Hello. Hackers said they published data on more than five million Qantas Airways customers, fulfilling a threat to do so unless paid a ransom.

Over the summer, hackers claimed to have compromised dozens of Salesforce accounts, amounting to about one billion records. A separate attack involving Salesforce accounts in August has potentially affected hundreds of companies. Read our explainer.

Also today: 

• Bridgestone, Asahi warn of financial toll from separate cyberattacks
• LevelBlue to buy Cybereason
• New York fines auto insurers for data breaches
• PowerSchool hacker sentenced to four years in prison
• And more

Cyberattack exposed Bridgestone to higher tariff costs. After a hack in September prompted tire maker Bridgestone to disrupt manufacturing operations in North America for several days, the company used inventory from elsewhere to fulfill orders. The move came with higher than expected tariff costs that Bridgestone expects to disclose at an earnings call in November. (Bloomberg)

Acquisition deal: Managed security services company LevelBlue said it plans to buy Cybereason, which provides forensics, incident response and other services. The companies didn't disclose financial terms.

• Cybereason, founded in Israel, has made two rounds of layoffs since 2022 and backed away from a plan to go public. (CyberScoop)

PowerSchool hacker sentenced: A Massachusetts college student was sentenced to four years in prison for hacking education tech provider PowerSchool. Matthew Lane, who was a teen when he breached PowerSchool last year, was also ordered to pay $14 million in restitution. 

• Up to 60 million current and former students worldwide had their data breached. Lane, now age 20, extorted about $3 million from the company and other entities, according to a sentencing memo. He turned over about $160,000 to the government. (The 74)
• Further reading from WSJ Pro: PowerSchool Paid Ransom to Hackers After Breach

U.S., U.K. sanctioned 146 entities in Southeast Asia linked to online scams that have allegedly bilked victims of more than $16 billion in cryptocurrency, including Prince Holding Group in Phnom Penh and its chairman and chief executive Chen Zhi. Zhi is a 38-year-old Chinese émigré.

• Further reading from WSJ: ‘Pig Butchering’ Online Scams Are Proliferating. Here’s Why They Work So Well.

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.