The breach isn’t the problem. The spread is. →The breach isn’t the problem. The spread is. →Measure in 5 min. Free AssessmentFree Assessment
Consumer Services
Breach intelligence, attack campaigns, and threat reports targeting the Consumer Services sector.
Explore Other Sectors
Consumer Services Threat Reports
Critical Eufy Robot Vacuum Vulnerabilities Expose Enterprise IoT Security Gaps
CISA disclosed critical vulnerabilities in Eufy's Omni C20 and X10 Pro robotic vacuum cleaners, affecting devices running firmware versions below 1.6.4. The vulnerabilities include command injection during device pairing (CVE-2026-93289), hard-coded credentials allowing unauthorized access to mapping data (CVE-2026-93290), and improper certificate validation enabling man-in-the-middle attacks (CVE-2026-93291). These flaws could allow unauthenticated attackers to execute system-level commands and arbitrary code on millions of IoT devices deployed worldwide. The timing coincides with increased scrutiny of IoT security following high-profile supply chain compromises and the growing attack surface of connected home devices. Organizations are under mounting pressure to secure IoT ecosystems as these devices become entry points for lateral movement and data exfiltration in corporate networks.
7 hours ago
Kill Chain
ShinyHunters Exploit Vishing to Breach Brinks Home in 2026
In July 2026, Brinks Home, a residential security company, experienced a data breach orchestrated by the cybercriminal group ShinyHunters. The attackers gained access through a voice phishing (vishing) attack targeting a Microsoft Entra account, leading to the exfiltration of over 4.9 million Salesforce records containing personally identifiable information (PII). Brinks Home promptly activated its incident response procedures and engaged forensic experts to contain the breach. The company's alarm monitoring and system functionality remained unaffected. ([en.wikipedia.org](https://en.wikipedia.org/wiki/ShinyHunters?utm_source=openai)) This incident underscores the escalating threat posed by sophisticated social engineering tactics, particularly vishing, employed by groups like ShinyHunters. Organizations must enhance their security awareness training and implement robust multi-factor authentication mechanisms to mitigate such risks.
1 month ago
Kill Chain
Chick-fil-A Credential Stuffing Attack Exposes Customer Data
In June 2026, Chick-fil-A experienced a credential stuffing attack targeting its website and mobile application. Between June 17 and June 19, unauthorized parties used account credentials obtained from third-party sources to access certain Chick-fil-A One accounts. The breach potentially exposed customers' names, email addresses, membership numbers, mobile pay numbers, QR codes, Chick-fil-A credit balances, and the last four digits of credit/debit card numbers. Additional information such as birth dates, phone numbers, and addresses may have also been accessed if stored in the compromised accounts. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/chick-fil-a-discloses-data-breach-after-credential-stuffing-attacks/?utm_source=openai)) This incident underscores the persistent threat of credential stuffing attacks, which exploit reused or compromised credentials across multiple platforms. Organizations must implement robust security measures, including multi-factor authentication and continuous monitoring, to mitigate such risks. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/chick-fil-a-discloses-data-breach-after-credential-stuffing-attacks/?utm_source=openai))
2 months ago
Kill Chain
Upbound Group's 2026 Data Breach Results in $13 Million Acima Fraud
In July 2026, Upbound Group, Inc., a fintech company offering lease-to-own financial solutions, disclosed a cybersecurity incident where unauthorized parties accessed certain non-sensitive customer information and documents. This data was exploited to create fraudulent lease-to-own agreements through its Acima segment, leading to approximately $13 million in financial losses during the second quarter of 2026. The company has since implemented enhanced authentication controls, additional fraud detection mechanisms, and improved monitoring to mitigate further risks. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/upbound-says-hack-caused-13-million-in-fraudulent-acima-leases/?utm_source=openai)) This incident underscores the growing trend of cybercriminals targeting financial institutions to facilitate fraud, highlighting the critical need for robust data protection measures and vigilant monitoring systems to safeguard customer information and prevent financial losses.
2 months ago
Kill Chain
Cyberattack on Nihon Kotsu Disrupts Taxi Services Across Japan
In July 2026, Nihon Kotsu, Japan's largest taxi operator, experienced a cyberattack that compromised its internal systems, leading to the shutdown of critical infrastructure, including the taxi dispatch system. The attack occurred early Saturday morning, prompting the company to implement emergency measures to prevent further damage. As a result, services such as car hire, web booking, reservation management, and telephone dispatch remain unavailable. The company has engaged external cybersecurity experts to investigate the incident and assess potential data leaks. Customers are advised to use the 'GO' taxi app or visit nearby taxi stands for services. This incident underscores the escalating threat of cyberattacks targeting critical infrastructure and essential services. Organizations must prioritize robust cybersecurity measures and incident response plans to mitigate operational disruptions and protect sensitive data.
2 months ago
Kill Chain
Yarbo Mobile App Vulnerabilities Expose Robot Fleet to Remote Control
In June 2026, critical vulnerabilities were identified in Yarbo's Android and iOS mobile applications and cloud infrastructure. These flaws included hard-coded MQTT broker credentials and inadequate authorization controls, allowing unauthorized access to telemetry data and remote command execution on Yarbo's robotic devices. Exploitation of these vulnerabilities could lead to unauthorized control over the robot fleet and exposure of sensitive user information. Yarbo has since released updates to address these issues, urging users to update their applications to version 3.17.4 or later. This incident underscores the persistent risks associated with hard-coded credentials and misconfigured cloud services in IoT devices. As the adoption of connected devices continues to rise, ensuring robust security measures and regular updates is crucial to prevent unauthorized access and potential exploitation.
3 months ago
Kill Chain
Carnival Cruise Data Breach 2026: A Wake-Up Call for Cybersecurity
In April 2026, Carnival Corporation, the world's largest cruise line operator, experienced a significant data breach affecting nearly 6 million individuals. The breach was initiated through a social engineering attack, where an unauthorized actor deceived an employee to gain access to a limited portion of the company's IT system. The attackers, identified as the ShinyHunters extortion gang, claimed responsibility for the breach, stating they stole documents containing over 8.7 million records with personally identifiable information and terabytes of internal corporate data. The compromised data includes names, dates of birth, email addresses, genders, geographic locations, and loyalty program details. Carnival promptly blocked the unauthorized activity and began working with third-party security experts to strengthen their security measures and conduct a thorough investigation. This incident underscores the persistent threat posed by sophisticated cybercriminal groups like ShinyHunters, who employ advanced social engineering tactics to infiltrate organizations. The breach highlights the critical need for robust cybersecurity protocols, employee training to recognize and resist social engineering attempts, and comprehensive incident response strategies to mitigate the impact of such attacks.
3 months ago
Kill Chain
Critical Vulnerability in Funnel Builder Plugin Leads to WooCommerce Checkout Skimming
In May 2026, a critical vulnerability in the Funnel Builder plugin for WordPress was actively exploited to inject malicious JavaScript into WooCommerce checkout pages, aiming to steal customer payment information. The flaw, affecting versions prior to 3.15.0.3, allowed unauthenticated attackers to modify global settings via an unprotected checkout endpoint, leading to the execution of malicious code on every checkout page. FunnelKit, the plugin's developer, released a patch in version 3.15.0.3 to address this issue. This incident underscores the persistent threat of supply chain attacks targeting widely-used plugins to compromise e-commerce platforms. The exploitation of such vulnerabilities highlights the importance of timely software updates and vigilant monitoring of third-party components to safeguard sensitive customer data.
4 months ago
Kill Chain
CallPhantom Scam: Deceptive Android Apps Exploit User Curiosity
In November 2025, ESET researchers identified a series of fraudulent Android applications, collectively named 'CallPhantom,' on the Google Play Store. These 28 apps falsely claimed to provide access to call logs, SMS records, and WhatsApp call histories for any phone number. Users were prompted to pay for these services but received only randomly generated, fabricated data. The apps amassed over 7.3 million downloads before being reported to Google and subsequently removed from the store. This incident underscores the persistent threat of deceptive applications exploiting user curiosity and trust. The CallPhantom scam highlights the need for continuous vigilance against fraudulent apps, especially as cybercriminals increasingly target mobile platforms. Users should be cautious of apps requesting payments for services that seem too good to be true and verify the legitimacy of applications before installation.
4 months ago
Kill Chain
ADT Data Breach 2026: Lessons in Cloud Security and Social Engineering
In April 2026, home security giant ADT experienced a significant data breach orchestrated by the cyber extortion group ShinyHunters. The attackers gained unauthorized access to ADT's cloud-based environments by compromising an employee's Okta single sign-on (SSO) account through a voice phishing (vishing) attack. This breach led to the exfiltration of personal information belonging to approximately 5.5 million individuals, including names, phone numbers, physical addresses, dates of birth, and partial Social Security numbers or Tax IDs. Notably, no payment information or customer security systems were compromised. This incident underscores the escalating threat posed by sophisticated social engineering tactics targeting SSO credentials. Organizations must bolster their defenses against such attacks, as the reliance on cloud-based services and centralized authentication systems continues to grow, making them attractive targets for cybercriminals.
4 months ago
Kill Chain
Basic-Fit Data Breach 2026: A Wake-Up Call for Cybersecurity in the Fitness Industry
In April 2026, Basic-Fit, Europe's largest fitness chain, experienced a data breach affecting approximately one million members across six countries, including the Netherlands, Belgium, Luxembourg, France, Spain, and Germany. Unauthorized access to the system that records members' visits allowed attackers to exfiltrate personal information such as full names, physical addresses, email addresses, phone numbers, dates of birth, bank account details, and membership information. The breach was detected and halted within minutes by Basic-Fit's monitoring systems, and affected members were promptly informed. Notably, no identification documents or account passwords were compromised. This incident underscores the critical importance of robust cybersecurity measures in protecting sensitive customer data. With the increasing frequency of cyberattacks targeting personal and financial information, organizations must prioritize the implementation of comprehensive security protocols and continuous monitoring to mitigate potential threats and safeguard their customers' trust.
5 months ago
Kill Chain
Rockstar Games' 2026 Data Breach: A Wake-Up Call for Third-Party Security
In April 2026, Rockstar Games experienced a data breach orchestrated by the hacker group ShinyHunters. The attackers exploited a vulnerability in Anodot, a third-party analytics platform integrated with Rockstar's Snowflake cloud infrastructure, to steal authentication tokens. This allowed unauthorized access to Rockstar's internal data, leading to a ransom demand with a deadline of April 14, 2026. Rockstar confirmed that only a limited amount of non-material company information was accessed, emphasizing no impact on their operations or players. ([tomshardware.com](https://www.tomshardware.com/tech-industry/cyber-security/rockstar-games-confirms-it-was-hacked-by-malicious-group-shinyhunters-takes-credit-gives-until-april-14-to-pay-ransom-or-risk-leaking-confidential-data-shinyhunters?utm_source=openai)) This incident underscores the growing trend of cyberattacks targeting third-party service integrations, highlighting the critical need for organizations to assess and secure their entire supply chain. The breach also serves as a reminder of the persistent threats posed by groups like ShinyHunters, known for exploiting indirect access points to infiltrate major corporations. ([techspot.com](https://www.techspot.com/news/112038-rockstar-games-hit-ransom-demand-after-third-party.html?utm_source=openai))
5 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports