Unauthorized access to fraudulently obtain funds @ Apria Healthcare LLC

In May 2023, the company disclosed that a third party accessed their systems without authorization. They took immediate measures to mitigate the incident, including collaborating with the Federal Bureau of Investigation and employing a reputable fore...

Theft of customers' data after security breach @ El Corte Inglés

A major department store chain in Spain, El Corte Inglés, experienced a data breach that compromised customer data. The breach occurred due to a security vulnerability in an external provider's system, leading to unauthorized access to customer inform...

POLSA network disconnected from Internet after unauthorised access @ Polish Space Agency and POLSA

The Polish Space Agency (POLSA) experienced a cybersecurity breach, leading to unauthorized access to their IT infrastructure. In response, POLSA severed its network connection from the internet to protect sensitive data. Although specific details a...

Hacker claimed to have accessed data and encrypted files in network @ Berkeley Research Group

Berkeley Research Group (BRG), a firm specializing in tax, arbitration, and bankruptcy consulting, suffered a cyberattack in early March 2025. The attack involved ransomware, with hackers claiming to have stolen data and encrypted files from BRG's sys...

Customers unable to transfer funds or make payments @ Barclays PLC

In March 2025, Barclays, a major U.K. bank, experienced a significant outage of its online banking services, leaving customers unable to transfer funds or make payments for several hours. This incident marked the second major outage for Barclays withi...

Data breach impacted students over the past several years @ Chicago Public Schools

In late 2024, Cleo, a technology vendor contracted by Chicago Public Schools (CPS), experienced a cyberattack on a server containing student data. CPS was informed of unauthorized data access on February 8, 2025. The breach exposed the personal infor...

Breach confirmed after hacker leaked company documents @ Orange S.A.

Orange Group, a French telecommunications company, has confirmed a cyberattack on its Romanian branch. A hacker, Rey, affiliated with the HellCat ransomware group, claims to have exploited compromised credentials and vulnerabilities in Orange's Jira s...

Some of its Amazon Web Services (AWS) resources compromised @ Angel One

In February 2025, Angel One, a prominent Indian stock brokerage firm, experienced a significant data breach. The breach originated from compromised Amazon Web Services (AWS) resources, potentially exposing sensitive client data. Angel One was alerted...

Patrons' transaction data leaked on dark web @ Toronto Zoo

In January 2024, the Toronto Zoo experienced a ransomware cybersecurity attack that resulted in the exposure of visitor and member transaction data spanning over two decades, from 2000 to April 2023. The compromised data, which was leaked on the dark...

Network breach from external source involved ransomware @ Penn-Harris-Madison School Corporation

On March 3, 2025, the Penn-Harris-Madison School Corporation (PHM) experienced a ransomware cyberattack. The attack affected the district's network, causing interruptions to Wi-Fi and internet access. As a precaution, all network-connected desktop com...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...