Varonis Systems has been recognized as a Gartner Peer Insights Customers’ Choice for Data Security Posture Management for the third consecutive year, making it the only company to earn this distinction three years in a row in the DSPM category. The recognition is based on customer reviews, with 97% of users saying they would recommend Varonis, and the company receiving a 4.7 out of 5 rating for Product Capabilities, Sales Expertise, and Deployment Experience, as well as a 4.9 out of 5 rating for Support Experience. Customers highlighted Varonis’ breadth of coverage, ease of value realization, and quality of support. Chief Marketing Officer Rob Sobers stated that data security is critical as organizations adopt AI, and Varonis helps customers secure and govern the data that fuels AI initiatives.
Varonis is recognized as Gartner Peer Insights Customers' Choice for third consecutive year, with 97% recommendation rate and high ratings, indicating strong customer satisfaction and likely driving future demand.
Times Car kept ID documents for 7 years, widening breach damage
At the car-sharing service Times Car, roughly 6.6 million members' records from the past seven years, including those of former members, were leaked, and of these, about 1.6 million involved identity verification documents. According to parent company Park24, which operates the service, former members' information such as addresses and names was retained for seven years in line with the Corporate Tax Act, while identity verification documents were kept for seven years on the company's own judgment in order to handle inquiries and similar matters. Professor Ichiro Sato of the National Institute of Informatics pointed out that the documents should have been deleted at the time identity verification was performed, and criticized the handling as sloppy, saying they should have been stored so that they could not be accessed from outside. Yuji Kakeya, principal of the Security Research Center at Macnica, which works on cybersecurity measures, expressed concern that highly accurate personal information, such as that backed by official documents, may sell for a higher price. Experts stress that management should issue a directive and review their companies' data management.
Cybersecurity & Digital Trust › Data Security Posture & DLP ▼Regulation
Cybersecurity & Digital Trust › Data Security & Cyber Resilience ▼Regulation
4666.JP · Regulation · Negative Parent of Times Car; 6.6 million members' records leaked, including 1.6 million ID documents kept seven years, drawing expert criticism of sloppy data handling.
South Korean President Orders Probe into Data Leaks at Multiple Banks
South Korean President Lee Jae-myung ordered a thorough investigation and the formulation of countermeasures after personal data leaks at multiple banks, financial companies, and government agencies in recent weeks. South Korea's Financial Services Commission, or FSC, said Lee Ook-won, the FSC chairman, convened an emergency meeting on Sunday, October 4, with financial industry associations, regulators, and executives of affected financial institutions, and warned that the financial sector must handle the situation with the highest level of caution. Lee Ook-won said relevant authorities cannot yet rule out the possibility that the perpetrators used artificial intelligence, or AI, in the attacks, and called for using AI-based approaches to defend against AI attacks and for broadly upgrading cybersecurity systems across the financial sector. The emergency meeting followed similar discussions on Friday, October 2, after Shinhan Bank and KB Kookmin Bank, along with other financial institutions, reported cyberattacks, while Hana Bank and Woori Bank were also affected by data leaks. Officials began on-site inspections after Shinhan Bank reported a data leak on September 30 and later expanded the investigation to other reported incidents. The FSC ordered financial institutions to comprehensively inspect security systems, tighten access controls, minimize connections from external systems, and strengthen consumer protection measures, and it will rapidly share information on attack patterns, IP addresses, and other threat data among financial institutions. Regulators believe the attacks may have been reconnaissance of multiple financial companies to find vulnerabilities rather than a targeted strike on any single institution, while attack traffic originated from IP addresses in several countries, including the United States, Japan, Singapore, Vietnam, and the United Kingdom. The Sunday emergency meeting was moved up from its original date of October 7 after additional data leaks were detected at smaller financial institutions. Meanwhile, the People Power Party, South Korea's main opposition party, called on authorities to investigate the possibility of North Korean involvement, citing past cyberattacks that were blamed on North Korea and targeted South Korean financial institutions.
LeapXpert Brings Governed WhatsApp Client Messaging to Webex by Cisco
LeapXpert and Webex by Cisco announced a collaboration that extends Webex beyond internal collaboration into governed client messaging, starting with WhatsApp. The integration, available now on the Webex App Hub, lets Webex users message clients on WhatsApp without leaving the platform, signing in with their existing Webex credentials on desktop or mobile. It is the first of several channels LeapXpert plans to bring into Webex, and additional messaging channels will be rolled out. Every message is checked by data loss prevention in both directions, and the full conversation is captured by LeapXpert for archiving. With Webex used by 95% of the Fortune 500 and roughly 300,000 organizations worldwide, the partnership brings governed consumer messaging within reach of tens of millions of business users. A Leap Work account and a Webex license are required, and LeapXpert will showcase at WebexOne 2026, October 5 to 8, 2026, at booth B24.
Cloud & Digital Infrastructure › API & Integration (iPaaS) ▲Technology
Cybersecurity & Digital Trust › Data Security Posture & DLP ▲Technology
LeapXpert · Demand · Positive LeapXpert's governed WhatsApp messaging is now available on the Webex App Hub, reaching tens of millions of business users.
CSCO · Demand · Positive Webex by Cisco integration with LeapXpert extends Webex into governed WhatsApp client messaging, adding a new capability for its 300,000 organizations.
Diskover Data Partners With NetApp to Bring Metadata Discovery to File-Intensive Workloads
Diskover Data announced a new collaboration with NetApp that extends the Diskover Platform's governed visibility and control to ONTAP and StorageGRID environments in media and entertainment, semiconductor design, and other file-intensive sectors. Under the collaboration, customers will be able to purchase Diskover Platform through NetApp beginning in November 2026, with the platform available now for NetApp ONTAP and StorageGRID environments. Diskover's DataDiscovery uses specialized scanners to index metadata in place across ONTAP and StorageGRID, capturing ownership, permissions, age, cost, and project context in a searchable, governed catalog. Diskover says customers typically reclaim 10 to 30 percent of their footprint, exceeding three million dollars in larger environments, with return on investment inside 30 to 60 days. Will Hall, Chief Executive Officer of Diskover Data, said the collaboration gives NetApp customers a governed, searchable view of the data behind their projects, while Sandeep Singh, Senior Vice President and General Manager, Platform at NetApp, said Diskover extends the NetApp ecosystem with specialized discovery for customers with file-intensive workloads.
Cloud & Digital Infrastructure › Enterprise Data Storage Systems ▲Technology
Cybersecurity & Digital Trust › Data Security & Cyber Resilience ▲Technology
Cybersecurity & Digital Trust › Data Security Posture & DLP ▲Technology
NTAP · Demand · Positive NetApp will sell the Diskover Platform through its channel starting November 2026, extending its ecosystem for file-intensive workloads.
Diskover Data · Demand · Positive Diskover's platform gains distribution through NetApp's ONTAP and StorageGRID customer base.
Denmark uncovers major data breach affecting 8.8 million people in CPR system
Denmark is facing a major personal data breach after unauthorised individuals accessed the records of approximately 8.8 million people in the country's central civil registration database, covering names, addresses and national identity numbers. The Danish government said on Monday that the perpetrator, who has not yet been identified, misused the legitimate system access of a private Danish company to look up information in the Central Person Register, or CPR. The company's access to the system has now been suspended and police are investigating the incident. Authorities said it is too early to conclude who was behind it. Christina Egelund, Denmark's Minister for Digital Affairs, described the incident as extremely serious, ordered a comprehensive review of the CPR's security, and urged the public to be wary of suspicious phone calls or emails that could use the leaked data for fraud. The agency that manages the system first detected unusual activity on 2 October, before finding that unauthorised lookups had taken place during September. People registered for name and address protection in the system were not affected by the incident.
Japan to Amend Economic Security Law, Requiring Organizations to Notify Government Before Sharing Sensitive Data
Japanese authorities plan to amend the economic security law to require companies and organizations holding big data to notify the government before transferring or disclosing sensitive personal information to third parties. Kyodo News reported that the government aims to submit the amendment bill to the ordinary session of the Diet next year, amid concerns that malicious actors abroad may misuse the data as artificial intelligence technology advances, potentially posing a threat to national security. Sensitive personal information covers medical treatment histories, location data, biometric data such as fingerprints and facial recognition data, genetic information, as well as financial transaction histories. Sources said the reporting requirement will be based on the volume of data an organization holds, and is expected to cover several hundred organizations, including banks and hospitals. The government also plans to enforce the requirement when organizations store data with external cloud services or data centers. In addition, the government is considering establishing a system to assess whether data transfers should be permitted, based primarily on national security factors. A panel of experts is expected to begin discussions late this month on the proposed system, including penalties for those who evade reporting, before submitting the bill to the Diet next year. There is a tendency to discuss regulation of data center and cloud service providers, while trying to avoid unnecessarily affecting these companies' business activities. The spread of generative AI has made personal information a strategic resource with implications for both the economy and national security, since large datasets may contain information used to surveil or blackmail individuals, including those involved in important decision-making. The economic security promotion law, which took effect in 2022, covers measures to support the development of critical technologies, strengthen supply chains, and conduct advance screening of equipment used by companies operating critical infrastructure.
Japan
South Korea
United States
Denmark