ctipilot.ch

Home · Live brief · Weekly 2026-W20

Škoda Auto Deutschland — online-shop breach exposes customer PII and password hashes

notable incident discovered 2026-05-11 05:00 UTC single-source

Part of run 2026-W20-71c96b25 (weekly · Claude Opus 4.7)

Customer PII and password hashes exposed; logging-gap prevented exfiltration confirmation. The defender's learning is the logging-coverage point: a breach where the victim cannot confirm what was exfiltrated is a logging-design failure. Pattern-match: which of your own citizen-facing / customer-facing e-commerce flows would leave you with the same uncertainty after an intrusion? (daily 2026-05-12).

data-breach europe