Compromised third-party customer support provider exposed sensitive user information @ Discord, Inc.

In October 2025, Discord disclosed a significant data breach stemming from a compromise of one of its third-party customer service providers. The unauthorized access, which occurred around September 20, 2025, did not directly affect Discord's internal...

Unauthorised access to confidential information @ EncompassCare

In January 2025, EncompassCare reported a data breach to the Attorney General of Massachusetts, revealing that unauthorized access to their systems had compromised sensitive consumer information. The breach, which occurred on September 17, 2024, invol...

Sensitive patient information compromised @ Hapy Bear Surgery Center

In January 2025, Hapy Bear Surgery Center reached a settlement in a class action lawsuit stemming from a data breach that occurred in 2023. The breach, discovered around December 27, 2023, and announced in April 2024, compromised the personal informat...

Network shutdown for several weeks due to potential hacker @ Natomas Unified School District

In late June 2024, the Natomas Unified School District experienced a cybersecurity incident that led to the shutdown of its network system, Wi-Fi, VPN services, and phone lines after suspicious activity was detected. The district's IT department, alon...

Unauthorised third party accessed some personal information @ OLA Consulting Engineers, PC.

Edelson Lechtzin LLP, a national class action law firm, is investigating a potential data privacy violation by OLA Consulting Engineers, PC. The investigation stems from suspicious activity detected on one of OLA's servers around November 16, 2023. OL...

Unauthorised access to consumers’ sensitive information @ First Analysis and First Analysis Corporation

In November 2024, First Analysis Corporation, an investment and advisory firm, reported a data breach to the Attorney General of Montana following the discovery of unauthorized access to its computer network. The breach, which occurred between August ...

Unauthorised access to consumers’ sensitive information @ Pediatric Home Respiratory Services, LLC and Pediatric Home Service

In January 2025, Pediatric Home Respiratory Services, LLC, doing business as Pediatric Home Service (PHS), reported a data breach to the Attorney General of Texas. The incident involved unauthorized access to sensitive consumer information entrusted t...

Lost over $520,000 in phishing scam @ Town of Webster

In early November 2025, the town of Webster fell victim to a sophisticated phishing scam that resulted in a loss of over $520,000. Scammers impersonated staff from a contractor the town regularly communicates with, successfully deceiving town personne...

Data security incident involved 4,945 individual's personal health information @ Mohawk Valley Cardiology

Mohawk Valley Cardiology in Utica has announced a data security incident that potentially compromised the personal health information of up to 4,945 patients. According to a statement released by the practice's legal representatives, The Beckage Firm,...

Data breach compromised sensitive patient information @ Upstream Rehabilitation Inc.

In January 2025, Upstream Rehabilitation reached a settlement agreement of over $4.3 million to resolve a class action lawsuit stemming from a data breach that occurred in 2023. The breach, which took place between January 24-31 and February 3-9, 2023...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...