How do cyberattacks on companies work and what should customers do after a data breach?

Numbers match the citations in the article. A working link isn't proof that a page supports a claim; check the quoted passage and date.

1. 1

   Data breach (Wikipedia)

   WikipediaPublished Oct 11, 2026Checked Oct 13, 2026

   “A data breach, also known as a data leak, is "the unauthorized exposure, disclosure, or loss of personal information". Attackers have a variety of motives, from financial gain to political activism, political repression, and espionage. There are several technical root causes of data breaches, including accidental or intentional disclosure of information by insiders, loss or theft of unencrypted devices, hacking into a system by exploiting software vulnerabilities, and social engineering attacks such as phishing where insiders are tricked into disclosing information. Although prevention efforts can reduce the risk of a data breach, they cannot eliminate it. A large number of data breaches are never detected. If a breach becomes known to the company holding the data, post-breach efforts commonly include containing the breach, investigating its scope and cause, and notifications to people whose records were compromised, as required by law in many jurisdictions. Law enforcement agencies may investigate breaches, although the hackers responsible are rarely caught. Criminals often sell data obtained in breaches on the dark web.”

2. 2

   Cybersecurity in Healthcare: Ensuring Patient Safety and Data Privacy.

   Journal of multidisciplinary healthcare (Dolezel et al.)Published May 14, 2026Checked Oct 13, 2026

   “Logistic regression assessed predictors of high‑severity incidents (≥ 100,000 individuals affected). Differences in breach size between incident types were assessed using Wilcoxon rank‑sum tests. Negative binomial regression modelled factors associated with breach magnitude and temporal trends in Hacking/IT classifications over time, adjusting for covariates.ResultsBreach sizes were highly right-skewed; the median breach affected 3892 individuals (IQR: 1255-19,471), and roughly 10% of the incidents accounted for the majority of individuals affected. Hacking/IT events were associated with severe breaches (OR = 2.6) and increased from 4% in 2010 to 80% in 2025. Network server incidents resulted in significantly larger breaches than device theft events. Business associate involvement was independently associated with a larger breach magnitude (IRR = 2.0).ConclusionHacking/IT mechanisms, network server involvement, and business associate participation were the strongest factors associated with breach severity and magnitude. These findings highlight persistent vulnerabilities in healthcare organizations and reinforce the need for targeted cybersecurity strategies.”

3. 3

   Gross Negligence in Bank Payments Law.

   Oxford journal of legal studies (Braithwaite)Published Feb 2, 2026Checked Oct 13, 2026

   “The law's allocation of responsibility for disputed bank payments is important not only for banks and customers, but also, given the volume and value of payments, for the economy more broadly. This article examines loss allocation under common law, EU-UK regulation and the UK's 'world-first' scheme for 'authorised push payment' frauds, showing that the gross negligence standard of customer conduct is a common feature. Indeed, this 'slippery concept' sits at critical junctures, providing, in practice, the most relevant limitation to a bank's liability to refund payments. The article analyses what this standard means in English common law and in its regulatory contexts, and highlights the important connection between the two. It then draws upon decisions by the UK's Financial Ombudsman Service, amongst other sources, to explore how evaluating bank customer conduct works in practice, concluding that it is time for regulators to rethink the status quo.”

4. 4

   Ransomware attacks and cybersecurity concerns in modern hospitals: vulnerabilities and impacts on trauma centers and patient care.

   Trauma surgery & acute care open (Martin et al.)Published Apr 30, 2026Checked Oct 13, 2026

   “Trauma centers are at particular risk for the many potential adverse impacts of a ransomware attack given the time and resource dependency of emergency trauma and surgical care. This review highlights current knowledge on ransomware, its mechanisms, types of attacks, prevention strategies, immediate and delayed response protocols, and the emerging role of artificial intelligence in both cybersecurity attacks and defensive efforts. Emphasis is placed on the unique vulnerabilities of healthcare systems, including legacy IT infrastructure and human factors, and on best practices to mitigate risks. Effective prevention strategies include regular employee training programs to heighten awareness, implementation of robust backup and recovery systems to minimize downtime, and continuous updating of IT infrastructure to close security gaps. The review highlights lessons learned from recent ransomware attacks against trauma centers, including the critical importance of institutional leadership, employee training, and robust backup systems to ensure resilience against ransomware incidents.”

5. 5

   Cyberattacks in supply chains: A multi-case study.

   PloS one (Zhang et al.)Published May 22, 2026Checked Oct 13, 2026

   “The scale of disruption is systematically amplified by inter-system coordination failures, while resilience emerges only when proactive information sharing is activated by strong internal organizational readiness. We introduce the concept of synergy dependency, demonstrating that external relational governance is hierarchically contingent on internal organizational controls, and reconceptualize Points of Penetration (PoPs) as dynamic transmission mechanisms that convert localized digital breaches into systemic operational paralysis. This research offers empirically grounded insights that adapt the SCCSS framework from a classificatory tool into a process-oriented model capable of explaining how cyber risk propagates as a lifecycle of entry, transmission, and interruption. The findings contribute analytical interpretations to supply chain governance theory by showing that cyber resilience is conditionally interdependent across subsystems. Practically, the study offers actionable guidance for implementing secure architecture, cross-organizational threat intelligence sharing, and supplier-support programs to strengthen the resilience of complex global supply chain ecosystems.”

6. 6

   Phase Eight and Hobbs owner hit by cyber-attack, as H&M probes separate hack claim

   BBC NewsPublished Oct 13, 2026Checked Oct 13, 2026

   “TFG London has apologised to customers for disruption after it identified a "cybersecurity incident" on Sunday.”