Skip to content

Articles

Articles, guides and analysis from TrustScope.

  1. DodoPayments review: Security After Metabase SQL Injection Incident

    Dodo Payments disclosed unauthorized access to its self-hosted Metabase analytics system in August 2026. The incident involved CVE-2026-72898 but left payment processing unaffected.

    3 min read

  2. Capcom ID review: Security After 11.7 Million Account Breach in October 2026

    Capcom ID suffered unauthorized access to 11.7 million accounts in October 2026. This review details exposed data types and company response.

    3 min read

  3. Quest Diagnostics Review After Quanum LSM Patient Records Access Incident

    Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager system in October 2026, affecting certain patient records. The company paused access, completed remediation within days, and began required notifications.

    3 min read

  4. Fearless Wallet Security Review: Private Key Exposure in Polkadot Browser Extension After 20-Month Flaw

    Fearless Wallet browser extension leaked private keys via malicious code active from February 2025 through October 2026, affecting users across multiple versions.

    3 min read

  5. Onamae Desktop Cloud review: October 2026 VPS breach and compensation process

    The Onamae Desktop Cloud breach allowed unauthorized access to Windows VPS instances used for FX trading, leading to data theft and unauthorized trades across more than 70 broker accounts.

    3 min read

  6. Railway Security Review: Environment Variables Exposure After October 2026 Incident

    Railway detected unauthorized access to encrypted environment variables in October 2026. The platform restored operations after remediation but requires users to rotate secrets.

    3 min read

  7. Yamato Transport Breach Exposes Kuroneko Pay-Later Payment Data

    Yamato Transport confirmed unauthorized access to its Kuroneko Pay-Later service in September 2026, resulting in the theft of millions of buyer and merchant records.

    3 min read

  8. Lawson Japan Data Breach Exposes 2.15 Million Customer Records

    Lawson disclosed unauthorized access to 2.15 million Lawson ID accounts and a smaller App Reservation incident, with email and name data exposed.

    2 min read

  9. JM Bullion Breach: Six-Month Delay in Customer Notifications

    An unauthorized actor accessed JM Bullion customer records between April 12 and 14, 2026. The company notified affected individuals six months later.

    3 min read

  10. AfD data breach exposes hosting provider weaknesses in email security

    The September 2026 hack of an AfD-linked hosting provider led to the exposure of hundreds of thousands of emails through an unpatched WordPress vulnerability.

    3 min read

  11. CoinDCX review: Wallet Transfer Failures and Deprecated Address Handling

    CoinDCX absorbed losses from a failed sweep of compromised deposit addresses in October 2026. Current customer funds stayed in cold storage with no platform downtime.

    3 min read

  12. eMudhra Review: Weak Private Keys Force Remediation Steps

    The October 2026 discovery of weak private keys in eight eMudhra intermediate CAs led to immediate revocations and the company's exit from global TLS issuance.

    3 min read