GitHub repository breach @ SailPoint

On April 20, 2026, identity security firm SailPoint detected and contained a breach of its GitHub repositories. The company, which specializes in identity security and governance solutions for enterprises, promptly engaged a third-party cybersecurity ...

Data breach impacted online shop customers @ Skoda and Škoda

In May 2026, automobile manufacturer Skoda, a subsidiary of Volkswagen Group, disclosed a data breach affecting users of its online shop. The breach was discovered through the company's technical security monitoring and stemmed from a vulnerability in...

Third-party data breach gave cybercriminals access to six months' data @ BWH Hotels

In May 2026, BWH Hotels, encompassing brands like WorldHotels, Best Western Hotels & Resorts, and Sure Hotels, notified its customers about a third-party data breach. The breach, discovered on April 22, 2026, exposed data dating back to October 14, 20...

Unauthorised access to patients' sensitive information @ Community Health Systems Inc.

Community Health Systems Inc., a healthcare provider in California, is under investigation following a data breach that compromised the sensitive information of its patients. The breach occurred around February 28, 2026, when an unauthorized actor gai...

Cybersecurity incident impacted global business operations @ West Pharmaceutical Services

In early May 2026, West Pharmaceutical Services, a major pharmaceutical packaging and delivery systems manufacturer, fell victim to a ransomware attack that significantly disrupted its global operations. The company detected the breach on May 4th and ...

Hackers claimed 11 million files after plant suffered IT outage @ Foxconn

In May 2026, Foxconn, a major electronics manufacturer and key supplier to companies like Apple and Nvidia, confirmed that several of its North American factories were impacted by a cyberattack. The Nitrogen ransomware gang claimed responsibility, ass...

Data breach involved internal use of unauthorised artificial intelligence-based software to handle sensitive customer information @ Community Bank

In May 2026, Community Bank, a subsidiary of CB Financial Services with operations in southwestern Pennsylvania, southeastern Ohio, and northwestern West Virginia, disclosed a data breach incident involving the unauthorized use of an artificial intell...

Target of "criminal cyber attack" still supplying safe water to all customers @ South Staffordshire plc and South Staffordshire Water

In August 2022, the company disclosed a cyber attack that did not affect their ability to provide consumers with safe drinking water. However, they stressed that customer service teams continued to operate as usual despite disruptions to their corpora...

Files stored within email accounts accessed by unauthorised party @ Mount Kisco Surgery Center

In May 2026, the Mount Kisco Surgery Center in New York settled a class-action lawsuit for $527,500 related to a data breach that occurred in November 2023. The surgery center detected unusual activity within an employee's email account, indicating th...

Data targeted as hackers hold software provider to ransom @ Evolution Mining

A cyberattack in May 2026 targeted a major software supplier, Scope Systems, impacting numerous Australian mining companies. The attackers are holding Scope Systems' cloud-based operations for ransom, disrupting access to key technology systems for it...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...