Cybercriminals stole the data of 500 million customers @ Marriott International and Starwood Hotels & Resorts Worldwide

One of the biggest data breaches ever. In November 2018, the company disclosed that the data of up to 500 million guests who had booked reservations at its properties were compromised after attackers breached its network for at least four years. Th...

Unauthorised access and acquiring of information from computer network @ Casino Fandango

In June 2024, Casino Fandango, a casino resort in Carson City, Nevada, experienced a cybersecurity incident that exposed sensitive consumer data. The breach occurred between June 8th and June 13th, 2024, when an unauthorized party accessed and copied ...

App glitch zeroed out people's balances @ Bank of America

On October 2024, users of Bank of America's mobile banking app began reporting issues with their account balances, with many seeing zeroed-out or outdated figures. The problems started around 09:30 PT and peaked at approximately 10:20 PT, with Downdet...

Monitoring data stolen in ScienceLogic zero-day attack @ Rackspace Technology, Inc.

In September 2024, Rackspace experienced a data breach stemming from a zero-day vulnerability found in a third-party utility bundled with ScienceLogic's SL1 platform, which Rackspace uses for internal system monitoring and customer dashboards. This vu...

Internet outage after cyber attack @ Millsboro Public Library

Sussex County, Delaware libraries have been experiencing internet outages since a cyberattack on September 20, 2024. The attack, later identified as ransomware, has impacted multiple libraries throughout the county, including Millsboro Public Library...

Cybersecurity incident involved Microsoft O365 @ Cumberland Heights Foundation

Cumberland Heights Foundation, a substance abuse rehabilitation center in Nashville, TN, experienced a cybersecurity breach on February 21, 2024, involving their Microsoft O365 system. Following an investigation, Cumberland Heights confirmed on August...

Data breach after a ransomware attack @ Richmond Community Schools

On Friday, September 27th, Richmond Community Schools revealed that their data services network was targeted in a ransomware attack. The attack resulted in a data breach that impacted PowerSchool, the student and staff information system. While there ...

Residents unable to use computers or the Internet due to cyber attack @ Delaware public library

The public library system in Delaware has been targeted by a ransomware attack, resulting in the disruption of internet and computer services at all branches. Since the previous week, library patrons have been unable to access computers or the interne...

Hackers obtained confidential employee information @ Aramark

A data breach occurred at Aramark, a food services and facilities company, compromising the personal information of an unknown number of employees. The breach was discovered on September 10, 2024, when it was determined that an unauthorized party had...

Sensitive personal information of visitors and current and former employees compromised @ Tech Interactive

The Tech Interactive (The Tech) experienced a data breach between April 9, 2024 and April 13, 2024 when an unauthorized third party gained access to their IT network. The breach was discovered in early 2024 during routine monitoring when suspicious a...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...