Suspicious activity on network discovered and receipt of faxed communication containing threats and demands @ Norton Healthcare

In May 2023, the company disclosed that its Information Services department detected suspicious network activity and was notified of the receipt of a fax comprising threats and demands. While systems remained operational their cyber-security exper...

Data security incident involved patients' email addresses @ Urology Associates of Green Bay

Urology Associates of Green Bay reported a data security incident in December 2026 involving the exposure of patient email addresses. On December 22, the organization detected unusual activity within one of its email systems and immediately secured th...

Data breach involved sensitive personal information @ ITASCA Consulting Group, Inc.

In January 2026, ITASCA Consulting Group, Inc., a Minnesota-based geotechnical software developer and consulting company, reported a data breach affecting an undetermined number of individuals. The breach was discovered on or around December 12, 2025,...

Data breach involved sensitive personal information @ Progressive Auto Group

Progressive Auto Group, an Ohio-based car dealership with three locations in Massillon, Ohio, experienced a data breach involving sensitive personal information. The breach was discovered after Progressive Auto identified unauthorized access to its ne...

10, 700 individuals' sensitive personal information breached @ Nova Biomedical Corp.

In January 2026, Nova Biomedical Corp., a Massachusetts-based biomedical science tool manufacturer, reported a data breach affecting over 10,700 individuals. The company, founded in 1976 and employing over 1,000 people, develops a variety of life scie...

Data breach involved sensitive personal information belonging to over 2,000 individuals @ Blake Jones Law Firm LLC

Strauss Borrelli PLLC is investigating Blake Jones Law Firm LLC due to a recent data breach that compromised the sensitive personal information of over 2,000 individuals. Blake Jones, a personal injury law firm based in Louisiana, discovered suspiciou...

Cyber attack disrupted food deliveries @ Vladimir Bread Factory

In January 2026, the Vladimir Bread Factory, a major bread producer in Russia's Vladimir region, experienced a cyberattack that disrupted its order processing and deliveries. The attack, which occurred overnight on a Sunday, impacted the factory's int...

Inadvertent exposure of sensitive government contracting documents @ CISA and Cybersecurity and Infrastructure Security Agency

In mid-July 2025, Madhu Gottumukkala, the acting director of the Cybersecurity and Infrastructure Security Agency (CISA), inadvertently uploaded sensitive government contracting documents marked "for official use only" to a public ChatGPT platform. Th...

Hackers stole a "limited amount of user data" @ Match Group, Inc.

In January 2026, Match Group, owner of popular dating apps like Tinder, Hinge, and OkCupid, confirmed a cybersecurity incident where a limited amount of user data was compromised. The ShinyHunters threat group claimed responsibility, leaking compresse...

Data breach compromised 4.5 million members @ Ttareungyi

In January 2026, a significant data breach was reported to have potentially compromised the personal information of approximately 4.5 million members of Seoul's public bike-sharing service, "Ttareungyi." The breach, suspected to have occurred around A...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...