Personal and protected health information of current and former employees and patients compromised @ Bradford Health Services

In December 2023, Bradford Health Services, an addiction treatment provider, detected unusual network activity indicating a data breach. An investigation, concluding in May 2025, confirmed unauthorized access and acquisition of files containing sensit...

Email mishap exposed the email addresses of hundreds of Blue Badge holders @ City of York Council

The City of York Council recently experienced a significant personal data breach involving the accidental disclosure of contact information for hundreds of disabled residents. This incident occurred when the council distributed a series of updates reg...

Attack disrupted operations when employees arrived at work @ Karl Auto Group

Karl Auto Group, the largest automotive dealer in Iowa and parent company of Karl Chevrolet, experienced a significant cyberattack in early 2026 that disrupted operations and compromised the sensitive data of thousands of individuals. The breach was o...

Data breach affected 1.2 million users in Brazil @ iFood

iFood, the dominant food delivery application in Brazil, officially confirmed in June 2026 that it had fallen victim to a data breach that originated in December 2025. This security incident resulted in the unauthorized access of personal information ...

Personal data of delivery drivers and jobseekers accidentally exposed @ Takealot Fulfilment Solutions

Takealot Fulfilment Solutions, the business-to-business arm of the major e-commerce platform Takealot, recently experienced a significant data breach resulting from a recurring administrative error. For a period exceeding two weeks, an external indivi...

Data from one of its third-party systems accessed without authorisation @ Australian Centre for the Moving Image

The Australian Centre for the Moving Image, a major cultural institution based in Melbourne, recently reported a significant cybersecurity incident involving a data breach that has impacted approximately 26,000 individuals. This event took place in Ju...

Data breach exposed patients' personal information @ United Medical Doctors

United Medical Doctors, a large independent multi-specialty medical and surgical group headquartered in Murrieta, California, recently disclosed a significant data breach that may have exposed the personal information of current and former patients. T...

37,363 people's private information compromised @ Alta Resources Corporation

Alta Resources Corp., a business process outsourcing firm, has reached a 675,000 dollar settlement to resolve a class action lawsuit stemming from a significant data breach that occurred in November 2023. The cyberattack took place between November 17...

Data breach impacted over 120,000 people @ Phia Group

The Phia Group, a prominent healthcare consulting and cost-containment firm headquartered in Massachusetts, has officially announced a major data security incident that originated in 2024. The company plays a critical role in the healthcare ecosystem ...

2,313 customers’ sensitive information compromised @ EMM Loans, LLC

EMM Loans, LLC, a residential mortgage lender based in New Jersey, reached a settlement agreement in April 2026 to resolve a class action lawsuit following a significant data breach discovered in February 2024. The breach, which was identified around ...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...