Data privacy event put residents' information at risk @ York County

In 2025, York County, Pennsylvania, experienced two separate data security incidents that potentially compromised the personal information of its residents. The first incident, discovered in early 2025, involved a data privacy event with a vendor cont...

Suspicious activity on network discovered and receipt of faxed communication containing threats and demands @ Norton Healthcare

In May 2023, the company disclosed that its Information Services department detected suspicious network activity and was notified of the receipt of a fax comprising threats and demands. While systems remained operational their cyber-security exper...

Disruptions due to ransomware attack @ Port of Nagoya

The Port of Nagoya, Japan's largest maritime port, experienced a significant disruption due to a ransomware attack attributed to the Russia-based hacking group Lockbit 3.0. This cyberattack led to a temporary shutdown of port operations, causing conce...

c. 3,000 individuals' sensitive personal information and protected health information breached @ Columbia Medical Practice

In January 2026, Strauss Borrelli PLLC announced an investigation into a data breach affecting Columbia Medical Practice, a healthcare organization based in Maryland. The breach, which impacted approximately 3,000 individuals, involved the potential c...

Email environment breach led to data breach which exposed PHI and PII @ Diversified Benefit Services Insurance Marketing, Inc.

In August of 2025, Diversified Benefit Services Insurance Marketing, Inc. (DBS) detected suspicious activity within its email environment, ultimately leading to the discovery of a data breach. An unauthorized actor gained access to the company's email...

Data breach affected 6,987 individuals' sensitive data @ Venezia Bulk Transport Inc.

In January 2026, Venezia Bulk Transport Inc., a Pennsylvania-based trucking and bulk transport company, disclosed a data breach that affected 6,987 individuals. The unauthorized access to Venezia's network occurred between August 5 and August 13, 2025...

Data breach involved sensitive personal information @ GiaCare, Inc.

GiaCare, Inc., a Florida-based healthcare staffing and IT provider and a subcontractor to GiaMed Alliance JV, LLC, experienced a data breach in December 2025. The breach involved sensitive personal information belonging to an undetermined number of in...

Nova ransomware group claimed sensitive data accessed and exfiltrated @ KPMG Netherlands

In January 2026, KPMG Netherlands was allegedly targeted by the Nova ransomware group, with claims of sensitive data access and exfiltration. The incident was reported by ransomware monitoring services on January 23, 2026, with the attackers asserting...

Data breach involved sensitive personal information @ Melwood, Inc.

Melwood, Inc., a Maryland-based employment and support service company for people with disabilities, reported a data breach in which sensitive personal information belonging to an undetermined number of individuals was potentially compromised. The inc...

Data breach involved sensitive personal information @ Cytek Biosciences, Inc.

Cytek Biosciences, a California-based flow cytometry manufacturer and supplier, experienced a data breach in November 2025, potentially compromising the sensitive personal and protected health information of an undetermined number of individuals. The ...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...