The Field Briefing — Issue #021 November 7, 2026 · From the Red Flag Cyber research desk

Next issue: The desk is watching whether Who Gives A Crap publishes how many customers were affected — no count has been published yet — and for any follow-up from Mirae Asset Securities on its investigation into the November 4 and 5 attacks, and from Gnosis Pay on card cancellations after its November 3 detection.

DEEP DIVE

Who Gives A Crap breach: customer names, contact details and spending totals may have been accessed through a marketing-software provider

The Short Version: Who Gives A Crap told customers on November 7, 2026 that some customers' personal information was accessed without authorisation in a security incident at one of its marketing-software providers. First and last names, email addresses, phone numbers, postal addresses and total spending may have been viewed. The company says payment information, order details and passwords were not part of the data accessed, customer accounts were not directly compromised, and no personal data from Canadian customers was accessed. It has not said how many customers were affected.

What to do now: - Expect scam emails, texts and calls that mention Who Gives A Crap, a refund or a loyalty reward over the coming weeks, and treat any that arrive as unverified even when they use your real name or spending history — those details are exactly what may have been viewed. - Do not click links in unsolicited messages; go to the company's website by typing the address yourself. Never share one-time codes or card details with anyone who contacts you first. - Checking your bank and card statements stays a sensible routine even though the company says payment data was not exposed. There is no password change to make for this incident, because the company says passwords were not accessed and accounts were not compromised. - Australian customers can report suspected scams through Scamwatch, and anyone who thinks their identity is being misused can contact IDCARE, the national identity and cyber support service.

Full report: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/who-gives-a-crap

RED FLAG OF THE WEEK

A message quoting your real name, address and total spending is not proven genuine. That combination is exactly what may have been viewed in the Who Gives A Crap incident, and it is enough for a scammer to pose as the brand with a believable refund, delivery or loyalty-reward lure. Go to the company's website by typing the address yourself instead of using any link or number in the message.

Source: https://red-flag-cyber-site.andrewdpeat.workers.dev/news/who-gives-a-crap

This issue covers items published November 6 – November 7, 2026.

NEWS

Mirae Asset Securities breach: account numbers for about 3,800 customers leaked, and personal data on 35,255 current and former staff

Mirae Asset Securities confirmed on November 7, 2026 that external attacks on its mobile login service and internal groupware on November 4 and 5 leaked account numbers for about 3,800 customers and personal data on 35,255 current and former employees and contractors, including names and employee numbers and, for some, email addresses, mobile numbers and encrypted passwords. If you are a customer, reach the company only through its official app, website or a number you source yourself, and watch your account activity. If you are in the staff group, change any password that reuses your groupware password anywhere else.

Mirae Asset Securities breach: account numbers for about 3,800 customers leaked, and personal data on 35,255 current and former staff | Red Flag Cyber

Mirae Asset Securities confirmed on November 7, 2026 that external attacks on its mobile login service and internal groupware on November 4 and 5 leaked account numbers for about 3,800 customers and personal data on 35,255 current and former employees and contractors, including names and employee numbers and, for some, email addresses, mobile numbers and encrypted passwords.

Gnosis Pay breach: full card numbers, expiry dates and CVV codes exposed, along with home addresses and linked crypto wallet addresses

Gnosis Pay disclosed on November 6, 2026 that unauthorised access to its legacy consumer card system, detected on November 3, exposed customer information including, according to the breach notifications it sent, full payment card numbers, expiration dates and CVV codes, names, home addresses and cryptocurrency wallet addresses linked to their accounts; the company has not said how many customers were affected. If you hold a Gnosis Pay-branded card, read the individual email the company sent you, check your card statements, and never share your seed phrase, private keys, PIN or full card number.

Gnosis Pay breach: full card numbers, expiry dates and CVV codes exposed, along with home addresses and linked crypto wallet addresses | Red Flag Cyber

Gnosis Pay disclosed on November 6, 2026 that unauthorised access to its legacy consumer card system, detected on November 3, exposed customer information including, according to the breach notifications it sent to affected customers, full payment card numbers, expiration dates and CVV codes, customer names, home addresses and cryptocurrency wallet addresses linked to their accounts; the company has not said how many customers were affected.

WHAT YOU LEARNED TODAY

Treat Who Gives A Crap refund or loyalty messages as unverified even if they quote your real spending; reach Mirae Asset Securities only through channels you source yourself and change any reused groupware password if you are in the staff group; and if you hold a Gnosis Pay card, read your individual notice and check your statements.

Forward this to ONE person who needs it today

👍 Good / 😐 Just OK / 👎 Terrible

—

Red Flag Cyber research desk

Masked and alias email addresses are welcome — subscribe with whatever address you're comfortable with. We never sell your data.