US Retailer exposes customer credit cards resulting in fraudulent usage @ Kmart Corporation and The Sears Holdings Corporation

In May 2017, the company confirmed that credit card information was stolen from shoppers who came into its stores. The store did not confirm how or when the data was stolen. In a Securities and Exchange Commission filing in early October, the comp...

Unauthorised access to payment systems @ Chipotle Mexican Grill, Inc.

In April 2017, the company posted a “Notice of Data Security Incident” on its website to let customers know about unauthorized activity it had detected on the network that supports payment processes. The investigation was ongoing when the notice w...

UK car rescue company accused of 'cover up' following a data breach @ AA plc and Automobile Association plc

After suffering a data exposure of at least 13GB of customer information covering 117,000 accounts the actions of one of the UK’s largest motoring associations provides a great insight into the importance of incident response. An initial incorrect ...

Data breach affects 245,000 UK customers @

According to cybersecurity experts this was one of the biggest data breaches in the UK involving financial information. Though little has been publicly disclosed about the attack itself and the attacker(s), the attack evidenced the need to change t...

Major email marketing organization accidentally exposes over billion people's data @ River City Media

Described at the time it was disclosed (March 2017) as the largest single data breach in history. In January 2017, the email marketing organisation discovered 1.34 billion records had been compromised. This data breach was discovered by the efforts...

Browse visualisations from our proprietary data set


Visualise cyber events by industry sector.


Net Costs

Visualise net costs by industry sector.


Global Cyber Event Taxonomy

Visualise the key attributes we capture.


Let us do the analysis so you can make the decisions

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as bad actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...