An outage at Google’s cloud services in the UK has caused widespread disruption. Google blamed a “power event” for the failure at its London-based Cloud computing operations which affected its “europe-west2-b zone”, hitting courts and leaving millions of customers unable to access or send cash at banks including Lloyds, HSBC and Revolut. Thd outage disrupted

critical financial transactions as well as legal proceedings  Source: The Telegraph

A major cyberattack on pensions solutions provider PK Softech has hit the pension funds of the City of Zurich Swiss Post & Bernese funds. Pension assets and payments remain secure and functional, although sensitive personal data may have been stolen including names, addresses, social security numbers, marital status, IBAN numbers & insured assets via malware introduced be the attack  (initial method of entry remains unclear). Source: SwissInfo.ch

Data Breach Incident Response

Student and school records have been compromised by a phishing attack which apprears to be a "pivot" tactic from a  previous breach affecting 88 scools using AI-assisted phishing emails. Attackers impersonated headteachers from other schools to gain system access. The school has been required to notify affected families  the Information Commissioner's Office (ICO) and suspend internet access. Source: BBC

Phishing Incident Response

The data breach on The Danish Central Register of Persons (CPR) is the Danish national population registry holding  information about people living in Denmark, including their names, addresses, birth dates, citizenship, and marital status. The data breach that involved exposure of personal information of over 8 million individuals has been confirmed as an exploit of password weaknesses in a 3rd party service provider. Source: TechRadar

Supply Chain Cyber Attack Response Essentials

The UK Housing Ombudsman Service is investigating a cybersecurity incident via an external service provider. The specific initial entry technique remains undisclosed.The immediate impacts include compromising the watchdog's case management system and forcing ombudsman to take its online forms, landlord portal, and webchat platforms completely offline Resident contact details, including names, phone numbers, and addresses, may have been copied. Source: BleepingComputer

Supply Chain Cyber Attack Response Essentials

ASOS confirms the recent cyber attack was pertrated by social engineering techniques. The attacker impersonated a trusted contact to deceive an ASOS employee into divulging logon credentials and subsequently hijack an employee account to infiltrate third-party communication platform to send rogue notifications. The attack exposed customer data, including  names, addresses, and search histories. Source: BleepingComputer.

Retail giant Ahold Delhaize took several IT networks offline following a major cybersecurity incident. Specific details of the initial entry techniquehave not been reported. The incidnt caused pickup and delivery disruptions for several US food retailers, blocked access to schedules & logistics while e-commerce and customer service platforms were taken offline across Europe. Source: BleepingComputer.

Network Incident Response

TFG London has disclosed a major cybersecurity incident. Specific details regarding the initial entry technique remain unclear. The attack has severely impacted retail operations across several fashion brands including Hobbs, Whistles, and Phase Eight, disabling vital IT systems, e-commerce transactions and exposing the company to regulatory scrutiny and operational remediation costs. Source: BleepingComputer.

Network Incident Response

A cyberattack on a service provider compromised internet-exposed refrigeration controllers exploiting outdated software and suspected vulnerability exploits. This unauthorised access triggered remote defrost cycles that disabled displays across hundreds of French supermarkets, causing severe food waste and financial disruption. Source: BleepingComputer

Network Incident Response

H&M is investigating cyberattack claims by Shinyhunters.Specific details regarding initial entry vectors or phishing techniques were not outlined in the intial  incident report. Potential impacts include the unauthorized exposure of corporate data, a 1.5% decline in H&M shares, and subsequent regulatory scrutiny from the Information Commissioner's Office. Source: Yahoo News.

Network Incident Response

Calendar phishing is a growing tactic where fraudsters bypass email filters by automatically injecting malicious invitations directly into victims' calendar applications. This technique exploits implicit user trust to present fake voicemail alerts or renewal prompts that lead to spoofed pages harvesting sensitive Microsoft, Google, and PayPal credentials. (articlecontains a useful example of a typical calendar phishing meeting.  Source: The Guardian. 

Phishing Incident Response

Approximately 10% of phishing emails now originates from trusted SaaS platforms as cybercriminals leverage the "Living Off Trusted Services" framework to bypass security gateways. By exploiting legitimate infrastructure on services like DocuSign, QuickBooks, and Adobe, attackers execute credential harvesting, multi-factor authentication bypasses, and unauthorized software installations. Source: KnowBe4 Blog.

Phishing Incident Response

Two employee cloud accounts were compromised at Japanese media group,NIkkei. Compromised lcredentials were used to access a Google Workspace account and Microsoft 365 account. The breach facilitated a secondary attack where approximately 9,000 phishing emails weresent from an internal email account. Personal information of 1,646 individuals was exposed. Source:  SC World.

Phishing Incident Response

Asos is investigating a cyber attack after malicious push notifications were sent to to customer devices following an initial compromise via third-party cloud service platforms. The incident resulted in the exposure of basic personal data and a 9.56% drop in share value, though financial records and passwords remain uncompromised. Source: The Guardian

Data Breach Incident Response

During March & April 2026 Ernst & Young a cyber attack on exploited a software vulnerability in the Checkmarx supply chain security app to target an IT service management platform. Hackers accessed internal support tickets containing client tax documents for high net worth individuals including Goldman Sachs and Man Group. Source: Cybersecurity News.

Data Breach Incident Response

A massive supply-chain cyberattack compromised Denmark's central population registry via unauthorized credential abuse during September 2026. The data breach exposed the sensitive records of 8.8 million individuals, including historical data of deceased citizens and former emigrants. Source: Euronews.

Data Breach Incident Response

The Technical University of Denmark (DTU) experienced a significant data breach exposing the records of up to 200,000 users after attackers compromised legitimate user profiles to infiltrate the DTUBasen identity and access management system. This unauthorized access enabled the exfiltration of sensitive data dating back to 2003, including Danish civil registration numbers, addresses, and next-of-kin details, creating profound risks for identity fraud, financial exploitation, and targeted social engineering schemes. Source: Cybernews

Data Breach Incident Response

Small businesses are being targeted by a seasonal phishing scam involving fraudsters who impersonate legitimate event management firms like Prestige County Events to offer fraudulent festive market pitches. The scheme uses multiple fake email addresses to solicit upfront, non-refundable payments of up to £670, resulting in direct financial losses, wasted preparation time and stock, and unrecoverable travel and accommodation expenses for victims. Source: BBC

Phishing Incident Response

A municipality in Luxembourg was defrauded of over €407,000 following an email interception scam. Cybercriminals successfully hacked  the email server of a firm contracted to design the city's new municipal building. Posing as the firm, the fraudsters emailed the municipality claiming their bank details had changed. One criminal even phoned municipal staff to deceptively convince them to authorize the payment to the account. The local government processed the transaction, and the crime went unnoticed until the legitimate architecture company inquired about their missing funds.Source: RTL Today

Phishing Incident Response

A recent cyber attack on L&Q Housing has compromised the online communications of approximately 12,000 Greater Manchester residents after unauthorized actors accessed user emails and webforms. Affected individuals face an increased risk of targeted phishing scams and fraud attempts due to the exposure of their personal correspondence. However, core operating systems housing sensitive financial and tenancy records remain secure. Source: Manchester Evening News.

Phishing Incident Response

A federal court ordered the forfeiture of roughly $375,000 in fraud proceeds stemming from a business email compromise scam that cost an Iowa company over $800,000 in total financial losses. The incident duration spanned over four years, beginning with unauthorized wire transfers in mid-2022 and concluding with the final asset forfeiture order entered by the U.S. District Court for the Northern District of Iowa in September 2026. Source: Daily Hodl.

Phishing Incident Response

A cyber attack targeting Dyfed-Powys Police in Wales has potentially compromised internal staff data affecting a portion of the force's 1,349 officers and 1,063 support staff, though no public personal data was breached. The breach was detected on 14 September 2026 and publicly disclosed 11 days later on 25 September 2026, with investigations and recovery efforts remaining ongoing. Source: BBC.

Data Breach Incident Response

A global GPS reception failure affecting Embraer E190-E2 and E195-E2 fleets prompted Embraer and Honeywell to establish a joint crisis response room. The commercial impact involves disruptions across 24 airlines and 200 aircraft, with carriers like Azul grounding 43 jets and cancelling over 70 flights, affecting more than 15,000 passengers. The incident began on Tuesday, 22 September 2026, at 5:30 PM local time in Brazil, with groundings and flight adjustments persisting into subsequent days while awaiting a permanent software patch. Source: Simple Flying

The International Meteor Organization suffered an undisclosed cyberattack that exploited aging infrastructure, temporarily disabling a major publicly accessible database of astronomical data. The disruption is projected to keep the main website offline for several weeks, though the fireball reporting page has already been restored. Source Gizmodo

Network Incident Response

An AI-powered phishing and advance-fee fraud campaign is targeting small UK food and craft businesses by spoofing festival branding and staff names through personalized emails. The ongoing campaign spans the 2025–2026 festival season and features a 395% surge in fraud reports, with multi-stage attacks building trust over days or weeks before requesting payment. Source: BBC

Phishing Incident Response

The LNG carrier Vivit Africa LNG suffered a suspected cyberattack that compromised internal control systems used for monitoring critical cargo parameters in the Mediterranean and Adriatic Seas. The operational disruption lasted for several weeks, forcing the vessel to idle off the coast of Italy and subsequently reverse its course under a maritime safety warning rather than discharging its fuel in Rovigo. Source: Investing.Com 

Network Incident Response

Fintech company Revolut experienced an ongoing extortion and data theft campaign executed via an external impersonation scam that compromised a government agency email system. 680 customers were affected, exposing sensitive identity verification documents and transaction records. Source: City AM

Phishing Incident Response

Phishing campaigns using AI-assisted phishing templates, executive impersonation, fake  invoices,and fake email threads  used to trick finance teams into making fraudulent payments.Source: GB Hackers

Phishing Incident Response

A supply-chain phishing campaign targeted approximately 347,000 users of Trezor and BitBox crypto hardware wallets.

Attackers exploited a vulnerability at a third-party marketing provider to distribute  security alerts prompting users to surrender private wallet backups though malicious domains. Source: The Register 

Phishing Incident Response

The National Air Traffic Services (NATS) operational disruption on 8 September 2026 resulted from an internal legacy software defect rather than a cyberattack. The primary system failure lasted several hours, with subsequent flight delays and backlogs across the UK aviation network for over two days. Source:Reuters

Hacker group Big Bear and affiliates use Phishing as a Service to compromise over 5000 microsoft user credentials. The campaign impacted 461 organizations in over 40 countries, exfiltrating 5,137 credential records including session cookies and plaintext passwords.Source:Infosecurity Magazine

Phishing Incident Response

Hackers & fraudsters have deployed techniques that trick AI based phishing defence by obfuscating trigger words,which bypass AI analysis, appearing benign to human email recipients. Source: gbhackers 

Phishing Incident Response

A cyberattack is causing service issues for a global pharmaceutical and healthcare technology organisation. Hackers exfiltrated customer data from oncology and surgical business units. The data breach occurred over a four-day period between August 21 and 25, causing intermittent service degradation across oncology and medical units and the theft of sensitive identity and health records Source: The Record

Data Breach Incident Response

Employee email accounts hijacked at a charitable organisation and used to faciliate fraudulent payments. The campaign compromised employee credentials to execute a three-month unauthorised intrusion into corporate networks. The attacker intercepted vendor communications, diverting t over $7.5 million from a Maryland charitable organization and a New York investment partner, Source: AOL

Spear-phishing emails impersonating the Income Tax Department to distribute DcRAT malware. The activity wsurfaced during May 2026 during the seasonal tax filing window, resulting in prolonged network access and the exfiltration of high-value financial data from Indian institutions. Source: CRN

Phishing Incident Response

The intial intrusion and data exfiltration occurred during a six-day duration in August 2026, forcing Berlin gevernment officials to temporarily shut down municipal IT systems. The systemic impact caused the loss of 5.79 terabytes of data and suspended public services, followed by a dark web leak of 1.4 million files, authorities refused a $2.3 million ransom demand. Source: Anadolu Ajansı

Ransomware Incident Response

The extortion group UNC6671 conducted a social engineering-driven voice phishing (vishing) campaign targeting hedge funds and financial firm employees through spoofed corporate helpdesk calls which comprmised multi-factor authentication (MFA) controls.  Source: Knowbe4

A financial services organisation in Madhya Pradesh, India has announced that it has been hit by a ramsomware attack with Krybit group has claiming responsibility for the attack. The incident disrupted financial operations and potential corporate database exfiltration. Source: DeXpose

Ransomware Incident Response

Cyber attack on 3 major UK airports results in data theft affecting 8.7 minllion individuals. Early indications imply Data including email addresses, phone numbers, vehicle registrations and postcodes has been seized. Source: Sky News

Data Breach Incident Response

Global medical giant, Boston Scientific confirm that it has suffered a significant cyber attack. Global supply and logistics are currently impaired.A timeline for full operational  restoration is not yet confirmed. Source: Medical Device Network

Network Incident Response

Chesapeake city warns of email fraud impersonating the planning department demanding payment for services.An alert wasraised regarding ongoing brand impersonation and an email spoofing campaign targeting local development applicants. The attack used fake Planning Department communications and official logos to solicit fraudulent fees and harvest payment details Source: Yahoo News

Phishing Incident Response

A phishing attack  impersonating the Internal Revenue Service, the cyber attack directs victims to the attackers portals using malicious QR codes. Victims suffer immediate and irreversible theft of private wallet seed phrases, credentials, and digital assets. Source: Coin Edition

Phishing Incident Response

Hostile nation-state hackers executed a targeted infrastructure cyberattack against a small-scale UK power generator, forcing a complete shutdown for a four-day duration. Operational impact was localised without affecting the wider national grid, nevertheless officials issued warnings and enhanced network resilience strategies. Source: BBC 

Network Incident Response

The Law Society of Scotland has alerted its members to a phishing campaign that compromise legal firms' mailboxes, sending messages  directly from the solicitor’s mailbox, including the firm's genuine signature block applied automatically by their signature management. Combined with a valid sender address bypasses automated chesks annd makes visual identification. Source: Law Society of Scotland

Phishing Incident Response

Cybersecurity firm, Proofpoint identified an ongoing social engineering and credential phishing campaign across Australia. Involving myGov portal impersonation and fraudulent supplier invoice schemes, the scam exploits the seasonal tax return period defraud and compromise taxpayer records, contibuting to overall national scam losses that hit AUD $2.18 billion during 2025 Source: Security Brief

Phishing Incident Response

Data allegedly stolen directly from the Azure tenants of several Fortune 500 organizations is reportedly on sale on the dark web. The perpetrator has claimed that the data was exfiltrated from Azure/Entra instances via leaked credentials. Source: Security Week

Data Breach Incident Response

During June 2026 French tax authority experienced a credential-abuse and data-exfiltration cyber attack conducted via compromised internal credentials.  The incident resulted in the extraction of sensitive tax records belonging to 678,000 individuals and businesses, which were later promoted on cybercrime and dark web forums. Source: Reuters

Data Breach Incident Response

Information Comminssioners Office highlights security failures that enabled data breach at the Crimminal records Office. In their report the ICO said "failed to maintain an effective patch management process, and did not adequately investigate security alerts that could have identified the hacker’s activity earlier", adding that network segmentation reduced the scale of the attack. Source: Local Govenment Lawyer

Data Breach Incident Response

Yorkshire's Brain Tumour Charity (YBTC) has been identified as one of the charity organisations affected by the Beacon CRM data breach. The charity has advised beneficiaries and donors to be "particularly cautious about unexpected emails, calls or text messages referring to YBTC, Beacon, donations or support you may have received" Source: BBC

Data Breach Incident Response

More organisations report potential impact from Beacon CRM cyber attack. Museums including Foundling Museum, London; Sheffield's National Videogame Museum, York Museums Trust, the Paul Mellon Centre; UP Projects &English National Ballet are among the arts organisations affected. Charities have been to told to “assume that all data that you store in Beacon, including attachment files, has been accessed”. Source: Museums Association

Data Breach Incident Response

Company employees tricked by impersonating CEO in fake gift card fraud. The multi-stage social engineering exercise unfolded over a brief sequence of casual messages requesting gift vouchers (Article contains some useful screen shots). Source: NDTV

Phishing Incident Response

Southampton charities Southampton Hospitals Charity & Saints Foundation have been identified as two of the many charities targeted in a cyber-security incident linked to a customer relationship management technology provider. Source: Daily Echo

Data Breach Incident Response

The City of Pittsburg made an unauthorized ACH payment of $913,839.81 to a fraudulent bank account after scammers impersonated a known vendor. Source: Yahoo News

Phishing Incident Response

Cyber criminals have been identified  using malicious files disguised as 'Statement of Account', 'RBI' or 'MCA' to infect both Windows computers and hijack active WhatsApp Web sessions. Financial organisations and professionals are the primary target. Source: New Indian Express

Phishing Incident Response

A cyber crimminal organisation is targetting financial organisations using social engineering and vishing techniques to acquire logon credentials: Source: Cyber Press

Meta has confirmed that one of its AI models was able to break out of a test environment  and penetrate another organisations systems - emphasising the need for robust containment of test environments. Source: BBC

John Hopkins MyJH portal has been subjected to phishing & "ghost" sites to harvest user credentials. The scenario involves tcompromise of sensitive login data and unauthorised access to multi-factor authentication codes resulting in access to highly sensitive employee information including salary, benefits, and personal profiles. Source: John Hopkins website

Phishing Incident Response

Data from Arts and Cultural organisations leaked following a cyber attack on their CRM servicesprovider. English National Ballet among the organisations impacted by the attack. Source: The Standard

Data Breach Incident Response

Repeated attacks on US water utilities and government sites point to nation state involvement.The intrusion occurred over several days, degrading water operations in Minnesota utility systems and causing disruptions in New Jersey, South Dakota, and Georgia. Although the physical water supply remained safe, the attack prompted CISA to order emergency internet disconnection protocols. Source: BBC

Network Incident Response

A cyber attack accesed the data of some 31,000 people contained in the principality's register of economic interests. The register contains details of people behind companies and foundations registered in principality and underpins anti-maoey laundering activities. Source: AP News

Data Breach Incident Response

A cyber attack of the police national legal database (PNLD) exploited misconfigured cloud settings on a Microsoft portal. the breach culminated in a full data leak on dark web torrents in early August following unmet ransom deadlines. The attack compromised 135,000 records from the Police National Legal Database, exposing the personal and professional details of over 100,000 UK police officers and related government personnel. Source: Daily Telegraph

Data Breach Incident Response

A wave of cyber attacks has targetted water compnaies in both  Wisconsin & Minnesota. the objective of the attack was to compromise water management systems and the attacks are suspected to be conducted by by hostile nation states, Source: CNN

Network Incident Response

West Norfolk Council became the target of a cyber attack during local elections.  Although no data theft or comprimise was detectted, web and telephony services were suspended for several hours with full IT systems availbility restored after 24 hours. Source: BBC

Network Incident Response

A cyber attack on the UK Department of Education has resulted in the exfiltration of 607,000 records, including email addresses and telephone numbers. The hacking gang, ExfilSquad has claimed responsibility and demanding a ransom. Source: The Guardian

Data Breach Incident Response

The accidental cyber attack caused by the Open AI agent breaching has affected at least one other organisation. It has been established that the agent was "in the wild" for around 4 days and hit a cloud service provider as well as Hugging Face. Source: Politico

Hackers discovered using hotel Wi-Fi gateways to acquire user credentials. Wi-Fi routers are compromised to redirect users to fake Microsoft 365 login pages to steal log-in credentials: Source: Security Affairs

Edinburgh based Health Tech suffers significant cyber attack involving data breach. A statement issued by the company  said "A percentage of Craneware employee data as well as a subset of customer and partner records have been accessed and exfiltrated.". Source: Yahoo Finance 

Data Breach Incident Response

OpenAI cyber security testing "escapes" test environment, launches live attack on start-up. Source: BBC

Persistent technical failures interrupt the operation of Malaysia's recently deployed Corporate Registry System (CRS), have severely disrupted business registrations, statutory filings, financing activities, share transactions, corporate restructuring and investment activities nationwide. Source: The Star

Ecopetrol , the Colombian state ‌energy company disclosed a cyberattack that resulted in the theft of data related to approximately 3,300 user accounts and that the breach could result in a "material adverse" financial impact. Source: Reuters

Data Breach Incident Response

Abbott Laboratories investigates two cyber incidents on its internal systems at its cancer diagnostics business and its ‌LabCentral portal. Although operations have not been affected. The company continues to investigate the extent of the breach. Source: Yahoo Finance

Network Incident Response

Ernst & Young suffered a data breach facilitated by the compromise of a third-party support ticket system used by its IT personnel.Support tickets submitted through the platform may have included documents containing client tax information.Source: Bleeping Computer

Data Breach Incident Response

A ransomware cyberattack forces milk brand Fairlife to pause production in its U.S. operation following a confirmed cyber breached of the company's systems. Source: ABC News

Ransomware Incident Response

An oversight during a systems upgrade caused a 12 hours outage in the Australian Telstra communications network. Customers lost mobile network access, trains were disrupted, ratil payment systems were unavailable and emergency services calls were "dropped". Source:BBC News

Major frozen food supplier hit by cyber attack causing failure of critical systems.The incident caused a multi-week operational suspension  during July 2026 and led to severe supply disruptions, stock shortages subsequently affecting downstream providers, including KFC Japan  Source:Japan Today

Network Incident Response

A server migration and software update led to a major failure of the interface and licensing software required to access the central servers. The functioning of all Berlin’s ordinary courts and regional courts,were severely restricted or brought to a complete halt.  Paper-only procedures were required to maintain case progression. 

Performance & login issues  persisted for several days. Source: Ground News