Personal data belonging to customers exposed @ Chanel

In August 2021, Chanel Korea, the South Korean branch of the French luxury brand Chanel, experienced a cybersecurity breach. Hackers targeted the company's customer database for its Fragrance and Beauty division, resulting in the unauthorized access a...

Cybersecurity breach compromised sensitive client information @ Waratah Capital Advisors

In July 2025, Waratah Capital Advisors, a Toronto-based hedge fund manager overseeing CAD4 billion in assets, disclosed a cybersecurity breach that potentially compromised sensitive client information. The breach was discovered on June 24 and involved...

Data breach affected 340,000 job seekers @ France Travail

In July 2025, France Travail, the French public employment agency, experienced its second data breach in just over a year. This latest incident, discovered on July 12 by the French Computer Emergency Response Team (CERT-FR), involved unauthorized acce...

Suspicious activity discovered when employees unable to log into network @ Infinite Services

In July 2025, Infinite Services, a New York-based provider of various therapies, including physical, speech, occupational, and counseling services, discovered a ransomware attack that occurred in May 2025. The incident began when employees experienced...

Third-party IT provider experienced ransomware attack @ Pike County

In April 2025, Pike County discovered that its third-party IT provider was the victim of a ransomware attack. Upon learning of the breach, the county initiated an investigation, enlisting the expertise of cybersecurity and data forensics consultants. ...

Personal data of tens of thousands of woman-only users leaked, including passports, selfies and driver’s licenses @ Tea

In July 2025, Tea, a women-only dating safety app, experienced a significant data breach that exposed approximately 72,000 user images. The breach included 13,000 verification selfies and government-issued identification photos, along with 59,000 imag...

Hackers claimed to have accessed and published sensitive information related to submarines and frigates @ Naval Group

In July 2025, Naval Group, a major French shipbuilder and defense contractor, became the target of a significant cyberattack. A threat actor, identified as 'Neferpitou,' claimed to have exfiltrated 1TB of sensitive data, including source code for comb...

Company added to dark web leak site and ransom was demanded @ Nascar and The National Association for Stock Car Auto Racing, LLC

In April 2025, the Medusa ransomware group claimed responsibility for a cyberattack against the National Association for Stock Car Auto Racing (NASCAR), demanding a $4 million ransom to prevent the release of stolen data. NASCAR became aware of the br...

Flights cancelled after cyberattack @ PJSC Aeroflot

In July 2025, Aeroflot, Russia's flagship airline, experienced a significant disruption to its flight schedule due to a cyberattack. The airline was forced to cancel dozens of flights, primarily domestic routes, causing chaos at Moscow's Sheremetyevo ...

Social engineering attack obtained data on 1.4 million customers @ Allianz Life Insurance Company of North America

In July 2025, Allianz Life Insurance Company of North America confirmed a significant data breach impacting the personal information of the majority of its 1.4 million customers, as well as financial professionals and select employees. The breach occu...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...