Cybercriminals infiltrated inadequately secured network and gained access to files @ Aldrich Services

Aldrich Services LLP, doing business as Aldrich Advisors, recently confirmed a significant cybersecurity event involving unauthorized access to its internal computer systems. The organization first became aware of the situation after detecting suspici...

Data breach affected 3,386 patients @ Persona Dental

Persona Dental, a dental practice based in Sartell, Minnesota, has recently confirmed a significant data breach that has impacted a total of 3,386 patients. The organization officially reported the security incident to the Department of Health and Hum...

Social Security numbers and medical records compromised @ Kansas City Life Insurance Company

Kansas City Life Insurance Company is currently the subject of a comprehensive data breach investigation conducted by the law firm Federman & Sherwood. This legal inquiry was initiated following a formal breach notification filed with regulatory autho...

Cyber incidents involved employee email accounts @ Nikkei Group

Nikkei, the prominent Japanese media conglomerate and owner of the Financial Times, disclosed a series of significant cyber security incidents in October 2026. Within a single month, the organization reported three distinct breaches that compromised e...

18 million player records for sale on dark web @ Minecraft and Mojang Studios

In October 2026, reports emerged of cybercriminals claiming to possess and sell massive databases of Minecraft player records on dark web forums. The scale of the alleged breach varies between different sellers, with one individual claiming to hold 18...

Malicious software within system for four days @ Bristol City Council

In September 2026, Bristol City Council’s educational management platform, Trading with Schools, was targeted in a significant cyber attack that affected 87 schools across the region. The platform serves as a central hub for day-to-day operations, inc...

Incident involved access to application using valid credentials to customer administrator account @ FitnessKPI

FitnessKPI, a Spanish business intelligence and fitness management platform that utilizes artificial intelligence to assist gym operators with operational and membership data, recently responded to allegations of a significant data breach. The inciden...

110,000 clients' information compromised after unauthorised access to servers operated by an external vendor @ Daiwa Securities

Daiwa Securities, a prominent Japanese brokerage firm, recently disclosed a significant cybersecurity event involving the potential exposure of sensitive data belonging to approximately 110,000 clients. The incident was traced back to unauthorized acc...

Cybersecurity incident affected local district server @ Indiana Area School District

In October 2026, the Indiana Area School District encountered a significant cybersecurity event that prompted an immediate public disclosure from the district leadership. Superintendent Robert J. Heinrich Jr. officially reported the incident on a Sund...

Unauthorised access to some corporate email accounts and customer service system @ Wakacje.pl

Wakacje.pl, a prominent Polish travel website, reported a significant data breach in 2026 involving unauthorized access to its internal systems. The security incident specifically targeted corporate email accounts and the company’s customer service in...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...