Halloween Cybersecurity Digest: Danish Registry Breach via Weak Passwords, AI-Driven Card Theft, and Leaky Keurig Coffee Maker
A roundup of October cybersecurity incidents highlights a massive breach of Denmark's Central Population Register through compromised accounts at Pays ApS using the password 123456, exposing data of 8.8 million residents. An AI-powered attacker automated vulnerability discovery to steal over 600,000 payment card details and deploy web skimmers on 119 sites. Other cases include a Danfoss refrigeration system compromise in French supermarkets causing tens of millions in losses, a ShinyHunters breach of FBI agent data, and an accidental exposure of nearly 400,000 patient records by Washington D.C. health officials. Additional incidents involved social engineering at Astrana Health, a Burger King Japan app breach affecting 11 million users, and a Pentagon personnel data leak discovered after six months. The digest also covers failed insider threat lawsuits and a smart coffee maker that transmitted over 1 TB of data due to a firmware fault.
HabrOct 31, 2026Translated from Russian