Cybersecurity

The FBI and the Department of Justice announced October 8 that they have seized seven domains and disrupted two hacking tools tied to Flax Typhoon, the China-linked threat group U.S. authorities associate with Integrity Technology Group, a Beijing-based information-security company Washington says holds contracts with the Chinese government. The operation targeted reconnaissance and spear-phishing infrastructure that prosecutors say was used to scan — and in some cases infiltrate — critical infrastructure networks in the United States and abroad.

A ransomware group calling itself Chaos announced on October 9, 2026 that it had exfiltrated 1,500 gigabytes of data from Astrana Health, Inc., a California-based physician-management company whose network supports roughly 20,000 affiliated medical providers. The group claims the theft followed Astrana's decision not to negotiate with the attackers, and says the stolen trove includes patient diagnoses and personal information.

Denmark has confirmed the largest data breach in its history. Hackers stole the contents of the country's Central Person Register — the central database of citizens' data — compromising records belonging to some 8 million citizens and residents, including people living abroad and the deceased.

The breach, disclosed on October 5, exposed names, addresses, Danish social security numbers, and other personal information. Danish minister Christina Egelund called it a "serious incident." The unauthorized access happened in September but was not discovered until October 2.