Data breach impacted 65,000 individuals @ Varsity Brands

In May 2024, the company discovered suspicious activity on its computer network and took immediate steps to stop the activity, such as taking affected systems offline, and launching an investigation with the assistance of external cybersecurity expert...

Information on 163,000 consumers sold to an alleged crime ring @ ChoicePoint and ChoicePoint, Inc.

In February 2005, the company experienced a significant data breach that exposed the sensitive personal information of approximately 163,000 consumers. The breach occurred when criminals, posing as legitimate businesses, gained unauthorized access to ...

Breach caused by employee overriding the company’s multi-factor authentication protocol @ Residential Mortgage Services, Inc.

In March 2021, the company were fined for violating state cybersecurity regulations. The regulations, established in 2017, mandated financial institutions implement robust cybersecurity measures, conduct risk assessments and promptly report cybersecur...

Company mitigated distributed denial of service attack that used a botnet of c.70,000 bots @ Microsoft Corporation

In August 2021, the company mitigated a record-breaking 2.4 terabytes per second (Tbps) distributed denial of service (DDoS) attack targeting a customer in Europe. This attack surpassed the previous record of a 2.3 Tbps attack mitigated by Amazon's AW...

$600,000 bitcoin ransom to hackers who took over its computers @ City council of Riviera Beach

In May 2019, the city experienced a significant cyberattack that crippled its computer systems which was considered a massive alarm bell for the rest of the US. The attack originated from a phishing email opened by an employee which unleashed a virus ...

Partner inadvertently exposed the personal information of children and their parents @ Boy Scouts of America and Trails End

In September 2019, a third-party vendor contracted by the Boy Scouts of America to manage fundraising sales, experienced a data incident that exposed the personal information of an unknown number of scouts. The incident involved a web developer (also ...

Disgruntled former credit union employee accessed the company’s file server and deleted more than 21 gigabytes of data @ Company undisclosed: Banks Industry

In May 2021, a former part-time employee of an unnamed credit union, pled guilty to intentionally deleting over 21 gigabytes of data from the company's shared network drive. This act of sabotage was done in retaliation for the employee's termination. ...

Personal details of customers exposed, including names, NRIC numbers and addresses @ Zero1

In October 2019, the company was fined by the Personal Data Protection Commission (PDPC) in Singapore for violating data privacy laws. The company had contracted a third-party courier services provider, to deliver SIM cards to its subscribers. However...

Player data accessible online after failure to set password to secure the information @ Strendus

In November 2023, the online casino suffered a significant data breach. The breach exposed an estimated 85 gigabytes of sensitive user data, potentially impacting hundreds of thousands of individuals. The compromised data included a range of personall...

Website closed temporarily as a precaution following cyber attack @ Bonjour-santé

In October 2019, the company experienced a cyber attack and took its website offline temporarily as a precaution. The incident prompted the president to clarify that the company is distinct from the government-operated Family Doctor Finder (GAMF) whic...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...