Every public disclosure, dated and sourced.

Incidents worldwide, by country.

72 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

1. United States21 Oct 2026Critical infrastructure organizations worldwideHow they got in: stolen or reused passwords.BleepingComputer
2. United States21 Oct 2026Michael J. Berger and Co., CPA LLPThe source does not say how they got in.Vermont Attorney General
3. United States20 Oct 2026CSXThe source does not say how they got in.Vermont Attorney General
4. United States20 Oct 2026Networking Technology, Inc.The source does not say how they got in.Vermont Attorney General
5. United States20 Oct 2026Conduent Business Services, LLCThe source does not say how they got in.HIPAA Journal
6. United States20 Oct 2026Central Ohio Primary Care PhysiciansHow they got in: stolen or reused passwords.HIPAA Journal
7. United States20 Oct 2026Educational Testing ServiceThe source does not say how they got in.The Record
8. United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
9. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
10. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
11. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
12. United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General