[AMER] Hibbett disclosed on 10-09-2026 that a forensic investigation found an unknown third party had unauthorised access to its computer systems from 22 to 25 April, potentially acquiring human-resources records concerning current and former employees, dependants and beneficiaries. Investigators should preserve authentication, endpoint and file-access records alongside the completed record review so notification scope can be tested against the observed intrusion window (Source: SGB Media, 10-09-2026)

[EMEA] Nigeria Police arrested a 27-year-old woman after its National Cybercrime Centre investigated a forged document falsely claiming that fintech provider OPay would shut down, following a company petition seeking identification of those responsible. Police said digital forensic analysis was used to examine the document and trace its source, making account provenance, publication timestamps and retained platform records central to testing authorship and distribution (Source: Punch, 10-09-2026)

[APAC] Singapore Police said 254 people were assisting investigations after an islandwide enforcement operation linked them to more than 652 scam cases involving suspected losses of about S$7.5 million across multiple scam types. The inquiry spans suspected cheating, money laundering and payment-services offences, requiring investigators to correlate bank accounts, devices, communications and victim reports while distinguishing suspected mule activity from evidence of knowing participation (Source: Singapore Police Force, 10-09-2026)

[APAC] Basti police arrested two men after an investigation into a cyber-fraud case alleged that offenders posed as crime-branch officers and extorted victims across 12 Indian states by threatening arrest over fabricated call-record allegations. The case gives investigators a cross-jurisdictional evidence problem involving victim communications, payment trails, subscriber records and seized devices, with further enquiries needed to map additional participants and attribute individual transactions (Source: The Times of India, 10-09-2026)

[AMER] AdaptHealth’s reported breach scope expanded after US health authorities listed 4,115,802 affected individuals, with the company saying attackers obtained personal, demographic, health-insurance and health information during a June intrusion involving cloud-based applications. The scale increases the importance of reconciling notification records with forensic findings, while investigators should keep confirmed data exposure separate from any external attribution claims about who conducted the attack (Source: SecurityWeek, 10-09-2026)

[AMER] Mid Florida Dermatology and Plastic Surgery disclosed on 10-09-2026 that an investigation found information may have been copied without authorisation during suspicious activity between 26 and 30 March, with its affected-data review completed on 31 August. The delayed notification illustrates why investigators need durable access and file evidence that can be reconciled months later with data inventories, individual records and the organisation’s final breach scope (Source: Mid Florida Dermatology & Plastic Surgery, 10-09-2026)

[AMER] Canada’s Cyber Centre issued an advisory on 10-09-2026 for a path-traversal vulnerability affecting Fortra GoAnywhere MFT Endpoint versions before 7.10.2 and urged administrators to review vendor guidance and apply necessary updates. Investigators assessing exposed systems should establish the exact product version and access path before inferring compromise, then preserve application, authentication and file-transfer logs that could distinguish vulnerability exposure from evidence of exploitation (Source: Canadian Centre for Cyber Security, 10-09-2026)

[EMEA] CERT-EU warned on 10-09-2026 that two Check Point vulnerabilities, CVE-2026-85102 and CVE-2026-85103, carry CVSS scores of 9.8 and could permit unauthenticated remote code execution on affected VPN-configured gateway, management and Spark firewall deployments. Because exploitation depends on product and configuration conditions, investigators should verify versions, VPN settings and hotfix state before examining perimeter telemetry and appliance artefacts for evidence of attempted or successful abuse (Source: CERT-EU, 10-09-2026)

[AMER] US prosecutors said two Washington women received prison sentences for a long-running identity-theft and bank-fraud scheme that used personal information from more than 250 victims to target accounts, loans and credit cards. Investigators described extensive records maintained by the offenders, showing how seized account data, impersonation activity, bank interventions and victim records can be correlated to reconstruct a complex fraud pattern and quantify attributable losses (Source: US Department of Justice, 10-09-2026)

[APAC] Thai police detained 12 South Korean nationals and a Chinese national during a raid on an alleged voice-phishing call centre near Bangkok, according to South Korea’s foreign ministry, with suspects accused of impersonating prosecutors or government officials. Cross-border prosecution will depend on linking premises, devices, call infrastructure and victim communications to individual suspects while maintaining evidence continuity between Thai investigators and South Korean authorities (Source: Yonhap News Agency, 10-09-2026)

[EMEA] ENISA published a new strategy on 10-09-2026 setting seven objectives that include consistent EU cybersecurity-policy implementation, stronger incident and crisis preparedness, improved capacity, shared knowledge and greater trust in secure digital solutions. For investigators and regulated organisations, the emphasis on preparedness and common knowledge increases the value of interoperable records, documented incident decisions and evidence that can be exchanged or reviewed consistently across national and institutional boundaries (Source: ENISA, 10-09-2026)

[APAC] Singapore’s Home Affairs Ministry said a new Code of Practice issued in August requires designated messaging platforms to warn users about scam risks from unknown contacts and obtain consent before unknown contacts add users to chat groups. The measures create auditable platform controls that may become relevant when investigators reconstruct investment-scam approaches, helping distinguish whether required warnings and consent mechanisms operated before communications, account movement and financial loss occurred (Source: Singapore Ministry of Home Affairs, 10-09-2026)