Welcome back. A hack of a Salesforce supplier over the summer continues to ripple out to Salesforce customers.

Qantas Airways on Sunday acknowledged that passenger data was published online. The disclosure comes after the hacker group threatened publication unless Salesforce paid a ransom—which the company has refused to do.

The Federal Bureau of Investigation and its counterparts in France have seized the hackers' extortion website, Bleeping Computer reported.

The attackers are suspected of accessing Salesforce customer data by exploiting third-party add-on software from a company called Salesloft. 

Qantas, which previously said about 5.7 million flyers had their data compromised, is one of a few dozen companies caught up in the campaign. The airline said it is working with Australian law enforcement and cyber agencies to investigate.

More news below.

Russia is behind a surge in cyberattacks on Polish critical infrastructure, according to Poland's minister for digital affairs. About 170,000 attempted hacks have been detected this year, through September, on water, energy and other critical services, said Krzysztof Gawkowski. (Reuters)

SimonMed, a Scottsdale, Ariz.-based company that provides mammograms, MRIs and other medical imaging tests, said more than 1.2 million patients had their personal information exposed in a January cyberattack. 

• The hack originated at an unnamed business partner and spread to SimonMed. An investigation later determined that there was "unauthorized access to our systems" between Jan. 21 and Feb. 5, SimonMed said.  
• The company then took several steps to improve its cybersecurity, it said, including implementing endpoint detection and monitoring, removing all third-party direct access to its systems and limiting traffic to white-listed entities.

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.