Massive cyber attack had limited impact but they upgraded security approach anyway @ Aston Martin Lagonda Global Holdings plc

In 2017, the WannaCry ransomware attack prompted many organizations to reassess their cybersecurity posture, including Aston Martin. Although unaffected by WannaCry, Aston Martin realized its existing anti-malware solution was inadequate. They initiat...

Cloud hosting firm hit in ransomware attack @ iNSYNQ

In July 2019, cloud hosting provider iNSYNQ experienced a ransomware attack that significantly impacted their operations and customer data. The attack, later identified as the MegaCortex ransomware, was executed by a sophisticated criminal organizatio...

Second ransomware attack targeted a third-party processor @ Health Service Executive

In December 2025, the Health Service Executive (HSE) confirmed that they were targeted by a second ransomware attack in February of the same year. This attack, which targeted a third-party processor, resulted in a data protection breach reported by HS...

Data breach affected 456,000 patients @ Retina Group of Washington, PLLC

Retina Group of Washington (RGW), a healthcare provider, experienced a cybersecurity breach that affected a significant number of patients. On March 26, 2023, RGW detected unusual activity on its systems, hindering their access to information. An inve...

Hacker accessed third-party cloud storage provider leading to customer data breach @ GoTo and 2 more...

In December 2022, the company disclosed that they had detected unusual activity within portions of their development environment. After initiating an investigation, they determined that an unauthorised party gained access through a single compromised ...

Customer and employee data exposed @ Sydney Tools

In March 2025, Sydney Tools, a major Australian professional tools reseller, experienced a significant cyber breach that exposed a substantial amount of sensitive customer and employee data. A Cybernews research team discovered that over 34 million on...

Over one million students' personal data leaked following website hijacking @ New York University

In March 2025, New York University (NYU) experienced a significant cyber security incident where a hacker gained control of the university's website for approximately two hours. During this time, the attacker exposed the data of over three million app...

Unknown third party gained access to employee’s business e-mail account @ Beacon Health Three Rivers

In December 2024, Three Rivers Hospital experienced a data breach through CPS Solutions, a company that manages its pharmacy operations. CPS Solutions discovered unauthorized third-party access to an employee's business email account between December ...

"No reason to believe" patient information compromised after cyber attack @ Whitman County Public Hospital

Whitman County Public Hospital No. 3 (WHMC) experienced a cyber attack on February 28th, perpetrated by the RansomHub group, a ransomware-as-a-service variant that has targeted numerous critical infrastructure sectors. The hospital detected the attack...

Cyber attack on OnSolve CodeRED emergency alert systems disrupted public safety services @ Crisis24

In November and December of 2025, OnSolve CodeRED, a widely used emergency notification system, experienced a nationwide cyberattack that compromised user data and disrupted services for numerous state and local government agencies across the United S...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...