Observed Signal · Oct 9, 2026 · Data Breach · Source: persoenlich.com News · Impact: 1/5 · Sentiment: Negative
Ricardo Data Leak Affects 890,000 Accounts
Swiss online marketplace Ricardo suffered a data breach affecting approximately 890,000 user accounts. The unauthorized access, discovered on October 7, 2026, exposed names, postal addresses, and phone numbers, as well as company names for business customers. Email addresses and passwords were not compromised. Affected users were notified on October 10, and the company has filed a criminal complaint. The Federal Data Protection and Information Commissioner (FDPIC) and the Federal Office for Cybersecurity (BACS) have been informed. No ransom demands were made. Owner Swiss Marketplace Group (SMG) has implemented enhanced security measures, including AI-based fraud detection and multi-factor authentication, though the breach occurred despite these safeguards.
It is a data breach at a Swiss marketplace, relevant to privacy concerns but not directly impacting the global AdTech industry.
Track SMG Swiss Marketplace Group Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Approximately 890,000 user accounts were affected in the Ricardo data breach.
- Exposed data included names, postal addresses, and phone numbers; business customers' company names were also leaked.
- Email addresses and passwords were not compromised.
- The breach was discovered and closed on October 7, 2026; affected users were notified on October 10.
- No ransom demands were made; authorities (FDPIC and BACS) were notified, and SMG has enhanced security measures.
Connected Companies & Entities
1 Entity mapped“Ricardo's parent company SMG Swiss Marketplace Group announced on Friday.”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Republik data breach: hackers accessed all user data
The Swiss online magazine Republik has disclosed a security incident in which unknown attackers gained read access to a copy of its user database between August and mid-October. The breach was facilitated by a vulnerability in the analytics software Metabase. According to the company, the attackers fully downloaded personal data of all accounts, including email addresses, names, and, if provided, phone numbers, birth years, and gender. Passwords and credit card data were not affected. The attackers also sampled entries from other database areas, including postal addresses and payment records. Around 2,300 anonymous commenters could potentially be re-identified. The company informed the Swiss data protection authority on October 15 and is considering filing a criminal complaint. Metabase had released an update on August 6, but the magazine missed it because it had not subscribed to security warnings. Republic believes the attack was part of a broad, automated wave, not a targeted hack.
CarGurus Data Breach Exposes 12.5 Million User Accounts
Automotive marketplace CarGurus experienced a data breach that exposed personal information for an estimated 12.5 million accounts, according to breach-notification site Have I Been Pwned. The stolen data reportedly includes names, email addresses, phone numbers, physical addresses, user account ID mappings, finance prequalification application data, and dealer account/subscription information. Have I Been Pwned attributed the incident to the ShinyHunters hacking group. CarGurus confirmed a cybersecurity incident to TechCrunch, said the incident is contained, and stated there are no indications that dealer data feeds, APIs, or core systems were compromised. The article notes a separate automotive-related breach at CarMax was reported the prior month.
IDScan confirms data breach of 150 million driver's licenses
Identity verification service IDScan has confirmed a data breach involving the theft of over 150 million driver's license records from its cloud systems. The stolen data includes full names, driver's license numbers, and other government ID numbers such as passports. The breach, which occurred over a year-long hack, was first reported by cybersecurity journalist Brian Krebs. IDScan, based in Louisiana, serves corporate clients including entertainment venues and cannabis dispensaries. The company acknowledged the incident on September 1 after receiving information about a claim of a hack, and its investigation is ongoing. The FBI and Pentagon are reportedly investigating. The stolen database is accessible on the dark web, with searchable records including photos.
Receive all future signals for SMG Swiss Marketplace Group & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.