The Field Briefing — from the Red Flag Cyber research desk

TeamUpdraft breach: customer database believed accessed, WordPress site keys included

TeamUpdraft said on October 19, 2026 that unauthorised access to teamupdraft.com over October 17-18 led it to believe its customer database was accessed, including names, email and billing addresses, hashed passwords and UpdraftCentral connection keys.

Who is affected: TeamUpdraft customers, and WordPress sites connected to its UpdraftCentral remote-management service. Security firms reported the stolen keys were already used on October 18-19 to install backdoor plugins on connected WordPress sites.

The one action that matters: Change your teamupdraft.com password — type the address into your browser yourself rather than following a link — change that password anywhere else you reused it, and for every WordPress site you run, delete the UpdraftCentral connection key in Settings > UpdraftPlus > Advanced Tools > UpdraftCentral, check Users and Plugins for anything you did not recognise, and update UpdraftPlus.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/teamupdraft

Hollys breach: about 2.76 million member records leaked, passwords included

Hollys confirmed on October 19, 2026 that unauthorised access to a cloud service holding its membership information leaked about 2.76 million customer records, including member IDs and passwords, names, dates of birth, phone numbers and addresses.

Who is affected: People who joined Hollys as members before February 11, 2020. The records run from 2009 to early 2020.

The one action that matters: Change your Hollys membership password, and change the password on any other account where you used the same ID and password combination, starting with your email account, and turn on multi-factor authentication wherever it is offered. Do not respond to calls, texts or emails of unknown origin that cite Hollys.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/hollys-coffee

Stay skeptical. Check the full breach tracker and the free Spot the Phish checklist on the Red Flag Cyber site.