Incident Reports

110 cybersecurity incidents tracked

Severity
Attack Type
Sort
IDTitleDateSeverityAttack TypeThreat ActorStatus
TP-2026-0376Mastra npm Supply-Chain Compromise via easy-day-js Postinstall PayloadJun 17, 2026criticalsupply-chainUnknowndraft_ai
TP-2026-0381U.S. and French Authorities Disrupt CFAKE and SOCFAKE Deepfake ServiceJun 12, 2026highLaw Enforcement DisruptionUnknowndraft_ai
TP-2026-0380Coupang Fined Over Breach Affecting Millions of South Korean UsersJun 11, 2026highData BreachUnknowndraft_ai
TP-2026-0377AudiA6 Crypto Laundering Service DisruptionJun 10, 2026highFinancialUnknowndraft_ai
TP-2026-0379DOJ and FBI Disable Chinese Intelligence Recruitment WebsitesJun 10, 2026highLaw Enforcement DisruptionSuspected Chinese state-backed operatorsdraft_ai
TP-2026-0378Mackay Sugar Mills Halted by Cyberattack During Crushing SeasonJun 10, 2026highCyberattackUnknowndraft_ai
TP-2026-0334Dutch Police and NCSC Disrupt Asocks-Linked Botnet OperationMay 28, 2026highBotnetUnknowndraft_ai
TP-2026-0062Dutch FIOD Disrupts Sanctions-Evasion Hosting InfrastructureMay 22, 2026highLaw Enforcement DisruptionUnknowndraft_ai
TP-2026-0061Multi-Stage Linux Intrusion Pivoted from F5 BIG-IP to ConfluenceMay 22, 2026highIntrusionUnknowndraft_ai
TP-2026-0060First VPN Cybercrime Infrastructure Disrupted in Multinational TakedownMay 21, 2026highLaw Enforcement DisruptionUnknowndraft_ai
TP-2026-0335art-template npm Package Browser-Bundle Compromise, May 2026May 20, 2026mediumSupply ChainUnknowndraft_ai
TP-2026-0323Mini Shai Hulud: Compromised @antv npm Packages Enable CI/CD Credential TheftMay 20, 2026highsupply-chainUnknowndraft_ai
TP-2026-0332Microsoft Disrupts Fox Tempest Malware-Signing-as-a-ServiceMay 19, 2026highMalware-Signing Infrastructure AbuseFox Tempestdraft_ai
TP-2026-0336CISA Contractor AWS GovCloud Key ExposureMay 18, 2026highCredential ExposureUnknowndraft_ai
TP-2026-0326GitHub Internal Repository Theft via Compromised Nx Console VS Code Extension (May 2026)May 18, 2026highsupply-chainUnknowndraft_ai
TP-2026-0335Interpol Operation Ramz MENA Cybercrime CrackdownMay 18, 2026mediumFinancialUnknowndraft_ai
TP-2026-0334Scam Disruption Week Industrial Scam CrackdownMay 18, 2026highFinancialUnknowndraft_ai
TP-2026-0333Storm-2949 Cloud-Wide Breach From Compromised IdentityMay 18, 2026highIdentity compromiseStorm-2949draft_ai
TP-2026-0337THORChain GG20 Vault Exploit and Network Halt, May 2026May 15, 2026mediumFinancialUnknowndraft_ai
TP-2026-0308FunnelKit Funnel Builder Exploitation Injecting WooCommerce Checkout Skimmers (May 2026)May 14, 2026highweb-skimmingUnknowndraft_ai
TP-2026-0336node-ipc npm Package Compromise, May 2026May 14, 2026mediumSupply ChainUnknowndraft_ai
TP-2026-0054Mistral AI Python SDK PyPI Package v2.4.6 BackdoorMay 12, 2026criticalSoftware supply-chain compromise / malicious PyPI package publicationUnknowndraft_ai
TP-2026-0316Grafana Labs GitHub Environment Breach and Codebase Theft, May 2026May 11, 2026highcredential theftUnknowndraft_ai
TP-2026-0054TanStack npm Supply-Chain Compromise via GitHub Actions OIDC Token Theft, May 2026May 11, 2026criticalsupply-chainUnknowndraft_ai
TP-2026-1192Checkmarx Jenkins AST plugin supply-chain compromiseMay 9, 2026mediumSupply ChainTeamPCPdraft_ai
TP-2026-0236Instructure Canvas Free-For-Teacher Account Compromise and Extortion ActivityMay 7, 2026highdata-breachUnknowndraft_ai
TP-2026-0337Indonesia Cyber Scam Center Raids and Arrests, May 2026May 6, 2026mediumFinancialUnknowndraft_ai
TP-2026-0317JDownloader Website Installer Compromise, May 2026May 6, 2026highsupply-chainUnknowndraft_ai
TP-2026-0302West Pharmaceutical Services Ransomware and Data Exfiltration Incident (May 2026)May 4, 2026highransomwareUnknowndraft_ai
TP-2026-0058French ANTS Portal Data Breach, April 2026Apr 15, 2026highData breachUnknowndraft_ai
TP-2026-0053MCP Coordinated Disclosure Highlights STDIO Command-Execution RiskApr 15, 2026criticalSupply ChainUnknowndraft_ai
TP-2026-0056CPUID CPU-Z and HWMonitor Supply-Chain Malware DistributionApr 9, 2026highSupply ChainUnknowndraft_ai
TP-2026-03157-Eleven Franchisee Document Data Breach Claimed by ShinyHunters, April 2026Apr 8, 2026highdata breachUnknowndraft_ai
TP-2026-0052Mercor AI Supply Chain Breach via LiteLLM CompromiseApr 8, 2026highsupply-chainTeamPCPdraft_ai
TP-2026-0041ChipSoft Ransomware Attack Disrupts Dutch Healthcare InfrastructureApr 7, 2026criticalRansomwareUnknownunder_review
TP-2026-0042Cisco Development Environment Breach via Trivy Supply Chain AttackApr 6, 2026highSupply ChainTeamPCP / ShinyHunters (UNC5537)under_review
TP-2026-0013Winona County Targeted by Second Ransomware Attack in 2026Apr 6, 2026highRansomwareUnknowndraft_ai
TP-2026-0030FortiClient EMS Zero-Day Exploitation (CVE-2026-35616)Apr 4, 2026criticalzero-day-exploitationUnknownunder_review
TP-2026-0027Adobe BPO Supply Chain Breach by Mr. RaccoonApr 3, 2026highSupply ChainMr. Raccoondraft_ai
TP-2026-0036BlueHammer: Microsoft Defender Privilege Escalation Disclosure and Early ExploitationApr 3, 2026highprivilege-escalationUnknowndraft_ai
TP-2026-0047DocketWise Immigration Case Management Platform Breach Exposes 116K RecordsApr 3, 2026highData BreachUnknownunder_review
TP-2026-0034Chrome WebGPU Zero-Day (CVE-2026-5281) — Fourth Actively Exploited in 2026Apr 1, 2026highZero-Day ExploitationUnknownunder_review
TP-2026-0021Drift Protocol $285M DeFi Exploit by DPRK-Linked ActorsApr 1, 2026criticalFinancialUNC4736 / Sapphire Sleet (DPRK-linked)under_review
TP-2026-0048Patriot Regional ECC Cyberattack Disrupts Massachusetts TownsApr 1, 2026highransomwareUnknowndraft_ai
TP-2026-0015Axios npm Package Compromise by UNC1069Mar 31, 2026criticalsupply-chainUNC1069draft_ai
TP-2026-0045Operation TrueChaos: TrueConf Update Hijack Against Southeast Asian Government NetworksMar 31, 2026criticalsupply-chainChinese-nexus (unattributed)draft_ai
TP-2026-0057NGINX UI MCP Endpoint Authentication Bypass (CVE-2026-33032) Exploited in the WildMar 28, 2026criticalVulnerability exploitationUnknowndraft_ai
TP-2026-0023Die Linke Political Party Hit by Qilin RansomwareMar 26, 2026highRansomwareQilinunder_review
TP-2026-0055Dutch Ministry of Finance Internal Systems BreachMar 19, 2026mediumUnauthorized AccessUnknowndraft_ai
TP-2026-0020European Commission Cloud Breach via Trivy Supply ChainMar 19, 2026criticalSupply ChainTeamPCPunder_review
TP-2026-0022Foster City Ransomware Incident Disrupts Municipal ServicesMar 19, 2026highransomwareUnknownunder_review
TP-2026-0024Trivy Supply Chain Compromise Hits GitHub Actions and Container Releases (CVE-2026-33634)Mar 19, 2026criticalsupply-chainUnknowndraft_ai
TP-2026-0049Langflow AI Platform Unauthenticated RCE (CVE-2026-33017) Exploited Within 20 HoursMar 17, 2026criticalzero-day-exploitationUnknownunder_review
TP-2026-0032CareCloud Healthcare EHR System Breach Exposes Patient RecordsMar 16, 2026highData BreachUnknownunder_review
TP-2026-0050Cegedim Santé Healthcare Data BreachMar 15, 2026criticalData BreachUnknownunder_review
TP-2026-0017Stryker Corporation Destructive Cyberattack Claimed by HandalaMar 11, 2026criticalwiperHandala (claimed)under_review
TP-2026-0033Passaic County Ransomware Attack Claimed by MedusaMar 4, 2026highransomwareMedusaunder_review
TP-2026-0018Vivaticket Ransomware Attack Disrupts European Cultural InstitutionsMar 2, 2026highRansomwareRansomHousedraft_ai
TP-2026-0026LexisNexis AWS Cloud Breach via React2Shell ExploitFeb 24, 2026highdata-breachFulcrumSecdraft_ai
TP-2026-0028Conduent Massive Data Breach Affects 25 Million AmericansFeb 20, 2026criticalData BreachUnknownunder_review
TP-2026-0031Railway-Hosted Microsoft 365 Device Code Phishing Activity Hits 340+ OrganizationsFeb 19, 2026highPhishingUnknowndraft_ai
TP-2026-0043University of Mississippi Medical Center Medusa Ransomware AttackFeb 19, 2026criticalransomwareMedusa (claimed)under_review
TP-2026-0025FBI DCSNet Surveillance System BreachFeb 17, 2026criticalEspionageUnknown (suspected China-linked)under_review
TP-2026-0044Chrome CSS Font Feature Zero-Day (CVE-2026-2441) — Actively Exploited RCEFeb 13, 2026highZero-Day ExploitationUnknownunder_review
TP-2026-0029Hims & Hers Health Zendesk Breach Linked to ShinyHuntersFeb 5, 2026highdata-breachShinyHuntersdraft_ai
TP-2025-0001Marks & Spencer Cyberattack by Scattered SpiderApr 22, 2025criticalRansomwareScattered Spidercertified
TP-2024-0001CrowdStrike Falcon Global BSOD OutageJul 19, 2024criticalSupply ChainN/A — Vendor Errorcertified
TP-2024-0003XZ Utils Backdoor Supply-Chain Compromise (CVE-2024-3094)Mar 29, 2024criticalSupply ChainUnknowndraft_ai
TP-2024-0002Change Healthcare Ransomware AttackFeb 21, 2024criticalRansomwareALPHV/BlackCatdraft_ai
TP-2023-0001MOVEit Transfer Mass Exploitation by Cl0p (CVE-2023-34362)May 31, 2023criticalData BreachCl0p Groupcertified
TP-2023-00023CX DesktopApp Software Supply Chain CompromiseMar 22, 2023criticalSoftware Supply ChainUNC4736 (North Korea nexus)draft_ai
TP-2022-0001Viasat KA-SAT AcidRain Satellite Network AttackFeb 24, 2022criticalSabotage / WiperRussian state-sponsored actorsdraft_ai
TP-2021-0003Log4Shell Vulnerability Mass ExploitationDec 9, 2021criticalSupply ChainMultiple threat actorsunder_review
TP-2021-0004Kaseya VSA Supply Chain Ransomware AttackJul 2, 2021criticalSupply Chain / RansomwareREvil (Sodinokibi)under_review
TP-2023-0001Volt Typhoon Critical Infrastructure Pre-positioningJun 1, 2021criticalEspionage / Pre-positioningVolt Typhoondraft_human
TP-2021-0002JBS Foods Ransomware Attack by REvilMay 30, 2021criticalRansomwareREvilunder_review
TP-2021-0001Colonial Pipeline Ransomware Attack by DarkSideMay 7, 2021criticalRansomwareDarkSidecertified
TP-2020-0001SolarWinds Orion Supply Chain Compromise (SUNBURST)Dec 13, 2020criticalSupply ChainAPT29certified
TP-2020-0002FireEye Red Team Tools BreachDec 8, 2020criticalEspionageAPT29certified
TP-2020-0002Twitter High-Profile Account Takeover via Social EngineeringJul 15, 2020highFinancialGraham Ivan Clark, Mason Sheppard, Nima Fazeliunder_review
TP-2018-0001Marriott International Starwood Reservation System BreachNov 30, 2018criticalData BreachChina-linked espionage operatorsunder_review
TP-2018-0002Olympic Destroyer PyeongChang CyberattackFeb 9, 2018highSabotage / WiperSandwormdraft_ai
TP-2017-0004TRITON / TRISIS Safety-System AttackDec 14, 2017criticalSabotageTsNIIKhM-linked Russian actorsdraft_ai
TP-2017-0002NotPetya Global Wiper AttackJun 27, 2017criticalSabotage / WiperSandwormunder_review
TP-2017-0003Equifax Data BreachMay 13, 2017criticalData BreachPLA 54th Research Instituteunder_review
TP-2017-0001WannaCry Ransomware Global OutbreakMay 12, 2017criticalRansomwareLazarus Groupunder_review
TP-2016-0001Kyiv Power Grid Attack (Industroyer)Dec 17, 2016criticalSabotageSandwormcertified
TP-2016-0002Mirai / Dyn DNS DDoS AttackOct 21, 2016criticalDistributed Denial of ServiceUnknowndraft_ai
TP-2016-0005Shadow Brokers Equation Group Tool LeakAug 13, 2016highExploit Toolkit DisclosureUnknowndraft_ai
TP-2016-00042016 DNC and U.S. Election Hack-and-Leak OperationMar 1, 2016highState-Sponsored Hack-and-LeakAPT28draft_ai
TP-2016-0003Bangladesh Bank SWIFT HeistFeb 4, 2016criticalFinancial TheftLazarus Group / APT38draft_ai
TP-2015-0002Ukraine Power Grid CyberattackDec 23, 2015criticalSabotageSandwormunder_review
TP-2015-0003U.S. Office of Personnel Management BreachJun 1, 2015criticalData BreachUnknowndraft_ai
TP-2015-0001Anthem Health Insurance Data BreachJan 29, 2015criticalData BreachBlack Vine / China-linked espionage operatorsunder_review
TP-2014-0002Sony Pictures Destructive AttackNov 24, 2014criticalDestructive Malware and Data TheftLazarus Groupdraft_ai
TP-2014-0001Yahoo 2014 FSB Data BreachJan 1, 2014criticalEspionageFSB-directed actorscertified
TP-2013-0003Target POS Data BreachNov 27, 2013criticalPayment Card Data BreachUnknowndraft_ai
TP-2013-0002Yahoo 2013 Data BreachAug 1, 2013criticalData BreachUnknowndraft_ai
TP-2012-0001Shamoon / Saudi Aramco Wiper AttackAug 15, 2012criticalSabotage / WiperCutting Sword of Justice (claimed)draft_ai
TP-2011-0001DigiNotar Certificate Authority CompromiseAug 29, 2011criticalCertificate Authority CompromiseUnknowndraft_ai
TP-2011-0002RSA SecurID BreachMar 17, 2011highAuthentication Infrastructure CompromiseUnknowndraft_ai
TP-2010-0001Stuxnet Attack on Iranian Nuclear FacilitiesJun 17, 2010criticalSabotageUnknown (suspected U.S.-Israeli operation)under_review
TP-2009-0001Operation Aurora Cyber EspionageJun 1, 2009criticalEspionageUnknowndraft_human
TP-2008-0001Conficker WormNov 21, 2008highNetwork WormUnknowndraft_ai
TP-2007-0001Estonia DDoS AttacksApr 27, 2007highDistributed Denial of ServiceRussia-based politically motivated actors (suspected)draft_ai
TP-2003-0001SQL Slammer Worm OutbreakJan 25, 2003criticalNetwork WormUnknowndraft_ai
TP-2001-0001Code Red and Nimda Worm OutbreaksJul 12, 2001highInternet WormUnknowndraft_ai
TP-2000-0001ILOVEYOU Worm OutbreakMay 4, 2000highEmail WormOnel de Guzman (suspected)draft_ai
TP-1999-0001Melissa Macro Virus OutbreakMar 26, 1999highEmail Macro MalwareDavid Lee Smithdraft_ai
TP-1988-0001Morris Worm Internet OutbreakNov 2, 1988highMalwareRobert Tappan Morrisdraft_ai