> ## Content Index > Fetch the complete content index at: https://www.metacurity.com/llms.txt > Use this file to discover other available public pages before exploring further. # Cyberattack on BAE Systems knocks US bankruptcy notices offline - URL: https://www.metacurity.com/cyberattack-on-bae-systems-knocks-us-bankruptcy-notices-offline/ - Published: 2026-10-16T13:28:45.000Z - Updated: 2026-10-16T13:28:45.000Z - Description: Attack disrupts the platform serving every federal bankruptcy court, halting notice production and cutting access to key judiciary websites. - Author: Cynthia B Brumfield - Tags: Cybersecurity, News, #no-feature-image ![Petition to File For Bankruptcy](https://images.unsplash.com/photo-1527874594978-ee4f8a05b4c1?crop=entropy&cs=tinysrgb&fit=max&fm=jpg&ixid=M3wxMTc3M3wwfDF8c2VhcmNofDJ8fGJhbmtydXB0Y3l8ZW58MHx8fHwxNzkyMTUyNjU1fDA&ixlib=rb-4.1.0&q=80&w=2000) Photo by [Melinda Gimpel](https://unsplash.com/@melindagimpel?utm%5Fsource=ghost&utm%5Fmedium=referral&utm%5Fcampaign=api-credit) / [Unsplash](https://unsplash.com/?utm%5Fsource=ghost&utm%5Fmedium=referral&utm%5Fcampaign=api-credit) ### A cyberattack on a US government contractor has impacted the platform used by all federal bankruptcy courts across the country. The Administrative Office of the US Courts published a statement on Thursday afternoon warning that a cyberattack on British multinational BAE Systems disrupted the Bankruptcy Noticing Center (BNC) — a system that produces and transmits bankruptcy notices for all federal bankruptcy courts. “The Administrative Office of the US Courts has been in communication with the impacted courts and is also coordinating with BAE Systems. BAE is actively investigating this incident and working to restore operations,” officials said. “As a result of the incident, all access to the BNC systems and websites that BAE operates on behalf of the judiciary and the related bankruptcy noticing process are unavailable at this time, including bnc.uscourts.gov, bankruptcynotices.uscourts.gov, notices.uscourts.gov, and the National Creditor Registration Service.” The incident has halted all production of bankruptcy notices as well. BAE Systems is one of the largest defense contractors in the world and is deeply embedded in the US Government — providing aerospace, weapons, and information security services across several federal departments. A spokesperson for the company said they are “aware of a security incident that is isolated to the BNC system and have taken immediate steps to address it.” “We are coordinating closely with \[the Administrative Office of the US Courts\] on the response,” they added. ([Jonathan Greig / The Record](https://therecord.media/federal-bankruptcy-courts-dealing-with-cyberattack-outage?ref=metacurity.com)) **Related:** [*US Courts*](https://www.uscourts.gov/data-news/judiciary-news/2026/10/15/cybersecurity-incident-disrupting-bankruptcy-court-operations?ref=metacurity.com)*,* [*Infosecurity Magazine*](https://www.infosecurity-magazine.com/news/cyber-incident-bae-us-bankruptcy/?ref=metacurity.com)*,* [*Bleeping Computer*](https://www.bleepingcomputer.com/news/security/bae-systems-cyberattack-disrupts-us-federal-court-operations/?ref=metacurity.com) ### OpenAI lets anyone inject ads into ChatGPT users’ sessions, targeting specific groups of people based on their email address, phone number, or a unique identifier on their phone, according to 404 Media’s own tests of ChatGPT’s advertising ecosystem. While the ad targeting available in ChatGPT is somewhat standard practice across the advertising industry, the chatbot’s one billion monthly active users may not understand they, in some cases, are being specifically targeted because of their personal data the advertiser has uploaded to OpenAI. ChatGPT’s ad targeting is also novel in that it is also based on the prompts users enter into the chatbot, prompts that users may assume are private but which, as 404 Media has previously shown, may be reviewed by humans. Or, in this case, used for ad targeting purposes. “OpenAI’s advertising products are operating just like most other massive companies which start to monetize their audiences — they are boiling the frog and hoping their users won’t notice the privacy implications from their new ads,” Zach Edwards, co-founder of DecryptAds, a company that collects online advertising data for research purposes, told 404 Media. ([Joseph Cox / 404 Media](https://www.404media.co/how-chatgpt-targets-ads-to-you-based-on-your-prompts-phone-number-and-email/?ref=metacurity.com)) **Related:** [*The Neuron*](https://www.theneurondaily.com/p/october-16-friday-1362?ref=metacurity.com)*,*[ *Gadget Review*](https://www.gadgetreview.com/chatgpt-can-target-ads-with-your-prompts-email-and-phone?ref=metacurity.com) > [ View this post on Instagram ](https://www.instagram.com/reel/DehT5cgsDIA/?utm%5Fsource=ig%5Fembed&utm%5Fcampaign=loading) ### Femern Link Contractors (FLC), the main consortium constructing the Fehmarnbelt immersed tunnel between Denmark and Germany, has reported a cybersecurity incident. Project owner Femern A/S said on 13 October that FLC had informed it of the incident and that discussions with the contractor were ongoing. “At present we do not have any further information,” said Jens Villemoes, press director at Sund & Bælt, Femern A/S’s parent company. Femern A/S has not said whether construction systems, project data or operational equipment have been affected, and no disruption to construction has been confirmed. FLC is responsible for construction of the tunnel element factory, the immersed tunnel itself, and the portals and ramps on both sides of the Fehmarnbelt. The consortium comprises VINCI Construction Grands Projets, Per Aarsleff, Wayss & Freytag Ingenieurbau, Max Bögl Stiftung, CFE, Solétanche Bachy International, BAM Infra and BAM International. ([Tris Thomas / Tunneling Journal](https://tunnellingjournal.com/cyber-incident-hits-fehmarnbelt-tunnel-contractor/?ref=metacurity.com)) **Related:** [*Femern*](https://femern.com/da/presse/nyheder/hovedentreprenor-pa-femern-projektet-ramt-af-cyberhaendelse/?ref=metacurity.com)*,* [*Informat*](https://informat.ro/en/international/cyberattack-on-the-company-building-the-fehmarn-belt-tunnel-143345?ref=metacurity.com) ### The operator of the Burger King hamburger chain in Japan on Thursday became the latest company to report a data breach, with 11.18 million customer records exposed through unauthorized access to a server managing data from its official smartphone app. The leaked data includes users' names, dates of birth, email addresses, phone numbers, and gender. BK Japan said it has not confirmed any fraudulent use of the information and is investigating the breach. Credit card information is not stored by the company and was not compromised. A spate of data breaches has hit Japanese companies in recent weeks, including the Times Car car-sharing service, East Japan Railway Co and Yamaha Motor Co. ([Japan Today](https://japantoday.com/category/business/update1-burger-king%27s-japan-operator-says-11.18-mil.-customer-records-exposed?comment-order=oldest&ref=metacurity.com)) **Related*:* [*HackRead*](https://hackread.com/burger-king-japan-data-breach-11-million-app-members/?ref=metacurity.com)*,* [*News on Japan*](https://newsonjapan.com/article/151065.php?ref=metacurity.com)*,* [*Bleeping Computer*](https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/?ref=metacurity.com) ### Major Japanese parcel delivery company Yamato Transport Co. said about 5.31 million customer data records, including names and addresses, had been leaked due to unauthorized access to its payment service system. The service allows customers to pay for goods purchased online at convenience stores or other locations after receiving them. The data did not include credit card information or passwords. The breach involved around 50,000 data records containing information such as the names and phone numbers of package recipients. In addition, about 4,100 data records containing the names of companies and stores that sell products online were also leaked. Yamato Transport confirmed the unauthorized access on Sept. 28 and suspended the service. It resumed operations on Oct. 9. Major daily publisher Nikkei Inc. said that about 1.83 million personal data records had been leaked due to unauthorized access to its cloud service. According to the company, the information includes names, telephone numbers, email addresses, and addresses, while 1.68 million of those records do not contain information that could identify individuals on their own. The authentication credentials used to access the cloud service were stolen, and the system was subject to unauthorized access from the early hours of Oct. 7 through the morning. No secondary damage resulting from the leaked information, nor any suspension of Nikkei's system, has been confirmed, the company said. Yokohama-based nutritional supplements maker Fancl Corp. also confirmed that unauthorized access to its e-commerce website was detected and that around 390,000 personal data records were exposed. About 440,000 personal data records of the company's subsidiary Attenir Corp. were also breached. ([Kyodo News](https://english.kyodonews.net/articles/-/88454?ref=metacurity.com)) **Related:** [*ASCII*](https://ascii.jp/en/elem/000/004/443/4443352/?ref=metacurity.com) --- **Spend less time finding cybersecurity news. Get more out of it.** Metacurity delivers the cybersecurity news, analysis, and insight that would take you hours—and sometimes days—to assemble yourself. Every weekday, we sift through thousands of news articles, press releases, filings, court documents, and research reports, including details that vendor announcements and PR pitches leave out. We tell you what changed, why it matters, and what deserves your attention. Minimal vendor marketing. No outrage bait. No SEO filler. **A paid subscription gives you:** - **The full Metacurity archive:** Every newsletter, searchable and browsable. - **Our weekly long-reads roundup:** The best cybersecurity writing from across the industry, selected and vetted to make your reading time count. - **Specialized reports and analysis:** Periodic deep dives that go beyond the daily headlines. - **A direct role in sustaining independent journalism:** Your subscription helps keep our editorial priorities focused on readers and the cybersecurity community. If Metacurity saves you time, helps you spot an important development, or gives you a clearer understanding of the industry, please consider becoming a paid subscriber. Your support keeps that work going. **Subscribe today—and thank you for reading and supporting Metacurity.** [Upgrade my subscription](#/portal/account/plans) --- ### A Korean National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal information of health insurance subscribers to external parties, but victims have yet to be notified of the data breach. Rep. Kim Ki-woong of the People Power Party revealed this during a parliamentary audit of the Health and Welfare Committee on October 16\. According to Kim, the employee provided personal data of subscribers and dependents to external entities illegally for over two years in exchange for bribes. NHIS Executive Managing Director Jeong Jae-wook responded that the employee received “an amount in the hundreds of millions of won” in exchange for the data. The NHIS dismissed the employee in July but has not informed victims of the breach for three months since. Under the Personal Information Protection Act, data handlers must notify affected parties of the breach’s details and preventive measures within 72 hours of discovery. Kim stated, “Failing to take necessary action three months after the breach itself constitutes a punishable offense and could lead to secondary damage.” This is not the first data breach at the NHIS. According to Kim, seven similar cases occurred last year. In response, NHIS Chairman Kang Cheong-hee acknowledged, “While we implement various technical measures to manage data, there are clear limitations in monitoring employees who extract information during work hours. Nevertheless, we will strengthen oversight.” ([Kim Ji-won / The Chosun Daily](https://www.chosun.com/english/national-en/2026/10/16/HUAXARDOYBGLZKK7PH5VT4VCDI/?ref=metacurity.com)) **Related:** [*ChosunBiz*](https://biz.chosun.com/en/en-science/2026/10/16/VDKDSD43RVECVN5GJBNEZGCJB4/?outputType=amp&ref=metacurity.com) ### Swiss online magazine Republik said it has fallen victim to a cyberattack in which user data was compromised, but no credit card details were leaked. Unknown individuals exploited a security vulnerability in an analytics tool. On Wednesday morning, one of the analysis tools had stopped working, according to a statement on the *Republik* website. It marked the end of an unauthorized access incident that had been ongoing since August. “The security vulnerability had been known since August 6, but we failed to take the necessary countermeasures in good time,” the statement reads. *Republik* does not know who was behind the attack. There is much to suggest it was a broad, automated wave of attacks. The attackers are said to have first searched for what was contained in every Metabase installation – the tool with the security vulnerability – such as login details and keys for AI services that could be resold. So far, there is no indication that anyone specifically targeted *Republik*. However, the data has been leaked. The attackers certainly accessed the details of active publishers, subscribers, newsletter recipients, and all former users. The data records included email addresses, names and, where provided, telephone numbers, year of birth and gender. This means that people who never had a subscription but merely subscribed to a newsletter were also affected. ([Swissinfo.ch](https://www.swissinfo.ch/eng/various/hackers-steal-user-data-from-the-online-magazine-republik/92225537?linkType=guid&utm%5Fsource=multiple&utm%5Fcampaign=swi-rss&utm%5Fmedium=rss&utm%5Fcontent=o)) **Related:** [*blue News*](https://www.bluewin.ch/en/news/hackers-steal-user-data-from-the-online-magazine-republik-li.3637522?ref=metacurity.com)*,* [*r/Switzerland*](https://www.reddit.com/r/Switzerland/comments/1x6vvqr/republik%5Fthe%5Fnews%5Forganization%5Fgot%5Fhacked%5Fvia/?ref=metacurity.com) ### Researchers at GreyNoise report that a proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth-sharing application that lets users earn money by sharing their internet connections, on devices without the owners’ consent. Pawns.app account holders are rewarded for allowing traffic from other users to flow through their network, provided it runs on trusted, non-blocking IP addresses. By installing the app on multiple systems, the attacker likely accumulated larger payouts. GreyNoise discovered the campaign while investigating suspicious activity at an unnamed organization, and identified at least 143 compromised devices worldwide. ([Bill Toulas / Bleeping Computer](https://www.bleepingcomputer.com/news/security/hackers-hijack-d-link-ubiquiti-devices-to-resell-your-stolen-bandwidth/?ref=metacurity.com)) **Related:** [*GreyNoise*](https://www.greynoise.io/blog/proxyjacking-edge-devices-residential-proxies?ref=metacurity.com) ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-47.png) Source: GreyNoise. ### Researchers at Second Security report that threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. Multiple administrator reports indicate that attacks began in mid-September, roughly a month before the formal security bulletin, the GitHub advisory, and CVE publication. CVE-2026-110447 impacts richdocumentscode versions before 26.4.303 and resides in the Nextcloud app’s mechanism for starting the bundled Collabora server. The flaw affects only the optional built-in CODE server app. Standalone Collabora Online servers, Docker and RPM/DEB installations, and Nextcloud All-in-One deployments remain unaffected, according to Collabora. The attacks involve sending a malicious request to the app’s *proxy.php* endpoint, triggering OS command injection. Second Security analyzed real-world examples from open-source flaws and found that the median interval between public fixes and CVE publication was 39 days in August, up from 5.1 days in January. The researchers suggest that growing volumes of AI-assisted vulnerability discoveries are straining CVE processing and contributing to publication delays. In many cases, the researchers found public exploit code emerged online within hours of a security fix and several days before the corresponding CVE was published. Second Security notes that the use of AI tools makes it easy for attackers to generate working exploits for published fixes. In Collabora’s case, the fix was committed on September 9, and version 26.4.303 was released on September 11\. The advisory and CVE were published on October 14, a gap of more than four weeks. ([Bill Toulas / Bleeping Computer](https://www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/?ref=metacurity.com)) **Related:** [*The Patchless Window*](https://thepatchlesswindow.com/?ref=metacurity.com)*,* [*GitHub*](https://github.com/CollaboraOnline/richdocumentscode/issues/354?ref=metacurity.com)*,* [*Pasquale Pillitteri*](https://pasqualepillitteri.it/en/news/24056/nextcloud-collabora-code-web-shells-cve?ref=metacurity.com) ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-48.png) Source: Second Security. ### An August cyberattack on Central Ohio Primary Care compromised protected health and personal information and other data points of over 1.4 million current and former patients and employees, the physician practice acknowledged Oct. 15. Central Ohio Primary Care (COPC), one of the largest primary care organizations in the United States, first discovered the attack on Aug. 25 but did not publicly announce what happened for about a month and a half. The incident stemmed from a "vishing," or voice phishing attack. COPC declined to offer details about the nature of the vishing attack, such as who the bad actor was impersonating in order to obtain unauthorized information, but did confirm that the scam was "not directed at patients." ([Samantha Hendrickson / Columbus Dispatch](https://www.dispatch.com/story/news/healthcare/2026/10/15/central-ohio-primary-care-group-cyberattack-private-health-data-breach/92266445007/?gnt-cfr=1&gca-cat=p&gca-uir=true&gca-epti=z115912p115650l003650c115650e1151xxv115912d--77--b--77--&gca-ft=140&gca-ds=sophi&ref=metacurity.com)) **Related:** [*10TV*](https://www.10tv.com/video/news/local/around-14-million-people-impacted-by-central-ohio-primary-care-cybersecurity-breach/530-2dcf1d1d-98d5-4ae6-83b7-7e248921e5db?ref=metacurity.com)*,* [*WSYX*](https://www.metacurity.com/retail-hacking-spree-continues-as-hackers-hit-more-uk-retail-chains-grocery-conglomerate/)*,* [*WCMH*](https://www.nbc4i.com/news/local-news/central-ohio-news/1-4-million-impacted-by-central-ohio-primary-care-physicians-data-breach/?ref=metacurity.com) ### The Town of Bernalillo, New Mexico, was hit by a cyberattack, making most of the town’s online services inaccessible. Currently, all Town of Bernalillo systems that the public interfaces with are frozen and therefore inaccessible online. The town said its IT director found the attack as it was unfolding last weekend and was forced to disconnect computers to halt any further damage. It’s still unclear exactly how the ransomware took root in the town’s computers, but town leaders said a well-known group is behind the attack. The town hasn’t shared information so far about what the attackers are demanding, or if they intend to pay the ransom. As of now, the Town of Bernalillo Motor Vehicle Department is the only office that has been closed due to the lack of access caused by the cyberattack. “Government workers are still working, bills are getting paid, people have, you know, the town has done end-arounds to make sure that people can pay their bills, and business as usual, but it’s been disruptive in the sense that all their data has been frozen,” said Augusta Meyers, Acting Communications Manager, Town of Bernalillo. While the public cannot currently access the town’s online financial services such as water bill payments, residents can still make payments in person at Town of Bernalillo Administrative offices at 829 Camino del Pueblo between 8 a.m. – 4:30 p.m. ([Fallon Fischer / KRQE](https://www.krqe.com/news/new-mexico/town-of-bernalillo-hit-with-cyberattack/?ref=metacurity.com)) **Related:** [*KOB 4*](https://www.kob.com/news/top-news/bernalillo-confirms-a-cyberattack-affected-town-services/?ref=metacurity.com)*,* [*KOAT*](https://www.koat.com/article/bernalillo-county-officials-confirm-weekend-cyberattack-town-bernalillo/74149203?ref=metacurity.com) ### Researchers at Palo Alto Networks Unit 42 report that attackers compromised a telecommunications managed service provider by exploiting vulnerabilities in Fortinet’s centralized management and firewall systems, then deployed PEERSTITCH, a stealthy malware implant that runs inside FortiGate processes. Unit 42 says the activity began with a breach of a FortiManager appliance and exposed configurations and sensitive data linked to more than 500 managed FortiGate firewalls. The researchers say this exposure did not confirm that the clients’ firewalls were also compromised. In the September 2024 intrusion, the attackers exploited CVE-2024-47575, also known as FortiJump, against FortiManager. The flaw let an unauthenticated remote attacker send crafted requests through the device’s management channel and run commands. Unit 42 reported that the attackers registered a rogue device, created an archive, and stole it. The archive included firewall configurations, network details, credentials, and cryptographic trust material. Analysts from Unit 42 identified PEERSTITCH while investigating the intrusion, which they track as CL-STA-0954, also known as UNC5820. Their technical report on the FortiGate implant describes a multi-stage operation that moved from FortiManager compromise to credential use, network monitoring, and malware deployment. The stolen archive gave the attackers a map of the managed environment: device serial numbers and public IP addresses, network routes, firewall rules, and management relationships. It also contained encrypted administrative and VPN credentials and certificates used to establish trust between FortiManager and managed devices. Unit 42 says researchers were able to recover administrative and VPN passwords from the stolen configuration files. ([Tushar Subhra Dutta / Cyber Security News](https://cybersecuritynews.com/fortinet-vulnerabilities/?ref=metacurity.com)) **Related:** [*Unit 42*](https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/?ref=metacurity.com)*,* [*Security Affairs*](https://securityaffairs.com/201077/malware/peerstitch-malware-how-attackers-compromised-500-firewalls-through-fortimanager.html?ref=metacurity.com) ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-50.png) Flowchart of PEERSTITCH activity. Source: Unit 42. ### Opsin, the AI governance and security platform built to detect and contain AI agent misbehavior, today announced raising $21 million in funding led by SYN Ventures and Race Capital to help enterprises securely adopt AI agents at scale. MIT alumnus James Pham, cybersecurity veteran Oz Wasserman, and longtime engineering leader Jeremy Mailen founded Opsin. Pham and Wasserman first worked together at Abnormal Security. ([Stephen Council / Business Insider](https://www.businessinsider.com/opsin-expands-21-m-to-tackle-ai-agents-in-businesses-2026-10?ref=metacurity.com)) **Related:** [*Opsin*](https://www.accessnewswire.com/newsroom/en/computers-technology-and-internet/opsin-raises-21m-to-keep-ai-agents-on-task-and-out-of-trouble-1236364?ref=metacurity.com)*,* [*Opsin Security Resources*](https://www.opsinsecurity.com/blog/opsin-raises-21m-to-expand-its-risk-protection-layer?ref=metacurity.com)*,* [*Pulse 2.0*](https://pulse2.com/opsin-raises-21-million-led-by-syn-ventures-and-race-capital-for-ai-agent-security/?ref=metacurity.com)*,* [*CityBiz*](https://www.citybiz.co/article/919256/opsin-raises-21m-led-by-syn-ventures-and-race-capital-to-expand-ai-agent-security-platform/?ref=metacurity.com)*,* [*InfotechLead*](https://infotechlead.com/tech/vc-funding-deals-opsin-sirona-medical-shamrock-ai-98905?amp=1&ref=metacurity.com) ### Thoma Bravo-owned cybersecurity company Proofpoint will buy ‌data security firm Varonis Systems in an all-cash deal valued at about $6.3 billion. Under the agreement, Varonis shareholders will receive $49.75 per share in cash, a 52% ​premium to the company's closing share price on June 22, the ​day before speculation about a possible sale first emerged, the ⁠companies said. Miami-based Varonis offers digital security services, ​including data classification on cloud storage systems and employee behavior tracking. ([Jaspreet Singh / Reuters](https://www.reuters.com/legal/transactional/proofpoint-buy-varonis-systems-63-billion-all-cash-deal-2026-10-15/?ref=metacurity.com)) **Related:** [*Infosecurity*](https://www.infosecurity-magazine.com/news/france-expose-danfoss-controllers/?ref=metacurity.com)*,* [*The Register*](https://www.theregister.com/security/2026/10/15/researchers-warned-attackers-could-defrost-the-food-months-before-french-supermarkets-got-hit/5303425?ref=metacurity.com)*,* [*Wall Street Journal*](https://www.wsj.com/pro/cybersecurity/proofpoint-to-acquire-varonis-in-6-3-billion-cybersecurity-deal-2c3dc464?ref=metacurity.com) ### Best Thing of the Day: Scientists Know What's What A group of nearly 500 scientists [urged organizations](https://ai-security-letter.org/?ref=metacurity.com) developing, deploying, and testing cyber-capable AI models to immediately adopt high-assurance containment systems and initially default to air-gapping cyber-capable models. ### Bonus Best Thing of the Day: Back to Reality Wall Street appears to be [hitting its limit](https://www.axios.com/2026/10/16/wall-street-limit-ai-spending-debt?ref=metacurity.com) on AI, and financiers are starting to say the quiet part out loud: All of this AI spending doesn't look like it can pay off, at least not for everyone. ### Worst Thing of the Day: Remember to Patch Next Time Cyber insurance [won't likely cove](https://www.insurancebusinessmag.com/uk/news/cyber/french-fridges-hacked-food-destroyed--and-the-cyber-policies-almost-certainly-wont-pay-593813.aspx?ref=metacurity.com)r the tens of millions in losses that 350 French supermarkets experienced when hackers targeted their refrigeration systems. ### Bonus Worst Thing of the Day: Stealing School Children's Faces An old-fashioned smash-and-grab job on a photographer’s vehicle [threatens](https://www.theregister.com/security/2026/10/16/thief-snatches-school-snappers-sd-cards-in-smash-grab/5303379?ref=metacurity.com) the Security of pupils’ data as a UK secondary school says it faces a potential data protection problem. ### Closing Thought ![](https://storage.ghost.io/c/fe/ca/feca6970-c474-4029-9fd4-35f85e158811/content/images/2026/10/image-46.png)