Every public disclosure, dated and sourced.

Incidents worldwide, by country.

78 incidents from 10 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

1. United States6 Nov 2026Family Implant and DentistryThe source does not say how they got in.Vermont Attorney General
2. United States6 Nov 2026Nephrology AssociatesThe source does not say how they got in.Vermont Attorney General
3. United States6 Nov 2026IronBridge Wealth Counsel, LLCThe source does not say how they got in.Vermont Attorney General
4. United States6 Nov 2026Insight Credit UnionThe source does not say how they got in.Vermont Attorney General
5. United States5 Nov 2026Hands On Children’s MuseumThe source does not say how they got in.Washington Attorney General
6. United States5 Nov 2026Amplifon (USA), Inc.The source does not say how they got in.Vermont Attorney General
7. United States5 Nov 2026UFP technologies,The source does not say how they got in.Vermont Attorney General
8. United States5 Nov 2026Queens Public LibraryThe source does not say how they got in.The Record
9. United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
10. United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
11. United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
12. United States4 Nov 2026Blossom HealthThe source does not say how they got in.HIPAA Journal