AI project hit by malware @ LiteLLM

In March 2026, the open-source AI project LiteLLM, a Y Combinator graduate that provides developers easy access to numerous AI models, was hit by malware. The malware, discovered by FutureSearch research scientist Callum McMahon, infiltrated LiteLLM t...

Nearly 300 employees' personal information exposed @ HackerOne and Navia Benefit Solutions, Inc.

In March 2026, HackerOne, a cybersecurity firm specializing in bug bounty programs, disclosed that a data breach at Navia Benefit Solutions, a third-party benefits administrator, had compromised the personal information of 287 of its employees. The br...

Cybersecurity incident impacted 16,000 individuals' personal information @ Retail Merchandising Services, Inc.

In March 2026, Retail Merchandising Services, Inc. (RMS), a visual merchandising and display company, reported a data breach affecting over 16,000 individuals. The breach involved unauthorized access to the company's email environment, which was first...

Security breach exposed employee and partner data @ Mazda Motor Corporation

In March 2026, Mazda Motor Corporation disclosed a security incident that resulted in the exposure of personal information belonging to its employees and business partners. The breach, discovered in mid-December 2025, stemmed from unauthorized access ...

Extortion group claimed to have stolen roughly 3GB of data @ AstraZeneca

The LAPSUS$ hacking group has claimed responsibility for a data breach at AstraZeneca, a major pharmaceutical company. The group alleges to have stolen approximately 3GB of internal data, which they are offering for sale on the dark web rather than re...

Roughly 100GB of customer analytics data compromised @ Crunchyroll

In March 2026, Crunchyroll, a popular anime streaming service owned by Sony, was reportedly the target of a cyberattack. The breach allegedly occurred on March 12, 2026, when a threat actor gained access to Crunchyroll's systems through a compromised ...

Cybersecurity incident impacted personal information @ Nephrology Associates Medical Group

In March 2026, Nephrology Associates Medical Group (NAMG), a kidney care provider in Southern California, announced a cybersecurity incident. The breach involved an unauthorized individual gaining access to NAMG's network, potentially compromising the...

Data breach involved sensitive personal information and protected health information @ US Mortgage Corporation

In March 2026, US Mortgage Corporation (USMC), a New York-based home mortgage company, announced a data breach that occurred on May 14, 2025. The incident involved unauthorized access to USMC's network, potentially compromising the personal informatio...

Data breach involved sensitive personal information and protected health information @ Pinnacle Holdings, Ltd

In March 2026, Pinnacle Holdings, LTD, a healthcare consulting firm based in Colorado, announced a data breach that compromised the sensitive personal and protected health information of nearly 20,000 individuals. The breach occurred in November 2024,...

Personal information of individuals data breached @ Banner Capital Bank

In March 2026, Banner Capital Bank, a commercial bank based in Harrisburg, Nebraska, experienced a data breach impacting individuals' personal information. The breach was discovered on February 20, 2026, and an investigation revealed that a hacker had...

Lead by example in cyber

Premier risk-driven analysis

All our analysis is overseen some of the leading members of the risk community and includes lessons learnt, controls environment and root cause analysis. Learn more...

High-quality structured cyber dataset

Key attributes of each case - such as threat actor, costs incurred, failed controls etc. - are captured through the Global Cyber Event Taxonomy Learn more...

Consulting & training services

Our case studies have provided us with unique insights into the challenges faced and strategies implemented by organisations countering cyber security threats. Learn more...