Cyber defence protocols and proactive measures taken after ransomware attack @ Stelia Aerospace

In April 2026, Stelia Aerospace, a manufacturer of cabin equipment, experienced a ransomware attack targeting its North American IT environment. Upon detecting the intrusion, Stelia Aerospace promptly activated its cyber defense protocols and implemen...

Cybercriminals gained unauthorised access to External Resources Department (ERD) computer systems @ Finance Ministry (Sri Lanka)

In April 2026, the International Monetary Fund (IMF) began closely monitoring a cybersecurity incident in Sri Lanka, where cybercriminals successfully breached the Finance Ministry's computer systems. The unauthorized access targeted the External Reso...

Compromised data consisted of project tender documents. @ Shanghai Tunnel Engineering Co

A cybersecurity incident has occurred at Shanghai Tunnel Engineering Co (Singapore), a contractor involved in the construction of three Jurong Region Line (JRL) MRT stations and the new Changi NEWater Factory 3. The company reported that data related ...

Approximately 153,000 records of electricity and gas contracts on a cybercriminal forum @ Zirconite de Negocios

A significant data breach has potentially exposed the personal and financial information of approximately 153,000 customers of Iberdrola, a major Spanish energy company. The breach is attributed to a compromise at Zirconite de Negocios, an authorized ...

Data breach affected SQL database powering its API data feed @ Esquire

In April 2026, Esquire, a large technology wholesaler in South Africa, experienced a data breach that compromised a portion of its SQL database powering its API data feed. The company promptly notified its customers and assured them that its primary d...

Hacker claimed over 300,000 records stolen @ Polymarket

In April 2026, Polymarket, a decentralized cryptocurrency-based prediction market, refuted claims of a data breach after a hacker known as "xorcat" posted alleged user data on a dark web forum. Xorcat claimed to have stolen over 300,000 records, inclu...

Cyber attack cost district millions @ Pine Bluff School District

In December 2026, the Pine Bluff School District fell victim to a cyberattack resulting in a loss of over $3.2 million. The incident involved a fraudulent wire transfer initiated on December 17th, when district staff processed a payment for what they ...

Data of 100,000 leaked from golf course @ Lee & Lee Country Club

In April 2026, Lee & Lee Country Club, a golf course in Gapyeong-gun, Gyeonggi Province, South Korea, suffered a significant data breach that compromised the personal information of approximately 100,000 customers. The Korean National Police Agency's ...

Personal and financial information leaked @ Hutt City Council

In March of 2026, the Hutt City Council (HCC) experienced a cyber attack that resulted in the exposure of personal and financial information of a significant number of individuals. The council has confirmed that this breach, stemming from a phishing a...

Breach exposed sensitive PII and PHI @ Florida Physician Specialists

In late April 2026, Florida Physician Specialists, a medical practice based in Jacksonville, Florida, disclosed a data breach that occurred between November 27 and November 29, 2025. Unauthorized access to the company's computer network resulted in th...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...