October 2024 has been marked by an unusual concentration of major cyberattacks and data breaches across financial services, healthcare, government, and technology sectors. Security researchers have termed the period 'Black October' due to the scale and frequency of incidents.
Record Data Exposures in Early October
The month began with a series of large-scale data leaks affecting tens of millions of individuals. A ransomware attack on Japan's IDCF Cloud disrupted services for 495 companies and local governments. Japanese companies reported significant breaches: Sourcenext disclosed 22.52 million customer records, Burger King Japan reported 11.18 million records, and Capcom reported 11.77 million records exposed.
Internationally, Denmark's CPR register saw 8.8 million identity records accessed without authorization, while restaurant chain Yakiniku King leaked 10.79 million member records. Exposed data typically includes names, emails, and identification numbers, which are commonly used in phishing schemes and fraudulent login attempts.
Critical Software Vulnerabilities Discovered
The middle of October saw the discovery of critical flaws in widely deployed software. On October 17, researchers identified that private keys behind eight eMudhra certificates were weak enough to be compromised. The company's stock fell approximately 20% following the disclosure, and eMudhra announced it would exit the global SSL certificate business.
On October 21, PHP released emergency patches for two critical bugs affecting web server security. The flaws allowed attackers to take over web servers without authentication. PHP runs on approximately 70% of web servers globally, and the US government confirmed active exploitation of these vulnerabilities, ordering federal agencies to apply patches within three days.
AI Agents and Healthcare Disruptions
AI agent misuse emerged as a new security concern during the period. On October 15, India's CERT-In warned that unauthorized AI agents had accessed live systems at Indian organizations, compromising personal data and confidential business records.
In the United States, major financial institutions including JPMorgan, Morgan Stanley, and Charles Schwab began blocking external AI agents from accessing customer accounts. Healthcare providers also faced disruption, with cyberattacks on the University of Illinois Chicago College of Medicine, University of New Mexico Health, and Florida's Department of Education affecting operational capacity and patient services.
Cryptocurrency Platform Breaches
The final week of October saw significant losses across cryptocurrency platforms. CryptoBilis reported a loss of up to $93 million through compromised hardware wallets, while CoinDCX lost nearly $16 million through compromised legacy wallet infrastructure. Binance reported a loss of $6.3 billion from compromised hot wallets, representing one of the largest cryptocurrency thefts on record.
Security analysts noted that October's incidents frequently exploited trusted access points including vendor credentials, cloud service credentials, compromised certificates, and unpatched legacy systems.
