Every public disclosure, dated and sourced.

Incidents worldwide, by country.

73 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

1. United States20 Oct 2026Chevy Chase ClubThe source does not say how they got in.Vermont Attorney General
2. United States20 Oct 2026Paradigm Healthcare ServicesThe source does not say how they got in.SecurityWeek
3. United States19 Oct 2026Computer Task Group, IncorporatedThe source does not say how they got in.Vermont Attorney General
4. United States19 Oct 2026Citizens BankThe source does not say how they got in.California Attorney General
5. United States19 Oct 2026STS Aviation GroupThe source does not say how they got in.California Attorney General
6. United States18 Oct 2026Stitch Connect IncThe source does not say how they got in.California Attorney General
7. United States17 Oct 2026Catawba CountyThe source does not say how they got in.Vermont Attorney General
8. United States16 Oct 2026CDEHow they got in: stolen or reused passwords.California Attorney General
9. United States16 Oct 2026A telecom managed service providerHow they got in: a known flaw in software the victim ran.Security Affairs
10. United States16 Oct 2026Johnson Investment CounselThe source does not say how they got in.Vermont Attorney General
11. United States16 Oct 2026BBC International LLCThe source does not say how they got in.Vermont Attorney General
12. United States16 Oct 2026Ganxxet, Inc.The source does not say how they got in.Vermont Attorney General