On October 28, 2026, The Hacker News reported U.S., Infrastructure Agency, CISA. The figures I am keeping are CVE-2026-111497, 9.2. The framing is mine. Their sentences stay on their page.
The names I am willing to repeat are U.S., Infrastructure Agency, CISA, Adobe Commerce. The figures in the report are CVE-2026-111497, 9.2. The subject words I am keeping are vulnerability, breach.
The part I keep is whose records moved, and whether those people were told.
Source I used: The Hacker News. The link is under this column.