Cybersecurity incident impacted tens of thousands of individuals' personal information @ Decisely Insurance Services, LLC

In December 2024, Decisely Insurance Services, a benefits brokerage and HR services firm, experienced a cybersecurity incident involving unauthorized access to its cloud storage platform. The company detected suspicious activity on December 17, 2024, ...

Data breach of computer system by hacker @ Green County

In June 2025, Green County officials announced a data breach that occurred earlier in the year, potentially compromising the personal information of county residents. The breach, which took place between February 2 and February 4, 2025, involved unaut...

Data breach compromised sensitive personal and protected health data @ Smile Solutions of Goodlettsville

Smile Solutions of Goodlettsville recently announced a data breach stemming from a security incident at NRS, a debt recovery vendor they had used for 23 years. The breach, which occurred in July 2024, involved unauthorized access to protected account ...

Third parties could gain access to sensitive financial data @ Numa

In June 2025, Numa, a Berlin-based accommodation provider, experienced a significant data breach that exposed extensive customer identification information. A member of the Chaos Computer Club (CCC) discovered the vulnerability while attempting to boo...

Transmission of regulator data to personal email accounts @ Financial Conduct Authority

In June 2025, the UK's Financial Conduct Authority (FCA) disciplined four staff members for data security breaches that occurred between 2022 and 2023. The breaches involved employees sending FCA data to their personal email accounts, a violation of t...

2 million patients' sensitive patient data compromised @ Veradigm Inc. and Veradigm LLC

In December 2024, Veradigm LLC, a healthcare technology company, experienced a significant data breach that compromised the sensitive personal information of over 2 million patients. The breach, discovered around July 1, 2025, involved unauthorized ac...

Some files accessed without authorisation after network disruption @ EmCentrix

In June 2025, Edelson Lechtzin LLP announced an investigation into a data breach at EmCentrix, an HR and payroll solutions company based in Olympia, Washington. The breach occurred around August 14, 2024, when EmCentrix experienced a network disruptio...

Data breach of nearly 167,000 patient records @ Central Kentucky Radiology

In October 2024, Central Kentucky Radiology (CKR), a radiology services provider, experienced a cybersecurity breach that compromised the personal information of approximately 166,953 individuals. The breach occurred between October 16 and October 18,...

Data breach affects nearly 500,000 patients after ransomware attack @ Covenant Health

In May 2025, Covenant Health, a Catholic healthcare system operating in New England and parts of Pennsylvania, experienced a significant cyberattack that compromised the personal and health information of 478,188 individuals. The breach was initially ...

Cyber security incident caused temporary disruption with customer service phone line @ Rumpke Consolidated Companies, Inc.

Rumpke, a waste and recycling company, experienced a cyber security incident. The company assures that customer data and payment systems remain unaffected. The incident, potentially a ransomware attack first reported on October 11, 2024, temporarily ...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...