Crowdstrike Outage

The recent CrowdStrike outage, which occurred in July 2024, was a major incident affecting thousands of businesses worldwide. CrowdStrike, a leader in cybersecurity, is known for its Falcon platform, which helps companies detect and prevent cyber threats by monitoring network activity and endpoints. The outage was rooted in a problematic software update—specifically, an error in...

19 Jul 24

• Human Error

View Detail

MOVEit Transfer Breach

Impact: Data exfiltration affecting multiple organizations. Details: The Clop ransomware group exploited a zero-day vulnerability in the MOVEit Transfer software, leading to mass data theft and ransom demands. How: Exploitation of unpatched software vulnerabilities.

27 May 23

8:00 am

• Data Breach

View Detail

Log4j Vulnerability

Impact: Hundreds of millions of devices at risk. Details: A zero-day exploit allowed attackers to execute arbitrary code remotely on systems using the vulnerable Log4j library. How: Exploited improper input validation in the Log4j logging framework​.

01 Dec 21

8:00 am

• Data Breach

View Detail

Colonial Pipeline Data Breach

Impact: Largest attack on U.S. critical infrastructure. Details: Ransomware disrupted fuel supplies across the East Coast, forcing a temporary shutdown. The company paid $4.4 million in ransom. How: Malware infected pipeline systems controlling fuel distribution.

07 May 21

8:00 am

• Data Breach

View Detail

Marriott International Data Breach

Impact: 500 million guests’ data compromised. Details: Attackers gained access to the Starwood reservation system in 2014 but were undetected until 2018. Stolen data included passport numbers and encrypted credit card details. How: Exploitation of legacy systems following Marriott’s acquisition of Starwood​.

15 Nov 18

8:00 am

• Data Breach

View Detail

Equifax Data Breach

Impact: 148 million records exposed. Details: A vulnerability in a web application framework led to the exposure of sensitive data such as Social Security numbers, birth dates, and addresses. How: Hackers exploited a known Apache Struts vulnerability that had not been patched​.

07 Sep 17

8:00 am

• Data Breach

View Detail

Adult FriendFinder Data Breach

Impact: 412 million user accounts compromised. Details: Weak SHA-1 password hashing made user credentials easily exploitable, exposing sensitive personal data. How: Hackers exploited poor encryption practices to access and leak multiple databases​.

15 May 15

8:00 am

• Data Breach

View Detail

U.S. Office of Personnel Management

Impact: 21.5 million records stolen, including security clearance data. Details: Targeted state-sponsored attack attributed to China. Exposed highly sensitive data like fingerprints and background checks. How: Advanced persistent threat (APT) exploiting network vulnerabilities.

15 Apr 15

8:00 am

• Data Breach

View Detail

Target Data Breach

Impact: 60 million payment card records stolen. Details: Attackers accessed the network through compromised credentials of a third-party HVAC vendor. Malware was installed on POS systems to collect customer data. How: Exploited weak third-party security measures.

15 Sep 13

8:00 am

• Data Breach

View Detail

Yahoo Data Breach

Impact: 3 billion accounts compromised. Details: Two breaches attributed to Russian agents. Stolen information included names, email addresses, and security questions. It remains the largest data breach in history. How: Hacked through vulnerabilities in Yahoo’s systems, later exacerbated by poor disclosure practices​    

15 Aug 13 - 15 Aug 14

8:00 am

• Data Breach

View Detail

Saudi Aramco Data Breach

Impact: 30,000 computers wiped. Details: The Shamoon virus targeted Saudi Aramco, disrupting its operations and destroying massive amounts of data. How: Malware attack with a destructive payload.

15 Aug 12

All Day

• Data Breach

View Detail