/quest-862530304-9ec45595-ab40-457f-9277-1117187480e2.webp)](https://techcrunch.com/2026/10/23/lab-testing-giant-quest-diagnostics-confirms-patients-personal-and-health-data-was-compromised-during-breach/)

## University of Copenhagen data breach exposes data of 525,000 people

The information was exposed via a "test" environment, and contains an additional 20,000 staff and student PIN codes used to access campus buildings, disclosed in an update. Original data exposed includes full names, national identity numbers (CPR), phone numbers, and email addresses.

[University of Copenhagen data breach exposes data of 525,000 peopleThe University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people.![](https://www.privacyguides.org/content/images/icon/bleeping-2257661a-65c5-47b8-86fc-cf30e0836200.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/copenhagen-026cad0b-e578-4cd1-afda-2ad335ed7543.jpg)](https://www.bleepingcomputer.com/news/security/university-of-copenhagen-data-breach-exposes-data-of-525-000-people/)

## Energy giant ENGIE discloses data breach affecting customers

ENGIE is based in France and operates in renewable energy, infrastructure, and customer energy supply in 30 countries. The ENGIE spokesperson didn't say how many customers were affected, but told BleepingComputer the incident is limited to customers in France. Although the company didn't share what customer information was stolen in the attack, it said in breach notification letters sent to affected customers that the threat actors gained access to their first and last names, mailing address, email address, phone number, Delivery Point (PDL) or Metering and Estimation Point (PCE), customer ID, and contract number.

[Energy giant ENGIE discloses data breach affecting customersFrench energy giant ENGIE, one of the world’s largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.![](https://www.privacyguides.org/content/images/icon/bleeping-6be95467-72df-4671-8efa-655c745c2828.ico)BleepingComputerSergiu Gatlan![](https://www.privacyguides.org/content/images/thumbnail/ENGIE-headpic-5076b886-7766-4e66-8ff4-3c88ef6fd9d3.jpg)](https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/)

## Japan internet giant GMO says hackers posted stolen customer data

GMO is an "IT and internet services giant," who reported suspected unauthorized access to their Onamae cloud desktop service. They said 27,000 servers may be affected and are advising customers to reset their passwords. The article was light on other details at this time.

[Japan internet giant GMO says hackers posted stolen customer data | TechCrunchJapan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.![](https://www.privacyguides.org/content/images/icon/cropped-cropped-favicon-gradient-73e97c09-9a4d-4fb4-9f38-172c1e55d7ee.png)TechCrunchKate Park![](https://www.privacyguides.org/content/images/thumbnail/data-breach-overview-v2-74f63cb3-d88a-4a14-8726-d3aeaaba4df9.jpg)](https://techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data/)

## Sony ISP subsidiary data breach exposes 2.5 million customer records

A Sony Group Corporation subsidiary, the company provides telecommunications and technology services, acting as an internet service provider (ISP) in Japan. The breach occurred on October 19 and was detected four days later. Impacted data includes full names, phone numbers, email addresses, user IDs, dates of birth, gender, and internet connection IDs. An additional 54,401 email addresses from several email services were also exposed along with account passwords.

[Sony ISP subsidiary data breach exposes 2.5 million customer recordsSony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information.![](https://www.privacyguides.org/content/images/icon/bleeping-660dbf22-d4d3-4f34-9768-a7dcc18c2c7c.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/sony-ec230664-1610-467e-9afa-4c1bd18d7b54.jpg)](https://www.bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records/)

## Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents

The records include email addresses, phone numbers, and office addresses, but also references to internal systems and sensitive information on undercover and surveillance programs. At Homeland Security Investigations (HSI), 39 employees across more than a dozen field offices belong to groups whose names include “CUC,” which government court filings say stands for “certified undercover operation.” Another group references "Keyhole," which federal court filings describe as a certified undercover operation that recently funded HSI’s undercover surveillance of Minneapolis protest groups earlier this year. Others reference a “Communications Intercept Center TechOps (CICTO) Program,” a “Title III Intercept Program” for wiretaps, and an “Illicit Sensor Intercept Program (ISIP).” The names of the groups—there are over 55,000 in all—appear to reference tools for accessing immigration court records, pulling data from seized phones, and conducting surveillance. These include Palantir’s Falcon investigative platform and PenLink, which analyzes phone records and social media. Two permission groups, named “Executive Leadership” and “AI Access,” appear to list people given exceptions to DHS's web filter, which blocks some websites for employees. Other groups named in the leak reference AI tools, including OpenAI’s ChatGPT, Google’s Gemini, and Microsoft’s Copilot. One, called “Grok.com,” includes eight DHS technology officials, including the department’s former chief information officer and chief data officer. More than 700 accounts are associated with a group apparently referencing Signal nearly all belonging to CBP personnel. More than 200 CBP accounts belong to a group referencing Mobile Fortify, a face-recognition app that immigration agents use to identify people. Nearly 20 accounts appear to belong to personnel with the Department of Defense.

[Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE AgentsThe leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot.![](https://www.privacyguides.org/content/images/icon/favicon-7ac3b5d4-be40-4d12-8b5b-8e6fec9112b2.ico)WIREDDhruv Mehrotra and Maddy Varner and Dell Cameron![](https://www.privacyguides.org/content/images/thumbnail/Security_Massive-20Leak-20Exposes-2041-000-20DHS-20Employees_v1-65a4991b-2c29-4175-8642-b4c392a48915.jpg)](https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/)

## Japan Airlines suffers third-party data breach exposing passenger info

Amadeus Passenger Service System - used by JAL Group to handle passenger reservations, ticketing, and check-in - has leaked the data of about 92,000 customers. The threat actor accessed reservation codes (PNRs), names, flight dates, routes, and travel classes. An additional 2,000 customers had the above data types exposed, plus their email addresses, phone numbers, passport numbers, nationalities, frequent flyer numbers, and flight, ticket, and seat numbers. The article is expecting more companies to disclose breaches due to the fact that Amadeus handles IT for numerous other travel agencies and related industries.

[Japan Airlines suffers third-party data breach exposing passenger infoJapan Airlines (JAL) has announced that a data breach at Amadeus’s Passenger Service System exposed the data of about 92,000 customers.![](https://www.privacyguides.org/content/images/icon/bleeping-f37cb426-4879-498c-9336-c4f9636cc017.ico)BleepingComputerBill Toulas![](https://www.privacyguides.org/content/images/thumbnail/aircraft-12595c06-9f12-4072-9ff9-5681b091d892.jpg)](https://www.bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info/)