Breach

Major South Korean telecommunications provider SK Telecom was disclosed by the country's Ministry of Science and ICT to have had almost 26.69 million units of international mobile subscriber identity stolen following a data breach initially reported last month, according to The Korean Herald.

Marks & Spencer was reported to have had its systems compromised by the Scattered Spider ransomware gang through login credentials obtained from an earlier attack against third-party IT services and consulting provider Tata Consultancy Services, according to Cybernews.

TeleMessage, an Israeli platform providing a clone of the Signal messaging app used by former National Security Advisor Mike Waltz and other Trump administration officials, had 410 GB of data exposed in a breach earlier this month indexed by the nonprofit DDoSecrets, Hackread reports.

SecurityWeek reports that Harbin Clinic, a Georgia-based healthcare provider, had information from 210,140 patients pilfered following a July cyberattack against leading third-party debt collection agency Nationwide Recovery Services.

Incident underscores impact of third-party breaches on health organizations, security experts say.

The Office of Personnel Management has been urged by Senate Select Committee on Intelligence Vice Chairman Mark Warner, D-Va., to ensure the continuation of identity protection services provided to current and former federal employees whose data had been stolen in the colossal breach of the agency a decade ago, according to FedScoop.

BusinessKorea reports that Adidas has confirmed having certain data from its consumers stolen following an attack against a third-party customer service provider.

U.S. multinational semiconductor manufacturing company Broadcom had its Middle Eastern employees' data stolen following a September ransomware attack against Business Systems House, which is a partner of its former payroll services provider ADP, reports The Register.