How incidents are spread over time and across countries. The numbers count incidents named in public roundups and in this site's own list, so they show what was reported, not everything that happened.
Select any bar to see the incidents behind it. The first chart stacks the three categories. The three below show each category on its own scale, because OT incidents are far fewer than IT incidents. † marks a provisional month: the monthly roundups for it are not all published yet, so its count is likely to rise.
ITOTCrypto
Select a bar to see the incidents behind it.
| Month | Counted in the chart | Named in the list |
|---|---|---|
| May 2026 | 29 | 4 |
| June 2026 | 40 | 13 |
| July 2026 | 30 | 28 |
| August 2026 | 50 | 26 |
| September 2026† | 55 | 5 |
| October 2026† | 2 | 2 |
Crypto roundups name only the larger hacks, so the chart uses the monthly totals counted by DeFiLlama and PeckShield wherever they are higher than the named incidents.
An incident that involves several countries is counted once for each. The country is where the affected organizations or users are, not where the attackers are. 64 IT or OT incidents with no single country or none stated are not in this chart. Crypto is not shown here because its sources rarely give a country.
ITOT
Ransomware groups post the names of victims on their leak sites. These counts come from one tracker, so they are comparable from month to month, but they are claims by criminals and many are never confirmed. They are shown separately and are not part of the incident counts above.
| Month | Victims | Top five countries |
|---|---|---|
| May 2026 | 646 | United States 254, United Kingdom 36, Canada 31, Germany 29, Spain 21 |
| June 2026 | 707 | United States 234, Germany 38, Italy 30, Canada 29, India 28 |
| July 2026 | 811 | United States 330, Germany 48, Canada 36, United Kingdom 33, France 27 |
| August 2026 | 964 | United States 417, Italy 48, Germany 45, Canada 37, United Kingdom 32 |
| September 2026 | 789 | United States 321, Canada 30, India 27, Germany 25, Spain 24 |
| Date | Category | Country | Incident | Type | Source |
|---|---|---|---|---|---|
| May 1 2026 | IT | United Kingdom | Canonical websites | DDoS | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 2 2026 | IT | Not stated | Trellix | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 3 2026 | IT | United States | Central Medical Services of Westrock | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 4 2026 | IT | United States | DigiCert (social engineering) | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 4 2026 | IT | Hungary | Mediaworks | Ransomware | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 5 2026 | IT | Taiwan | Taiwan High Speed Rail Corporation | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 5 2026 | IT | United States | Vimeo | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 6 2026 | IT | Not stated | DAEMON Tools (Disc Soft) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 7 2026 | IT | United States | Canvas learning platform breached and school logins defaced | Ransomware & extortion | Cyber Feed |
| May 8 2026 | IT | Armenia | NVIDIA GeForce NOW partner GFN.am | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 8 2026 | IT | Spain | Zara (Inditex) | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 9 2026 | IT | Not stated | Hugging Face users (malicious repository) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 11 2026 | IT | Czechia | Skoda Auto | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 12 2026 | IT | Taiwan | Foxconn | Ransomware | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 13 2026 | IT | South Korea | Unnamed South Korean electronics manufacturer | Espionage | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 14 2026 | IT | United States | OpenAI (TanStack supply-chain compromise) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 14 2026 | OT | Not stated | Researchers: Sandworm escalates inside industrial networks it has already entered | State-linked activity | Cyber Feed |
| May 2026 | IT | United States | Accretech America | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 15 2026 | IT | United States | American Lending Center | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 2026 | IT | Australia | Australian College of Business Intelligence | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Spain | Ayuntamiento de Valdemoro | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Thailand | Bangkok Metropolitan Administration | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Australia | Bluize | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Japan | CKC Network | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Taiwan | CSB Energy Technology | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Portugal | Camara de Serpa | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | United States | Carnival discloses social-engineering breach affecting about 6 million customers | Data breach | Cyber Feed |
| May 2026 | IT | Japan | Chuoh Pack Industry | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | United States | Cushman & Wakefield | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | United States | Delano Public Schools | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | United States | DentaQuest breach exposes health data of 15 million people | Data breach | Cyber Feed |
| May 2026 | IT | Senegal | Direction Generale de la Comptabilite Publique et du Tresor | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | United States | Egnyte | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Malaysia | Elken | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Germany | GTF Freese | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Japan | Gakusan | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Croatia | Grad Jastrebarsko | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Netherlands | Instituut voor de Nederlandse Taal | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Australia | Kennedy McLaughlin & Associates | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Japan | Koa Glass | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Spain | Mediapost | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Australia | Menzies Group | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Turkey | Mopas Online Supermarket | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Thailand | NaRaYa | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Spain | Notin.es | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Japan | Oriental Diamond | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Germany | Schulte-Lindhorst | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Australia | Scope Systems | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | India | Shri Balaji Valve Components | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Colombia | Solati SAS | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 15 2026 | Crypto | Not stated | THORChain | Theft & exploit | Cointelegraph: crypto exploit losses fall 90% in May, CertiK |
| May 2026 | IT | Czechia | University of Finance and Administration | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | Italy | UnoAerre Industries | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | France | Ville d'Eyguieres | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 2026 | IT | France | Ville de Quiberon | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 15 2026 | IT | United States | West Pharmaceutical Services | Ransomware | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 17 2026 | IT | United States | New York Life Insurance Company | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 17 2026 | IT | United States | Tulane University | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 18 2026 | IT | Not stated | Grafana Labs | Ransomware | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 18 2026 | IT | United States | NYC Health + Hospitals (via a vendor) | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 18 2026 | Crypto | Not stated | Verus Protocol bridge | Theft & exploit | Cointelegraph: crypto exploit losses fall 90% in May, CertiK |
| May 19 2026 | IT | Not stated | 7-Eleven | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 20 2026 | IT | United States | GitHub (TeamPCP supply-chain compromise) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 21 2026 | IT | United States | City of Aurora (phone scam) | Fraud | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 22 2026 | IT | Not stated | Cardinal Services Inc. | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 22 2026 | IT | United States | Trump Mobile | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 23 2026 | IT | Not stated | Laravel language packages | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 25 2026 | IT | Not stated | Docketwise | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 25 2026 | IT | Not stated | GitHub repositories (Megalodon campaign) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 25 2026 | IT | South Africa | SITA (hacktivist claims) | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 25 2026 | IT | Spain | Universitat de Valencia | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 26 2026 | IT | United States | Charter Communications | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 26 2026 | IT | United States | The Oncology Institute (third-party attack) | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 28 2026 | IT | United States | Weil, Gotshal & Manges | Ransomware | Comparitech: ransomware roundup, May 2026 |
| May 29 2026 | IT | United States | Plaza Home Mortgage | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 30 2026 | Crypto | Not stated | Alephium Bridge | Theft & exploit | Cointelegraph: crypto exploit losses fall 90% in May, CertiK |
| May 30 2026 | IT | India | CBSE revaluation portal | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, May 2026 |
| May 30 2026 | Crypto | Not stated | Gravity Bridge | Theft & exploit | Cointelegraph: crypto exploit losses fall 90% in May, CertiK |
| June 1 2026 | IT | United States, Israel, Turkey | Organisations hit by a destructive wiper attack | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 2 2026 | IT | Russia | Russian government and public-sector officials (alleged espionage) | Espionage | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 4 2026 | IT | Not stated | Cisco SD-WAN zero-day gives root access, the seventh exploited SD-WAN flaw this year | Exploited vulnerability | Cyber Feed |
| June 4 2026 | IT | Not stated | Developers using compromised npm packages (IronWorm) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 4 2026 | IT | Italy | World Food Programme | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 8 2026 | IT | Not stated | Organisations using vulnerable VPN appliances (Qilin zero-day) | Exploited vulnerability | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 8 2026 | IT | Hong Kong | SoFi Hong Kong (third-party breach) | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 9 2026 | Crypto | Not stated | Humanity Protocol | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 9 2026 | IT | United States | ServiceNow customers | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 11 2026 | OT | United States | Iran-linked Handala claims a California water utility hack, and the utility finds no sign of control-system access | State-linked activity | Cyber Feed |
| June 11 2026 | IT | Denmark | Novo Nordisk | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 11 2026 | IT | Not stated | Organisations using Oracle PeopleSoft (zero-day data theft) | Exploited vulnerability | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 11 2026 | IT | France | Tchap messaging platform | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 11 2026 | IT | United Kingdom | University of Nottingham | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 14 2026 | IT | Iran | Four Iranian banks | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 2026 | Crypto | Not stated | Aztec Bridge | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | Aztec Connect | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 15 2026 | IT | France | Council of Europe | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 15 2026 | IT | United States | Eastman Kodak | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 2026 | Crypto | Not stated | LABUBU/OLPC | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | IT | Australia | Mackay Sugar | Ransomware | Comparitech: ransomware roundup, H1 2026 mid-year report |
| June 15 2026 | IT | United States | Maine Attorney General breach portal (fake reports) | Fraud | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 2026 | IT | Taiwan | Nidec Chaun-Choung Technology | Ransomware | Comparitech: ransomware roundup, H1 2026 mid-year report |
| June 15 2026 | IT | Not stated | Organisations running vulnerable REDCap servers | Exploited vulnerability | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 2026 | Crypto | Not stated | Polymarket users | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | Raydium | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | SecondFi | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | Secret Network | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | Syscoin Bridge | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | TESSERA | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | Taiko Bridge | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | Crypto | Not stated | Token of Power | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 2026 | OT | Israel | ZionSiphon malware targets Israeli water treatment and desalination systems | Malware | Cyber Feed |
| June 16 2026 | IT | United States | iRhythm Technologies | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 18 2026 | IT | United States | Amazon One Medical | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 18 2026 | IT | Not stated | Klue and Salesforce customers (OAuth-linked theft) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 18 2026 | IT | Japan | Nintendo (applicant data via a subsidiary) | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 18 2026 | IT | United States | Texas Parks and Wildlife Department | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 18 2026 | IT | Not stated | WordPress sites using ShapedPlugin plugins | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 19 2026 | IT | United States | GrayRobinson | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 19 2026 | IT | Canada | Mount Royal University (website and phone outage) | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | Not stated | Alcott HR | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | Belgium | Belgian State Security Service | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | Brazil | Defesa Civil alert system | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | Canada | London Hydro | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | United States | One Medical Seniors | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | United States | Optimum First Mortgage | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | Not stated | Organisations using Fortinet FortiGate (credential theft) | Exploited vulnerability | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | India | Tata Electronics | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 22 2026 | IT | United States | XSOLIS | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 23 2026 | IT | India | Bajaj Auto | Ransomware | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 23 2026 | Crypto | Not stated | JaredFromSubway.eth bot | Theft & exploit | The Block: crypto hack theft falls 7% in June, PeckShield |
| June 23 2026 | IT | United States | LastPass (via Klue) | Supply chain | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 23 2026 | IT | Iran | Three Iranian lenders (card services disrupted) | Cyberattack | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| June 25 2026 | IT | United States | Alera Group | Data breach | CM Alliance: biggest cyber attacks, data breaches and ransomware attacks, June 2026 |
| July 1 2026 | Crypto | Not stated | Edel Finance | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 1 2026 | IT | United States | Homeland Security Information Network (US DHS) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 1 2026 | IT | Spain | Indra Group | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 1 2026 | IT | Not stated | MCBS | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 2 2026 | IT | Not stated | Medtronic | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 2 2026 | IT | Not stated | Python developers (compromised packages) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 3 2026 | Crypto | Not stated | Hinkal Protocol | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 6 2026 | IT | United States | Blank Rome | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 6 2026 | IT | United States | Masimo | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 6 2026 | IT | Portugal | Metro Mondego | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 6 2026 | IT | Singapore | Singapore Land Authority | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 6 2026 | Crypto | Not stated | Summer Finance | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 7 2026 | Crypto | Not stated | Bonk Inu | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 8 2026 | IT | Not stated | Accenture | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 8 2026 | IT | United States | AssuranceAmerica | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 8 2026 | IT | Japan | KDDI | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 8 2026 | IT | Canada | Mount Royal University | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 10 2026 | IT | Netherlands | Odido | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 11 2026 | Crypto | Not stated | Bonzo Lend | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 13 2026 | IT | Not stated | Developers using the Jscrambler npm package | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 13 2026 | IT | Germany | Lidl (service-provider hack) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 13 2026 | Crypto | Not stated | Lumi Finance | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 13 2026 | IT | Japan | Nihon Kotsu | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 14 2026 | IT | Not stated | SharePoint Server flaws exploited as zero-days and within days of patching | Exploited vulnerability | Cyber Feed |
| July 2026 | IT | Australia | Asset Flooring Group Australia | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 15 2026 | Crypto | Not stated | Cascade xyz | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 2026 | IT | United States | Cedar Crest College | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 15 2026 | IT | Not stated | Developers using AsyncAPI npm packages | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 2026 | IT | Colombia | Ecopetrol | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Bulgaria | Eurohold Bulgaria (Euroins) | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Finland | Gallant Finland | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | United States | Greene County | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | France | Groupe Fenwick | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Germany | Hahn Airport | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Hungary | Herbahaz | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | United States | Kenaitze Indian Tribe | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Romania | National Administration of Penitentiaries | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Romania | National Agency for Cadastre and Land Registration (ANCPI) | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Argentina | Oldelval | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 15 2026 | Crypto | Not stated | Ostium Public OLP Vault | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 2026 | IT | Switzerland | PB Fiduciaire | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Australia | Pennant Hills Golf Club | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | South Africa | Rectron | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Australia | Royal Foods Australia | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Not stated | ShinyHunters pay-or-leak campaigns reach telecom and communications firms | Ransomware & extortion | Cyber Feed |
| July 2026 | IT | France | Spedidam | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Switzerland | Stiftung Wagerenhof | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Netherlands | Thialf | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Australia | Townsville Christian College | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Spain | Universidad de Alicante | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Portugal | Universidade de Aveiro | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Romania | Vasile Goldis Western University of Arad | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | France | Ville de Drancy | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 2026 | IT | Germany | rehaVital Gesundheitsservice | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 16 2026 | Crypto | Not stated | DeFi Tuna | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 16 2026 | IT | United States | Fairlife (Coca-Cola) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 17 2026 | IT | Not stated | Ernst & Young (third-party platform) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 20 2026 | Crypto | Not stated | Allbridge | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 20 2026 | IT | Not stated | Hugging Face | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 21 2026 | IT | Not stated | Craneware | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 21 2026 | Crypto | Not stated | Flashtrade | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 21 2026 | IT | Switzerland | Stadler Rail refuses a 10 million franc demand after a supplier-platform breach | Ransomware & extortion | Cyber Feed |
| July 21 2026 | Crypto | Not stated | Wanchain | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 21 2026 | IT | Australia | William Buck | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 22 2026 | Crypto | Not stated | 42DAO | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 22 2026 | Crypto | Not stated | AFX Bridge | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 22 2026 | IT | United States | Chick-fil-A (credential stuffing) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 22 2026 | IT | South Korea | Ministry of Foreign Affairs and diplomatic academy | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 22 2026 | IT | Not stated | Paidwork | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 22 2026 | OT | United States | US agencies warn that Iran-linked actors are disrupting industrial controllers, then widen the warning | State-linked activity | Cyber Feed |
| July 22 2026 | IT | United States | Upbound Group (Acima) | Fraud | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 23 2026 | IT | Not stated | Notepad++ users (malicious plugins) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 23 2026 | Crypto | Not stated | Solido Cash | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 23 2026 | IT | United States | Unlimited Technology Systems | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 23 2026 | Crypto | Not stated | Verus-Ethereum Bridge | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 24 2026 | Crypto | Not stated | Lien Finance | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 24 2026 | IT | United States | OnTrac | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 24 2026 | IT | Not stated | Organisations using PTC Windchill and FlexPLM (Clop data theft) | Exploited vulnerability | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 24 2026 | IT | Australia | Origin Energy | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 24 2026 | Crypto | Not stated | Triple-A | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 25 2026 | Crypto | Not stated | Bankrbot | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 25 2026 | Crypto | Not stated | Projekt | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 26 2026 | IT | United States | AnMed | Ransomware | Comparitech: ransomware roundup, July 2026 |
| July 26 2026 | Crypto | Not stated | ChainConnect | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 26 2026 | OT | United States | Coordinated attack disrupts more than 30 Minnesota water systems | Process manipulation | Cyber Feed |
| July 26 2026 | Crypto | Not stated | Garden Finance | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 26 2026 | Crypto | Not stated | WEMIX | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 27 2026 | IT | India | Bank of Baroda | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 27 2026 | OT | United States | Clayton County water system (Georgia), outage linked to cyber activity | OT disruption | Rankiteo: Columbus Water Works cyber attack and US water systems, 2026 |
| July 27 2026 | OT | United States | Columbus Water Works (Georgia), switched to manual control | OT disruption | Rankiteo: Columbus Water Works cyber attack and US water systems, 2026 |
| July 28 2026 | Crypto | Not stated | Crypto DAO | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 28 2026 | Crypto | Not stated | Lula | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 29 2026 | IT | United Kingdom | Department for Education | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 29 2026 | IT | Not stated | SplitVPN | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, July 2026 |
| July 30 2026 | Crypto | Not stated | Set Control | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 30 2026 | Crypto | Not stated | Swan Treasury | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in July 2026 |
| July 31 2026 | Crypto | Not stated | Coldcard hardware-wallet flaw lets attackers guess seed phrases, with losses above $115 million | Theft & exploit | Cyber Feed |
| August 2 2026 | IT | United States | CareCloud | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 2 2026 | Crypto | Not stated | LOOPSDAO | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 2 2026 | Crypto | Not stated | MOKE Token | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 2 2026 | IT | United Kingdom | UK Government Investments | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 3 2026 | IT | United States | Allstate (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 3 2026 | IT | Hungary | Hungarian State Treasury | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 3 2026 | IT | United Kingdom | Police National Legal Database | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 3 2026 | Crypto | Not stated | RiseX | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 4 2026 | IT | United Kingdom | English National Ballet and other cultural organisations | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 4 2026 | IT | United States | Madera Community Hospital | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 5 2026 | IT | United States | Brown Health Medical Group | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 5 2026 | IT | Not stated | CTS Journey Holdings | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 5 2026 | IT | United States | Everside Health | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 5 2026 | IT | Not stated | Snowflake customer organisations (cloud account compromise) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 5 2026 | OT | United States | Two New Jersey municipal water systems lose remote control of PLCs | OT disruption | Rankiteo: Columbus Water Works cyber attack and US water systems, 2026 |
| August 6 2026 | IT | Switzerland | Federal Office of IT and Telecommunication (SharePoint) | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 6 2026 | IT | Brazil | Health Surveillance Information System (SISVISA) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 6 2026 | IT | United States | Moody Bible Institute of Chicago | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 6 2026 | IT | United States | North Carolina Ports | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 6 2026 | IT | United States | Point72, Citadel and Millennium (voice phishing) | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 6 2026 | Crypto | Not stated | RRWallet | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 6 2026 | Crypto | Not stated | Unistreets | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 7 2026 | IT | Netherlands | Ace & Tate (logistics partner) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 7 2026 | IT | United Kingdom | Canterbury Cathedral | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 7 2026 | IT | South Africa | Fidelity Services Group | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 7 2026 | IT | United States | Framework (upstream Metabase breach) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 7 2026 | IT | United States | Levi Strauss & Co. | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 7 2026 | OT | Not stated | Two Texas-bound oil tankers hit by cyberattacks, propulsion-related system reportedly accessed | Disruption | Cyber Feed |
| August 8 2026 | Crypto | Not stated | Atomic Green | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 8 2026 | IT | United States | City of Suisun City | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 8 2026 | IT | Not stated | TrueConf servers (trojanised installers) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 9 2026 | Crypto | Not stated | Coinsbuy | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 9 2026 | Crypto | Not stated | Coreum Bridge | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 10 2026 | IT | United States | Brazosport College | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 10 2026 | OT | Poland | Small combined heat-and-power plant | OT disruption | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 10 2026 | Crypto | Not stated | USM | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 11 2026 | IT | Not stated | CEVA Logistics and customers (European warehouses) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 11 2026 | Crypto | Not stated | Harmony Protocol | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 11 2026 | IT | United Kingdom | Shrewsbury and Telford Hospital Charity (Beacon CRM) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 12 2026 | IT | United States | Kovack Financial | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 12 2026 | IT | Not stated | Organisations hit by the City-Forum campaign (Salesforce, ServiceNow portals) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 12 2026 | IT | United States | Uber Freight (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 12 2026 | IT | United Kingdom | Yorkshire's Brain Tumour Charity | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 13 2026 | IT | Taiwan | Justice Ministry and nuclear safety agency | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 13 2026 | IT | Poland | MyDr healthcare system | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 13 2026 | Crypto | Not stated | Private wallet drained of about $25.6 million | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 13 2026 | IT | Not stated | Trezor customers (via ShipMonk) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 14 2026 | IT | Not stated | Beacon CRM and more than 1,000 charities | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 14 2026 | IT | United States | Cedar County Memorial Hospital | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 14 2026 | IT | France | French individual and professional taxpayers | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 14 2026 | IT | United States | RingCentral | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 2026 | IT | Japan | Akatake Engineering | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Italy | Alto Calore Servizi (water utility) | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Japan | Ambition DX Holdings | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Austria | Austrian Chamber of Labour | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Spain | Ayuntamiento de Velilla San Antonio | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Germany | Brandenburg Memorials Foundation | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Japan | CEC Co. | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | South Africa | Cartrack | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | City of Circleville | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | City of Coweta | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | City of Fort Scott | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | City of Mitchell | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | City of Norcross | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Canada | Commission de la construction du Quebec | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Guatemala | Constitutional Court | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | South Africa | DC Partner | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | India | Dodo Payments | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | OT | United States | Foreign actors alter settings at two small Colorado water utilities | Process manipulation | Cyber Feed |
| August 15 2026 | Crypto | Not stated | FoxMarket | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 2026 | IT | France | GEB SAS | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Spain | Government of Castilla-La Mancha | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Canada | Health Sciences Centre Winnipeg | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | India | HostDzire | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Guatemala | Instituto Nacional de Cancerologia | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Colombia | Ministry of Justice and Law | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Greece | Municipality of Sithonia | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Czechia | Partners HoldCo | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Taiwan | PharmaEssentia | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | Sawyer Savings Bank | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Not stated | Security tools turned into credential stealers in a supply-chain campaign | Supply chain | Cyber Feed |
| August 15 2026 | IT | South Korea | Sogang University | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 2026 | IT | Romania | TechVentures Bank | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | The AME Group | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | Town of Andover (schools disrupted) | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | Town of Lincoln | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Turkey | Usak University | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | Belgium | WEBA | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 2026 | IT | United States | Windrose Health Network | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 17 2026 | IT | United States | General Electric (claimed data theft) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 17 2026 | IT | Not stated | Nine large firms named in a claimed Azure-account theft | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 17 2026 | IT | Netherlands | Philips (claimed data theft) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 17 2026 | IT | Not stated | SafePal customers (plugin vulnerability) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 17 2026 | IT | United Kingdom | Shell (claimed data theft) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 18 2026 | IT | Israel | Bits of Gold (third-party breach) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 18 2026 | IT | Australia | Brighton East Dental Clinic (claimed data theft) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 18 2026 | IT | United States | Heights Finance | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 18 2026 | Crypto | Not stated | Maya Protocol | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 18 2026 | IT | United States | University of Texas at San Antonio | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 19 2026 | Crypto | Not stated | Allbridge (second exploit) | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 19 2026 | IT | United States | More than 500 US critical-infrastructure organisations | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 19 2026 | IT | United States | Paylogix | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 19 2026 | IT | Latvia | Road Traffic Safety Directorate (CSDD) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 19 2026 | IT | Japan | Sakura Internet | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 20 2026 | IT | Not stated | Alation | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 20 2026 | IT | Not stated | Alphanumeric Systems (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 20 2026 | IT | Uzbekistan, Turkmenistan, Kyrgyzstan, Tajikistan, Georgia, Kazakhstan | Government bodies in Central Asia and Georgia | Espionage | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 21 2026 | IT | United States | Apollo Global Management | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 21 2026 | IT | Canada | SickKids hospital (third-party software flaw) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 21 2026 | Crypto | Not stated | The Sandbox | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 21 2026 | IT | United States | Turner Construction | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 21 2026 | IT | United States | US Bank (claimed data theft) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 22 2026 | Crypto | Not stated | TAC | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 23 2026 | Crypto | Not stated | Arrakis V1 | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 23 2026 | OT | United Kingdom | Small-scale power generator | OT disruption | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 23 2026 | Crypto | Not stated | Term Finance Vaults | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 23 2026 | Crypto | Not stated | warp.green | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 24 2026 | IT | United States | Nutex Health | Ransomware | Comparitech: ransomware roundup, August 2026 |
| August 24 2026 | IT | United States | Surgeons Choice Medical Center | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 25 2026 | Crypto | Not stated | CometDEX | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 25 2026 | Crypto | Not stated | Enjin | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 25 2026 | IT | Not stated | Organisations using Zimbra servers (270+ compromised) | Exploited vulnerability | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 26 2026 | IT | United States | Baylor Genetics | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 26 2026 | IT | United States | Carhartt (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 26 2026 | Crypto | Not stated | FH Token | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 27 2026 | IT | United States | Boston Scientific (network outage) | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 27 2026 | IT | United States | Bureau of Alcohol, Tobacco, Firearms and Explosives (Qilin) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 27 2026 | IT | United Kingdom | Manchester Airports Group | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 27 2026 | Crypto | Not stated | Moonwell | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 28 2026 | Crypto | Not stated | Avici | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| August 28 2026 | IT | United States | McKesson (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, August 2026 |
| August 30 2026 | Crypto | Not stated | Tectonic exploit forces the Cronos chain to halt and roll back | Theft & exploit | Cyber Feed |
| August 31 2026 | Crypto | Not stated | Aquifer | Theft & exploit | Nominis: monthly report, crypto exploits and attacks in August 2026 |
| September 1 2026 | IT | Not stated | Aesto Health and its provider clients | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 1 2026 | IT | Not stated | Novocure | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 2 2026 | IT | Not stated | Dropbox users (via a Lenovo email flaw) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 5 2026 | IT | Germany | Berlin state government (two departments) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 6 2026 | IT | United States | Bimbo Bakeries USA (Oracle EBS zero-day) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 6 2026 | Crypto | Not stated | Liquid Network drained of about $319 million in bitcoin, and 85% is returned | Theft & exploit | Cyber Feed |
| September 7 2026 | IT | United States | Conde Nast | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 7 2026 | IT | Not stated | Mathspace | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 8 2026 | IT | Vietnam | APIS passenger and crew database | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 8 2026 | IT | United States | Everett City Hall (Massachusetts) | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 8 2026 | IT | United States | Florida driver and vehicle database (FLHSMV) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 8 2026 | IT | United States | Springfield Public Schools (Massachusetts) | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 8 2026 | IT | Germany | Stadtwerke Landsberg (municipal utility) | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 9 2026 | IT | United States | Veradigm | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 10 2026 | IT | United States | AdaptHealth | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 10 2026 | IT | United States | Greenberg Traurig | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 10 2026 | IT | Not stated | IDScan | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 10 2026 | IT | Not stated | Trezor, BitBox and CoinTracking (via Brevo) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 10 2026 | IT | South Korea | Weverse (HYBE) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 12 2026 | IT | United Kingdom | Revolut (fraudulent government requests) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 14 2026 | IT | Japan | Digital Agency, Government of Japan | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 2026 | Crypto | Not stated | DCENT | Theft & exploit | Cointelegraph: crypto hacks total $766M in September, PeckShield |
| September 2026 | Crypto | Not stated | Duelbits | Theft & exploit | Cointelegraph: crypto hacks total $766M in September, PeckShield |
| September 15 2026 | IT | Not stated | Organisations using VMware vCenter Server | Exploited vulnerability | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 2026 | Crypto | Not stated | Safe Wallet | Theft & exploit | Cointelegraph: crypto hacks total $766M in September, PeckShield |
| September 16 2026 | IT | United States | CenterPoint Energy (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 16 2026 | IT | Spain | Data Protection Agency (AEPD) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 16 2026 | OT | Not stated | Texas-bound oil tanker (suspected network compromise) | OT disruption | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 17 2026 | IT | Russia | Central Election Commission (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 18 2026 | IT | Not stated | Gyazo | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 21 2026 | IT | Germany | Ludwig Maximilian University of Munich | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 21 2026 | IT | Belgium | Royal Belgian Table Tennis Federation (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 22 2026 | IT | United States | BigCommerce merchants (third-party app) | Supply chain | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 22 2026 | IT | United States | FBI (claimed) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 24 2026 | IT | United States | Astrana | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 24 2026 | IT | Australia | Australian government website | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 24 2026 | Crypto | Not stated | Bitget loses about $388 million from hot wallets, and its CEO cites third-party security software | Theft & exploit | Cyber Feed |
| September 25 2026 | IT | United Kingdom | Dyfed-Powys Police | Cyberattack | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 28 2026 | IT | Japan | Keio | Ransomware | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 29 2026 | IT | United Kingdom | East Suffolk and North Essex NHS Foundation Trust | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 30 2026 | IT | Singapore | Bee Cheng Hiang | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 30 2026 | IT | United States | Defense Manpower Data Center (US Department of Defense) | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| September 30 2026 | IT | Japan | Times Car Rental | Data breach | CM Alliance: major cyber attacks, data breaches and ransomware attacks, September 2026 |
| October 1 2026 | IT | United States | Arizona state court system | Data breach | Privacy Guides: data breach roundup, Sep 25 to Oct 1, 2026 |
| October 1 2026 | IT | Poland | Fakturownia | Data breach | Privacy Guides: data breach roundup, Sep 25 to Oct 1, 2026 |
| October 5 2026 | IT | Japan | Burger King Japan (11 million app members) | Data breach | Privacy Guides: data breach roundup, Oct 16 to 22, 2026 |
| October 7 2026 | IT | Japan | Ransomware takes down part of Japan's IDCF Cloud, affecting 495 organizations | Ransomware & extortion | Cyber Feed |
| October 8 2026 | IT | United Kingdom | Canonical's websites hit by a second DDoS attack this year | Disruption | Cyber Feed |
| October 9 2026 | Crypto | Not stated | Tampered Ledger wallets sold through a reseller drain an estimated $90 million to $93 million | Theft & exploit | Cyber Feed |
| October 12 2026 | IT | United States, Netherlands | Ahold Delhaize says a cyberattack disrupted services in Europe and the US | Disruption | Cyber Feed |
| October 12 2026 | OT | France | Hackers force defrost cycles in refrigeration systems at hundreds of French supermarkets | Process manipulation | Cyber Feed |
| October 14 2026 | IT | Not stated | Palo Alto Networks patches an exploited PAN-OS zero-day | Exploited vulnerability | Cyber Feed |
| October 2026 | IT | United States | Educational Testing Service (5.7 million students) | Data breach | Privacy Guides: data breach roundup, Oct 16 to 22, 2026 |
| October 2026 | IT | Japan | Nikkei | Data breach | Privacy Guides: data breach roundup, Oct 16 to 22, 2026 |
| October 2026 | IT | Not stated | Zeabur | Data breach | Privacy Guides: data breach roundup, Oct 16 to 22, 2026 |
| October 16 2026 | IT | Qatar | Al Jazeera devices infected with spyware delivered through targeted ads | Spyware | Cyber Feed |
| October 16 2026 | IT | Not stated | China-aligned group used an AI pentest tool against ConnectWise Cloud Backup and more than 2,250 Microsoft 365 tenants | Supply chain | Cyber Feed |
| October 16 2026 | IT | Not stated | China-linked group exploited a BeyondTrust Remote Support zero-day | Exploited vulnerability | Cyber Feed |
| October 19 2026 | IT | Japan | Capcom (CAPCOM ID accounts) | Data breach | Privacy Guides: data breach roundup, Oct 16 to 22, 2026 |
| October 21 2026 | IT | Not stated | GitLab fixes a maximum-severity remote code execution flaw reaching back to version 7.0 | Exploited vulnerability | Cyber Feed |
| October 21 2026 | IT | Not stated | LiteLLM release pipeline hijacked to publish a credential-stealing version, the second time this year | Supply chain | Cyber Feed |
| October 21 2026 | IT | Not stated | PHP ships emergency fixes for two critical 'PHP2Shell' flaws after attackers start probing days earlier | Exploited vulnerability | Cyber Feed |
| October 23 2026 | Crypto | Not stated | October bridge and chain exploits are small one by one, and a $718 million monthly figure is unverified | Theft & exploit | Cyber Feed |