Data breach exposed location tracking operation @ Gravy Analytics Inc.

In January 2025, a significant data breach was reported at Gravy Analytics, a location data broker, exposing sensitive location data of millions of smartphone users. The breach involved unauthorized access to Gravy Analytics' Amazon Web Services (AWS)...

DDoS attack made site unavailable and resulted in data breach of 31,081,179 users’ accounts @ Internet Archive

In October 2024, the Internet Archive, a digital library known for the Wayback Machine, suffered a significant cyberattack that involved a data breach and distributed denial-of-service (DDoS) attacks. The breach exposed information belonging to 31 mil...

Intrusion involved the launch of tens of thousands of fake information requests per second @ Internet Archive

The Internet Archive, a non-profit digital library known for its Wayback Machine, experienced a significant Distributed Denial of Service (DDoS) attack starting on May 26, 2024. The attack, which involved tens of thousands of fake information requests...

Another incident in month after attackers hacked third party email support platform through stolen GitLab authentication tokens @ Internet Archive and Zendesk Inc.

The Internet Archive, a non-profit digital library known for its Wayback Machine, experienced a series of cyberattacks throughout October 2024. Initially, on October 9th, the organization suffered a data breach where hackers exploited an exposed GitL...

Climate change controversy began with hacked server @ University of East Anglia

In November 2009 a large cache of the Climatic Research Unit at the University of East Anglia emails going back over a decade was leaked online. Outside hackers gained access to a server at the UEA which held backups of CRU emails and a collection of ...

Personal information of social media giant's users was 'misused' by customer @ Cambridge Analytica and 2 more...

In March 2018, it was disclosed that over 50 million users of the social media company had their personal information compromised by a third party, Global Science Research, who had legitimate access to the data for academic purposes but they passed th...

500 million accounts hack @ Altaba Inc. and Yahoo Inc.

In September 2016, the once dominant internet service company, while in negotiations with Verizon to purchase it, announced it had been the victim of the biggest data breach in history, likely by a state-sponsored actor in 2014. The attack compromise...

3 billion accounts hacked at internet company @ Altaba Inc. and Yahoo Inc.

In July 2016, the company disclosed the event stating that the 2013 attack on its network had affected one billion accounts. It was described as the biggest known breach of a company’s computer network. In October 2017, Yahoo's new owner Verizon dis...

Former auditor of supermarket jailed for exposing staff data @ Wm Morrison Supermarkets plc

In 2014, the company suffered a data breach of 100,000 employees' information after a database was intentionally leaked online to a file-sharing website and to various newspapers by an employee (senior internal auditor). This case study emphasises th...

Attackers target entertainment company to bend the company to their will @ Sony Group Corp.

Throughout November and December 2014, the company suffered a series of cyber attacks disabling their computer systems, releasing heretofore unreleased films on file-sharing hubs and revealing employees' personal information and data such as employee ...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...