Developers used real data in test environment which was hacked exposing customers' data @ Kiddicare

In May 2016, hackers stole nearly 800,000 customers' data from a online child products retail company after their developers used real customer data for testing within a test web development site. Website and software developers often use real data to...

Online note-taking service leak results in large-scale customer password reset request @ Evernote

The biggest loss of data disclosed in 2014 with 50 million records exposed. In February 2013, an online note-taking and archiving service disclosed that it has suffered a serious security breach that saw hackers steal usernames, email addresses an...

Data potentially breached during a months-long phishing attack @ Hematology Oncology Associates

In May 2019, the healthcare company disclosed a data breach affecting employees and patients after an unauthorized person gained access to some employee email accounts in December 2018 and again in February 2019. The company's investigation determi...

Data breach affects up to 30 million passengers @ Malindo Air and Malindo Airways Sdn Bhd

In September 2019, the airline company disclosed a data breach after two former employees of a third-party provider of e-commerce services improperly accessed the personal data of the company's customers and published it onto data exchange forums whic...

Email breach disclosed by US healthcare company one year after discovery @ Primary Health Care Inc.

In March 2017, the healthcare company disclosed that bad actors had accessed four employee email accounts and may have accessed sensitive information for over 10,000 patients which was contained in some of the email accounts. The potentially expose...

Let us do the analysis so you can make the decisions

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...