A pro-Iranian threat actor known as Ababil of Minab has claimed responsibility for a recent cyberattack targeting the Los Angeles County Metropolitan Transportation Authority (LACMTA). The group alleges to have gained access to critical systems, inclu...
In April 2026, EBR Systems, Inc., a medical technology company specializing in wireless cardiac pacing solutions, announced a data security breach involving unauthorized access to its network. The breach, initially detected in February, was promptly c...
In April 2026, Fiverr, a global online marketplace for freelancers, faced allegations of a significant data breach stemming from a vulnerability in Cloudinary, a third-party cloud-based media management service it utilizes. A hacker, identified as "Mo...
In France the President-Elect was targeted by a “massive and coordinated” hacking attack. Tens of thousands of emails and other documents were released overnight (some were fake) in an alleged attempt to impact the election results in support of the o...
In January 2025, a significant data breach was reported at Gravy Analytics, a location data broker, exposing sensitive location data of millions of smartphone users. The breach involved unauthorized access to Gravy Analytics' Amazon Web Services (AWS)...
In October 2024, the Internet Archive, a digital library known for the Wayback Machine, suffered a significant cyberattack that involved a data breach and distributed denial-of-service (DDoS) attacks. The breach exposed information belonging to 31 mil...
The Internet Archive, a non-profit digital library known for its Wayback Machine, experienced a significant Distributed Denial of Service (DDoS) attack starting on May 26, 2024. The attack, which involved tens of thousands of fake information requests...
The Internet Archive, a non-profit digital library known for its Wayback Machine, experienced a series of cyberattacks throughout October 2024. Initially, on October 9th, the organization suffered a data breach where hackers exploited an exposed GitL...
In November 2009 a large cache of the Climatic Research Unit at the University of East Anglia emails going back over a decade was leaked online. Outside hackers gained access to a server at the UEA which held backups of CRU emails and a collection of ...
In March 2018, it was disclosed that over 50 million users of the social media company had their personal information compromised by a third party, Global Science Research, who had legitimate access to the data for academic purposes but they passed th...
Cyber Security Case Studies has worked with a number of groups to develop these risk effect categories which represent a plain-english description of the impacts seen in public cyber events alongside their definition: