Report URI's Scott Helme said the October 29, 2026 security breach involved compromised web-monitoring vendor DebugBear, which served a malicious script from its content delivery network