Who got hacked, and how not to be next.

Every notable company breach of the last two months, with what happened, the root cause, and the specific controls that would have stopped it.

Scroll
01 · Patterns

Why it keeps happening. Five patterns behind almost every breach.

    02 · Numbers

    How they got in. And when it came out.

    Click a bar to filter the incident list by that attack type.

    Entry vector

    Incidents per week

    By incident or disclosure date
    03 · Index

    Incidents. Open any row for root cause and prevention.

    /

    04 · Campaigns

    Hitting many at once. Operations with dozens of victims.

    05 · Prevention

    If you only do ten things. Roughly in order of payoff.

      06 · Claims

      Unverified leak-site claims.

      Organisations listed by ransomware groups. Gangs exaggerate and recycle data, so treat these as claims until the company confirms.

      ListedOrganisationGroup
      Open source

      Found a breach we missed?

      The whole index is one Python file of data. Fork it, add an incident, run python3 build.py, and open a pull request.