Back to overview
Confidence HighNov 25, 2024maxar.com

Maxar Space Systems Discloses Employee Data Breach

PatternExternal actor · Hacking · Confidentiality impact

Maxar Space Systems, a U.S. satellite maker, reported a data breach on November 25, 2024, where personal identifying information of several employees was stolen. The intrusion originated from a Hong Kong-based IP address, though the internal network was not compromised, suggesting access to a separate Human Resources network or database. The attack was initially spotted on October 11th and resolved.

Signal date
Nov 25, 2024
Updated
Jul 2, 2026
Confidence
High
Sources
1 source

Signal context

First seen: Nov 25, 2024

Last updated: Jul 2, 2026

Status: Public signal

Key points

  • Data breach reported on November 25, 2024.
  • Personal Identifying Information (PII) of employees was stolen.
  • Intrusion from a Hong Kong-based IP address.

Signal analysis

Beta

It helps compare this signal with other published signals without treating the labels as final determinations.

Affected organization
Maxar logo
Maxar

Likely country: Location not provided

Threat source
Hacking activity

The feed marks multiple actor roles. Treat this as a review signal rather than a final attribution.

  • Source type: outside the affected organization
  • Source type: possible insider or internal misuse
Business impact
Potential data exposure

Impact area: Confidentiality

Likely asset: User or customer data, Server or cloud data store

Trend context
66 signals with similar action pattern
  • 1 signal in the same sector
  • 88 signals with the same likely impact area
  • 1 signal linked to this organization/domain
Mentioned entities
MaxarData DisclosureU.SHong Kong-based IPHuman ResourcesPersonal Identifying InformationPIIIntrusion

External sources

Related signals

Grouped by why the signal is relevant.

aivd.nl logoAivdJul 1, 2026
Same action patternSame impact area

CTIVD: AIVD en MIVD verwerken persoonsgegevens in bulkdata onrechtmatig

The Dutch intelligence services, AIVD and MIVD, have unlawfully processed personal data in bulk datasets, according to a ruling by the Committee for the Supervision of the Intelligence and Security Services (CTIVD). The report, published on July 1, 2026, states that groups of employees had unauthorized access to personal data, and large quantities of data were stored for too long. The bulk datasets, sometimes containing millions of records, include names, phone numbers, location data, social media data, and communication content, sourced from government agencies, commercially available datasets, or stolen datasets offered by criminals. The CTIVD has issued thirteen recommendations to improve the situation.

aflac.com logoAflacJun 30, 2026
Same action patternSame impact area

Aflac Life Insurance Japan Suffers Cybersecurity Breach Exposing Policyholder Data

Aflac Life Insurance Japan disclosed unauthorized access to its systems between June 15 and June 25, 2026. The breach affected files containing policy details, personal information, and bank account information of approximately 4.38 million customers. The company has suspended affected systems and is investigating the incident with third-party cybersecurity experts.

polymarket.com logoPolymarketJun 29, 2026
Same action patternSame impact area

Polymarket Confirms Supply Chain Attack, $3 Million Stolen

Polymarket, a cryptocurrency-based prediction market, confirmed a supply chain attack. A breach of a third-party frontend vendor led to malicious JavaScript being injected into its website. Attackers tricked users into approving fraudulent transactions, resulting in approximately $3 million being stolen from fewer than 15 accounts. The backend systems remained unaffected.

naic.org logoNaicJun 29, 2026
Same action patternSame impact area

National Association of Insurance Commissioners (NAIC) Confirms Data Breach via Oracle PeopleSoft Zero-Day

The National Association of Insurance Commissioners (NAIC), a US insurance regulatory standards body, confirmed a cyberattack after the ShinyHunters group claimed theft of 3.1TB of data. The breach was reportedly achieved through an Oracle PeopleSoft zero-day vulnerability. ShinyHunters claimed access to regulatory filings, production logs, cloud configuration files, and other internal records.

ctc.co.jp logoCtcJun 28, 2026
Same action patternSame impact area

Chubu Telecommunications C., Inc. Affected by KDDI Corporation Data Breach

Chubu Telecommunications C., Inc., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. Chubu Telecommunications customers' email addresses and passwords may have been compromised.

biglobe.ne.jp logoBiglobeJun 28, 2026
Same action patternSame impact area

BIGLOBE Inc. Affected by KDDI Corporation Data Breach

BIGLOBE Inc., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. BIGLOBE Inc. customers' email addresses and passwords may have been compromised.