# Critical Security Breaches Expose Millions and Uncover Criminal Plots

*Published October 5, 2026*
*Source: [https://this.weekinsecurity.com/this-week-in-security-october-4-2026-edition/](https://this.weekinsecurity.com/this-week-in-security-october-4-2026-edition/)*

## Executive Summary

*This is a Premium edition. The Executive Summary is available to sec-news.ai members —*
*[read it here](https://www.sec-news.ai/news/critical-security-breaches-expose-millions-and-uncover-criminal-plots) or [see plans](https://www.sec-news.ai/pricing).*

## Article

This week has seen significant security incidents impacting various sectors, from government data breaches to high-profile arrests in the cybercrime world. The Pentagon confirmed a data breach at its Defense Manpower Data Center, affecting 2.8 million current and former military personnel and 300,000 deceased individuals. Sensitive information such as names, Social Security numbers, and military service details were exposed due to unencrypted files being accessed by unauthorized individuals over several months. This incident raises major counterintelligence concerns, given the vital role DMDC plays in managing military records and issuing secure credentials.

In a separate development, Dutch police have arrested a member of the ShinyHunters hacking group, Pepijn van der Stap, who was found planning murders. Another member was detained in Jordan, and the FBI is actively pursuing the dismantling of this gang. These arrests hint at a possible decline of the ShinyHunters, a group responsible for notable hacks, including a recent breach involving FBI data.

Moreover, Citrix has confirmed active exploitation of vulnerabilities in its NetScaler systems, leading to widespread compromises. Organizations using NetScaler are advised to assume compromise and follow CISA's guidance for preserving forensic evidence before applying patches. This attack affects numerous entities, with evidence suggesting many compromises occurred as far back as early September.

Additionally, LuaRocks disclosed several server hacks over the past few months, prompting a complete server rebuild. Meanwhile, the UK continues its trial of facial recognition technology despite poor results and high costs, while UK intelligence advises universities to sever ties with Chinese entities suspected of espionage. These incidents underscore the ongoing challenges organizations face in safeguarding sensitive information and infrastructure.