[AMER] Apollo Global Management disclosed on 21 August that attackers gained unauthorised access to cloud platforms between 6 and 10 July, exposing personal information including names, birth dates, contact details, addresses and Social Security numbers. Apollo has notified law enforcement and engaged external forensic specialists, while its continuing investigation has found no evidence so far that stolen information was publicly posted or used for identity theft or fraud (Source: Reuters, 21-08-2026)

[APAC] Origin Energy said on 21 August that its review of July’s Australian data breach had identified about 900,000 affected current and former customers, including around 60 whose full bank account numbers were accessed and about 100 whose identity-document numbers were exposed. Earlier claims of two million affected records are not supported by the completed review, while authorities and forensic specialists continue the criminal investigation and customer-notification work (Source: news.com.au, 21-08-2026)

[AMER] US Bancorp said on 21 August that a LockBit data-theft claim had been traced to a potential incident involving a contractor used by one of its third-party providers, rather than compromise of the bank’s own environment. The bank said it found no evidence that its systems, networks or data repositories were compromised, while LockBit supplied no data samples and law-enforcement enquiries into the fourth-party event continue (Source: The Record, 21-08-2026)

[EMEA] Russian network-monitoring developer Microolap confirmed on 21 August that hackers compromised several non-critical systems after the pro-Ukraine Black Spark group claimed access to its wider network and customer data. Microolap said its core infrastructure and EtherSensor platform were unaffected, while screenshots published by the attackers have not been independently verified and investigators are examining limited access to development systems, an outdated website and an old Bitrix24 environment (Source: The Record, 21-08-2026)

[AMER] Canada’s Hospital for Sick Children disclosed on 20 August that an incident involving a third-party software application exposed personal information belonging to some current and former employees and may also affect job applicants and staff of related organisations. SickKids said clinical systems and patient information were unaffected, while external specialists are supporting an investigation to determine the affected information and all potentially impacted individuals have been offered identity protection (Source: SickKids, 20-08-2026)

[EMEA] Finland’s Inission Power disclosed on 20 August that a ransomware attack detected in June affected databases containing personal information on employees, former shareholders and people associated with company directors, with parts of the data later found online. The compromised server environment was isolated and restored on the day of detection, but investigators cannot rule out additional acquisition or publication of affected data by third parties (Source: Inission, 20-08-2026)

[GLOBAL] The Rust Security Response Team confirmed on 20 August that malicious crate proc-macro1 downloaded an attacker-controlled payload and that compromised releases of arrayref, internment and append-only-vec had been made dependent on malicious packages. The team removed the affected versions and locked the maintainer account, while investigators should use dependency locks, build logs and package caches to establish actual exposure rather than treating historical download counts as evidence of compromise (Source: Rust Security Response Team, 20-08-2026)

[GLOBAL] CISA’s Known Exploited Vulnerabilities catalogue was reported on 20 August to include CVE-2026-64849, an unauthenticated server-side request-forgery flaw affecting MLflow before version 3.15.0 that can expose internal services or cloud metadata. The listing confirms exploitation but does not identify attackers or quantify compromised systems, so exposed deployments require patching and review of application, proxy, network and cloud-audit records for suspicious requests or subsequent credential use (Source: BleepingComputer, 20-08-2026)

[AMER] United States prosecutors announced on 20 August that six defendants had been arrested over an alleged multi-year scheme using stolen payment-card information and forged driving licences to obtain rental vehicles worth millions of dollars. The FBI and NYPD-led investigation is supported by multiple state and local agencies, and its evidence spans identity documents, payment activity and vehicle transactions; all charges remain allegations unless proved in court (Source: US Department of Justice, 20-08-2026)

[APAC] Pakistan’s National Cyber Crime Investigation Agency said on 20 August that it arrested three suspects in Lahore over alleged impersonation of government officials, threats to freeze bank accounts and the theft of Rs15 million from one complainant. Preliminary analysis of seized devices identified more than 12 allegedly fraudulent accounts, and investigators are examining account details, transaction records and associated individuals to establish the wider network (Source: Dawn, 20-08-2026)

[APAC] India directed Google to remove Firebase-hosted resources after investigators identified repeated use of the platform for bank impersonation, malicious applications and theft of financial information, Reuters reported on 21 August. The Indian Cyber Crime Coordination Centre issued August takedown notices covering at least 57 websites and databases, providing investigators with infrastructure that can be correlated across phishing pages, malware delivery, victim devices and stolen-data repositories (Source: Reuters, 21-08-2026)

[APAC] Chinese authorities clarified on 21 August how companies must conduct and report data-security risk assessments under rules that took effect on 20 August, operationalising requirements across the country’s broader data-security regime. The measures were jointly issued by the Cyberspace Administration of China, Ministry of Industry and Information Technology and Ministry of Public Security, increasing the need for organisations to maintain auditable inventories, risk findings and remediation records (Source: MLex, 21-08-2026)