This FAQ gives source-checked answers to common questions about tech company breach news for October 2026. It covers the DriveWealth brokerage incident, Supabase customer exposures, Times Mobility account access, Q3 crypto losses, and the health-app breach rule. A data breach here means unauthorized access that copies or exposes customer data. Each item below names who is affected, what was exposed, and what limit applies.
Table of Contents
- Who was affected by the DriveWealth incident?
- Was Supabase itself breached?
- What did Times Mobility disclose?
- How large were crypto losses in Q3 2026?
- Does the health-app breach rule still apply?
Who was affected by the DriveWealth incident?
DriveWealth confirmed unauthorized network access on September 4-5, 2026 after social engineering. Attackers took brokerage-account profile data supplied through partner apps, according to DriveWealth via Hatch support in the Hatch support summary of the DriveWealth notice.
Former Revolut U.S. trading, Stake and Hatch users were affected and notified in late September 2026. Hatch said its own systems were not accessed and no passwords or payment details were taken, according to CryptoTimes reporting the DriveWealth response.
Was Supabase itself breached?
No. Customer misconfiguration left databases open, not a break of the Supabase platform itself. Misconfiguration means the customer set access controls so data stayed reachable from the web.
UpGuard found about 16,000 Supabase-hosted databases exposing names, addresses, phone numbers, passwords and some auth tokens, according to TechCrunch in TechCrunch reporting on UpGuard's findings. Auth tokens are small secrets that let an app stay logged in. Anyone reusing an exposed password should change it on other sites too.
What did Times Mobility disclose?
Times Mobility confirmed unauthorized access to its Times Car web system. The access affected about 6.6 million current and former member accounts, according to Times Mobility via an MLex summary.
About 1.6 million identity records were included, with driver-license images. Driver-license images carry lasting identity details, so affected members should watch for misuse tied to that document type.
How large were crypto losses in Q3 2026?
Crypto security losses reached $1.26 billion across 247 incidents in Q3 2026. That was up 53.9% from $819.4 million in Q2, according to Cointelegraph reporting CertiK data in the Cointelegraph reporting of CertiK data.
The $387.5 million Bitget exchange hack led the quarter at about 31% of losses. One exchange case can move the quarterly total, so a lower next quarter would not by itself mean attacks fell.
Does the health-app breach rule still apply?
Yes. The FTC withdrew its 2021 health-app breach policy statement on Sept. 9, 2026.
The updated 2024 Health Breach Notification Rule still covers health apps and fitness trackers, according to the FTC in the FTC press release. Public counts are interim and investigations continue. Practical checks now help because downstream misuse can lag disclosure:.
- Check official vendor notices for your account type and dates.
- Freeze credit if Social Security numbers were exposed.
- Rotate exposed passwords and tokens on affected services first, then where reused.
You Might Also Like
- Government Data Breach News FAQ for September 2026: Source-Checked Answers to Common Questions
- What Is New With Tech Company Data Breach News in October 2026? Latest breach notices and security advisories and Key Takeaways
- Tech Company Data Breach News 2026 Guide: exposure, response, and recovery; Key Facts and Questions to Ask