https://pwnsy.com/tools/cyber-watch/Sourced cyber incidents and official statements, from pwnsy Cyber Watch.enSun, 08 Nov 2026 00:00:00 +0000https://pwnsy.com/tools/cyber-watch/incidents/philippines-government-leak-claims-november-2026/f0bc1b2aa090bf9bSat, 07 Nov 2026 00:00:00 +0000On 5 and 6 November 2026 hackers claimed leaks from the OVP, PhilJobNet, PAF, PCG, DICT, DOTr, SEC, BIR and others. Most claims are unverified.https://pwnsy.com/tools/cyber-watch/malaysia/#all9b0e18232cd002dbSat, 07 Nov 2026 00:00:00 +0000NACSA says it is aware of incidents and NC4 is monitoring. Institutions and incident type not disclosed. MKN on 7 November called them cybersecurity incidents and system disruptions, with BNM leading sector preparedness. Sources: https://www.thestar.com.my/tech/tech-news/2026/11/07/nacsa-says-it-is-aware-of-cyber-incidents-involving-financial-institutions-currently-monitoring-developments, https://www.freemalaysiatoday.com/category/nation/2026/11/07/don-t-be-fooled-by-claims-of-cyberattack-says-security-councilhttps://www.thestar.com.my/tech/tech-news/2026/11/07/nacsa-says-it-is-aware-of-cyber-incidents-involving-financial-institutions-currently-monitoring-developments80ae55f53d5133ccSat, 07 Nov 2026 00:00:00 +0000NACSA says it is aware of incidents at several financial institutions and the situation is under control. None named.https://www.thestar.com.my/news/nation/2026/11/07/malaysia039s-online-banking-system-remains-secure-says-comms-minister93afa44315d71e14Sat, 07 Nov 2026 00:00:00 +0000Fahmi Fadzil says non-state actors attempted attacks but no data theft or online banking disruption has occurred, and Bank Rakyat's case was a defacement.https://utusansarawak.com.my/isu-serangan-siber-polis-sarawak-terima-empat-laporan-di-miri/f9f4f5dc357ed634Sat, 07 Nov 2026 00:00:00 +0000Miri police receive four reports of failed ATM cash withdrawals and are checking whether a cyberattack or a technical fault caused them.https://www.mycert.org.my/portal/advisory?id=MA-1500.1120266e81c01c09eb9b80Sat, 07 Nov 2026 00:00:00 +0000MyCERT advisory MA-1500.112026 rates the risk critical for Synology NAS owners: a C3RB3R ransomware wave is mass-encrypting internet-exposed devices through unpatched DSM flaws (CVE-2024-10441), and the Node2Shell Brotli flaw (CVE-2026-111497) is under investigation as another way in. Patch or reinstall within 24 to 48 hours.https://www.freemalaysiatoday.com/category/nation/2026/11/07/don-t-be-fooled-by-claims-of-cyberattack-says-security-council4f5838ecaf493d06Sat, 07 Nov 2026 00:00:00 +0000MKN warns the public against unverified cyberattack claims on social media, keeps the threat level at Medium and says BNM leads financial-sector preparedness.https://pwnsy.com/tools/cyber-watch/singapore/#all60548354872b791dSat, 07 Nov 2026 00:00:00 +0000A malicious cyber incident leaked user personal data. Police report filed; PDPC is investigating. It learned of the breach on 29 October, engaged Ensign InfoSecurity and says clinical records were not affected. Sources: https://www.asiaone.com/singapore/doctor-anywhere-data-breach, https://sg.news.yahoo.com/doctor-anywhere-hit-data-breach-101642328.htmlhttps://pwnsy.com/tools/cyber-watch/singapore/#all6ae5926c72e52263Sat, 07 Nov 2026 00:00:00 +0000Qilin listed the Singapore engineering firm on its leak site on 7 November. No data volume stated and no press coverage found. Sources: https://www.ransomware.live/id/Qk9TSCBFbmdpbmVlcmluZyBQcml2YXRlIExpbWl0ZWRAcWlsaW4https://pwnsy.com/tools/cyber-watch/philippines/#allf633434e5f83d293Sat, 07 Nov 2026 00:00:00 +0000BIR is investigating an alleged leak of its data with DICT, NCERT, CICC and the PNP Anti-Cybercrime Group. Posts online allege BIR data was leaked; extent not stated. Sources: https://www.gmanetwork.com/news/topstories/nation/1008620/bir-data-leak-under-gov-t-probe/story/https://tribune.net.ph/2026/11/07/pnp-records-eight-cybercrime-convictions-144-referred-cases-in-october8cfc441dfd36d157Sat, 07 Nov 2026 00:00:00 +0000PNP reported eight cybercrime convictions and 144 referred cases for October.https://pwnsy.com/tools/cyber-watch/israel/#all100ffcf7705877aaSat, 07 Nov 2026 00:00:00 +0000Israeli security firm Profero says attackers changed cold room controls in May, destroyed three compressors and planted wiper malware, and attributes the attack to Cyber Isnaad Front, which it links to the IRGC. No official confirmation was reported. Sources: https://www.ynetnews.com/tech-and-digital/article/hy0dwqnamghttps://pwnsy.com/tools/cyber-watch/italy/#allddaf80039a443bccSat, 07 Nov 2026 00:00:00 +0000Tajani said pro-Russian hackers exposed his private information on the dark web over Italy's support for Ukraine. Sources: https://www.straitstimes.com/world/europe/italy-foreign-minister-says-he-has-been-targeted-by-pro-russian-hackers-over-ukraine-backinghttps://pwnsy.com/tools/cyber-watch/incidents/bank-rakyat-website-defacement/6127bb18208a9d1dFri, 06 Nov 2026 00:00:00 +0000Bank Rakyat websites, including the iRakyat login page, were defaced on 6 Nov 2026. What the bank confirmed, what the attacker claims, and what customers should do.https://pwnsy.com/tools/cyber-watch/incidents/m1-data-breach/3b74a99c10b2b669Fri, 06 Nov 2026 00:00:00 +0000M1 says a breach found on 30 Oct 2026 exposed customer names, NRIC/FIN numbers, birth dates, phone numbers, emails and addresses. Payment data was not hit.https://pwnsy.com/tools/cyber-watch/malaysia/#alld5a5f4bea59b62b2Fri, 06 Nov 2026 00:00:00 +0000Websites defaced; the bank blames a third-party-managed site and says deposits, data and banking services were unaffected. On 7 November Fahmi Fadzil said the bank blocked the affected server and no data theft had been found so far. The actor claims internal access and a data sample, and no sample has been published. Screenshots shared on the night of 6 November show the same MARLANWG message and Session contact ID on both bankrakyat.com.my and the i-Rakyat online banking site, irakyat.com.my. Sources: https://www.malaymail.com/news/malaysia/2026/11/07/bank-rakyat-blames-third-party-glitch-for-website-outage-says-customer-funds-and-data-safe/242358, https://www.lowyat.net/2026/409395/bank-rakyat-takes-down-sites-after-suspected-cyber-attack/, https://x.com/Pelabur_Bijak/status/2118711569681105127, https://www.malaymail.com/news/malaysia/2026/11/07/fahmi-says-online-banking-remains-safe-despite-cyberattacks-and-bank-rakyat-hack/242378https://www.thestar.com.my/news/nation/2026/11/06/mcmc-on-higher-alert349a4849adde598dFri, 06 Nov 2026 00:00:00 +0000MCMC steps up monitoring; Bank Negara restates RMiT duties; Cabinet orders a review of government, bank and GLC systems.https://pwnsy.com/tools/cyber-watch/singapore/#all0afa6e023b33c92eFri, 06 Nov 2026 00:00:00 +0000A breach found on 30 Oct exposed customer names, NRIC/FIN numbers, birth dates, mobile numbers, emails and addresses. Contained; payment data not affected. PDPC said on 6 November it is investigating; M1 has not said how many customers were affected. Sources: https://mustsharenews.com/m1-data-breach/, https://goodyfeed.com/m1-doctor-anywhere-disclose-separate-data-breaches-customer-numbers-not-revealed/https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-014/4779c126491fca11Fri, 06 Nov 2026 00:00:00 +0000Advisory on attacks against remotely accessible operational technology control systems, citing the European supermarket refrigeration attacks.https://www.csa.gov.sg/alerts-and-advisories/advisories/ad-2026-015/e7caada185012712Fri, 06 Nov 2026 00:00:00 +0000CSA, GovTech and IMDA issue a joint advisory on using personal AI agents safely and securely.https://spacebar.th/business/docomo-outage-thai-telecom87e82da2f10a14b1Fri, 06 Nov 2026 00:00:00 +0000The digital ministry asks regulator NBTC to order mobile operators to tighten defences after the NTT Docomo attack in Japan.https://pwnsy.com/tools/cyber-watch/philippines/#all41a7152d5bcdc002Fri, 06 Nov 2026 00:00:00 +0000A forum user claimed payroll, attendance and biometric records for about 4,534 DOTr employees plus HRIS source code. Sources: https://astig.ph/hacker-claims-dotr-payroll-biometric-data-4534-employees-2026/, https://radar.ph/govt-data-breach-claims-pile-up-npc-yet-to-receive-reports/, https://hacknotice.com/2026/11/06/philippines-dotr-hris-complete-personnel-payroll-data-employee-pii-biometrics-s/https://pwnsy.com/tools/cyber-watch/philippines/#allff04f82c2205eb32Fri, 06 Nov 2026 00:00:00 +0000A forum user claimed files from the SEC. Sources: https://radar.ph/govt-data-breach-claims-pile-up-npc-yet-to-receive-reports/https://newsbytes.ph/2026/11/06/npc-checking-data-leaks-following-nov-5-cyberattack-reports/12ffa032dc1fe346Fri, 06 Nov 2026 00:00:00 +0000The privacy commission will verify reported 5 Nov leaks at several agencies and reminds them of the 72-hour notification rule.https://newsbytes.ph/2026/11/06/npc-checking-data-leaks-following-nov-5-cyberattack-reports/889fd9abddc238f5Fri, 06 Nov 2026 00:00:00 +0000NPC said it had received no breach notifications from agencies named in the 5 November leak claims and would verify them.https://dantri.com.vn/kinh-doanh/hon-668000-tai-khoan-thanh-toan-co-dau-hieu-vi-pham-phap-luat-can-lam-gi-20261107142442193.htm1a6fd54dfafbb39aFri, 06 Nov 2026 00:00:00 +0000A05 deputy director Col. Nguyen Ba Son said more than 668,000 payment accounts showed signs of unlawful activity.https://www.nctv.nl/documenten/2026/11/06/cybersecuritybeeld-nederland-2026c3fd05401f1a2694Fri, 06 Nov 2026 00:00:00 +0000Cybersecuritybeeld Nederland 2026 said Dutch digital resilience is falling behind a growing state and criminal threat.https://english.adnkronos.com/2026/11/06/japan-police-agency-launches-nationwide-data-breach-probe-hq/a47aba0395d01c1eFri, 06 Nov 2026 00:00:00 +0000National Police Agency set up a nationwide joint investigation headquarters for cyberattacks since January 2026 that caused large data breaches.https://www.cac.gov.cn/2026-11/06/c_1795719632109055.htmabd538b0affae35dFri, 06 Nov 2026 00:00:00 +0000The CAC and the financial regulator launched a campaign against online financial black and grey market information.https://berita.rtm.gov.my/nasional/senarai-berita-nasional/senarai-artikel/matikan-muat-turun-automatik-whatsapp-telegram-elak-serangan-siber-nacsa/9942a6da6300d757Thu, 05 Nov 2026 00:00:00 +0000NACSA tells users to turn off WhatsApp and Telegram auto-download after .vbs files disguised as financial and legal documents spread via WhatsApp Web.https://pwnsy.com/tools/cyber-watch/indonesia/#allce11d641f0afc69fThu, 05 Nov 2026 00:00:00 +0000Fore reported unauthorised access to customer data to Komdigi on 28 Oct; Komdigi puts it at about 5.7 million customer accounts. Sources: https://www.cnbcindonesia.com/tech/20261105084917-37-782483/fore-lapor-data-pelanggan-bocor-ke-komdigi-begini-sanksinya, https://investortrust.id/business/121838/data-fore-coffee-diduga-bocor-kemenkomdigi-bakal-kasih-sanksihttps://pwnsy.com/tools/cyber-watch/indonesia/#allb558b9ee7569c97cThu, 05 Nov 2026 00:00:00 +0000A dark web forum seller posted a sample and offered a 2026 database of Mandiri debit card users with names, phones, emails, card and account details and limits. Sources: https://harianmassa.id/ototekno/2717861940/nasabah-bank-mandiri-hati-hati-data-kartu-debit-bocor-di-dark-webhttps://www.antaranews.com/berita/5834751/ojk-iasc-blokir-rp9675-miliar-dana-terkait-penipuan38c0fa872e4a693bThu, 05 Nov 2026 00:00:00 +0000OJK reports 737,686 IASC scam reports and Rp967.5 billion in blocked funds as of 28 October.https://pwnsy.com/tools/cyber-watch/philippines/#allbf97730f94bd5b7bThu, 05 Nov 2026 00:00:00 +0000The OVP says the scheduling platform is run by a third party and holds no classified files, without confirming or denying a breach. DeathNoteHackers claims about 10 GB of documents from the platform. Sources: https://politiko.com.ph/hack-or-political-attack-sara-dutertes-ovp-cries-smear-over-alleged-data-leak/https://pwnsy.com/tools/cyber-watch/philippines/#allfeed650c62675a27Thu, 05 Nov 2026 00:00:00 +0000DeathNote Hackers claims about 19.2 million records from the government job portal. Sources: https://philstartech.com/news/2026/11/05/20296/philippines-nov-5-data-breach-government-agencies-2025/https://pwnsy.com/tools/cyber-watch/philippines/#all2a72ca6512168e58Thu, 05 Nov 2026 00:00:00 +0000A forum user claims about 11 GB of files including personnel records and ID copies. Sources: https://philstartech.com/news/2026/11/05/20296/philippines-nov-5-data-breach-government-agencies-2025/https://pwnsy.com/tools/cyber-watch/philippines/#alle93f7b15bf20247bThu, 05 Nov 2026 00:00:00 +0000DeathNoteHackers claimed about 1.35 GB across 6,698 files, including personnel and rescue records. Sources: https://astig.ph/hacker-claims-dotr-payroll-biometric-data-4534-employees-2026/, https://radar.ph/govt-data-breach-claims-pile-up-npc-yet-to-receive-reports/https://pwnsy.com/tools/cyber-watch/philippines/#all52b69b579f440b73Thu, 05 Nov 2026 00:00:00 +0000HappyGoLuckyPH claimed about 8 GB of PCGG data. Sources: https://philstartech.com/news/2026/11/05/20296/philippines-nov-5-data-breach-government-agencies-2025/, https://radar.ph/govt-data-breach-claims-pile-up-npc-yet-to-receive-reports/https://pwnsy.com/tools/cyber-watch/philippines/#all1a06cdce597914d5Thu, 05 Nov 2026 00:00:00 +0000A forum user claimed about 3.6 GB of internal DICT documents, including procurement and budget records. Bilyonaryo News Channel, citing a source, reports the intrusion hit DocTracks, the internal document-routing system; DICT has not commented. Sources: https://philstartech.com/news/2026/11/05/20296/philippines-nov-5-data-breach-government-agencies-2025/, https://radar.ph/govt-data-breach-claims-pile-up-npc-yet-to-receive-reports/, https://bnc.bilyonaryo.com/even-dict-isnt-safe-hackers-allegedly-breach-agencys-internal-document-system/business/https://pwnsy.com/tools/cyber-watch/philippines/#alla9ea1562b9496821Thu, 05 Nov 2026 00:00:00 +0000A forum user claimed personal and academic data on more than 81,000 NEUST students. Sources: https://philstartech.com/news/2026/11/05/20296/philippines-nov-5-data-breach-government-agencies-2025/