Security NewsSecurity Remains Everybody’s JobOT Threat Report: Physical Impacts Down, Nation-State Attacks on Rise2025 OT Cyber Threat Report2024 Threat ReportNext Request Access to the 2026 ReportRequest access to previous year Threat Reports:2025202420232022 Search IncidentsFilter by: Country AfricaAlbaniaAngolaArgentinaAsia-PacificAustraliaAustriaAzerbaijanBangladeshBelarusBelgiumBermudaBoliviaBosnia and HerzegovinaBrazilBritish Virgin IslandsBulgariaBurkina FasoCameroonCanadaChadChileChinaColombiaCosta RicaCroatiaCubaCuraçaoCzech RepublicDenmarkDominican RepublicEcuadorEgyptEl SalvadorEstoniaEuropeFinlandFranceGermanyGhanaGlobalGreeceGuadeloupeGuamGuatemalaGuyanaHondurasHong KongHungaryIcelandIndiaIndonesiaIranIrelandIsraelItalyJapanJordanKenyaKoreaLatviaLebanonLetlandLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacedonia (Rep. of N.)MalaysiaMaltaMartiniqueMexicoMiddle EastNamibiaNepalNetherlandsNew ZealandNicaraguaNigeriaNorwayPakistanParaguayPeruPhilippinesPolandPortugalQatarReunion IslandRomaniaRussiaRussian FederationSaudi ArabiaSenegalSingaporeSlovakiaSloveniaSouth AfricaSouth AmericaSouth KoreaSpainSri LankaSt. MaartenSwedenSwitzerlandTaiwanThailandThe PhilippinesTrinidad & TobagoTurkeyUkraineUnited Arab EmiratesUnited KingdomUnited Kingdom of Britain & Northern IrelandUnited StatesUnknownVanuatuVenezuelaVietnam Industry AerospaceAutomotiveBiotechBuilding AutomationBusinessChemicalsCloud ProviderCommunicationsDefenseEnergy (Includes Power and Utilities)Engineering (Includes Industrial Construction)Food & BeverageGovernmentHealthcareInsuranceManufacturingMetalsMetals & MiningMiningOil & GasOtherPackagingPharmaceuticalPulp & PaperService ProviderSoftwareSteelTechnologyTransportation (Includes Logistics, Shipping, Maritime, Rail, Trucking)UnknownWater and Waste Water Threat Actor 8Base Ransomware GroupAiLock ransomware groupAkira Ransomware GangAndarielAnonymousAnonymous RoughSecAnonymous SudanAnubis Ransomware GroupAPT28AuroraBarracudaBelarusian CyberpartisansBianLian Ransomware GroupBl00dy 'bloody' Ransomware GangBlack Basta GroupBlack RewardBlack VineBlackByteBlackCat / ALPHVBlackjack groupBlackMatterBlackShrantacBlackSuitBlue LockerBrain CipherCactus ransomware gangCentral Scientific Research Institute of Chemistry and Mechanics (CNIIHM), RussiaCerber ransomware operationCicada3301 ransomware groupClop (or Cl0p) ransomware gangCold RiverConti groupCutting Sword of JusticeCyber Av3ngersCyber-PartisansDaixin TeamDark AngelsDarkSideDesordenDirewolfDoppelPaymer Ransomware GangDragonforceDunghill ransomware gangEmbargo Ransomware GangEverest Ransomware GroupFIN11Former EmployeeFulcrumSecGold DupontGunraHackers of Ukraine's military intelligence agency (HUR)HandalaHellcat ransomware gangHive Ransomware GroupINC RansomIndian Cyber Force (ICF)IndraIndustrial SpyInterlockIranIsrealIT Army of UkraineJoseph AtkinsKawa4096Killmilk/Just EvilKillnetKimsukyLapsus$LazarusLockBitLorenz ransomware gangLVLynx Ransomware GroupMedusaMoney Message ransomware gangMONTIMount LockerMysterious Team BangladeshNation State ActorNefilim Ransomware groupNempty Ransomware groupNetwalker GroupNevada Ransomware OperationNitrogenNobelium hacking groupNoEscape ransomware gangNoName057(16)PandoraPayloadPhoenixPlay, aka PlayCryptPredatory SparrowQilinRA WorldRagnar LockerRagnarok GroupRansomexxRansomHouse Extortion GroupRansomHub RaaSREvilRhysida Ransomware GroupRoyal Ransomware gangRussiaRussian Main Intelligence Directorate (GRU)Russian Security ServicesRyuk ransomware gangSafePay Ransomware GroupSalt TyphoonSandwormSarcoma GroupScatter Swine / 0ktapusScattered Lapsus$ HuntersScattered SpiderShinyHuntersSilent CrowSnatch ransomware groupSTIBNITESticky WerewolfStormStormous ransomware groupTeam Insane PKTeam OneFistTermiteThe GentlemenThe Hades ransomware gangTheUSERS007TimisoaraHackerTeam (THT)TrigonaUkrainian Cyber AllianceUNC2546UnconfirmedUnited StatesUnknownVexyVice SocietyVolt TyphoonWarlock Ransomware GroupWinntiWizard SpiderWorld Leaks, formerly Hunters InternationalWyatt A. TravnichekYanluowang ransomware groupZeroXZestix ImpactsOT (Operational Technology)IT (Information Technology)SafetyPrivacyBOTH OT and ITSearch Incidents: Lansing, MI, Public Utility Compromised by Attack, $25K Ransom paid.04/25/2016 Lansing Board of Water & Light (BWL)No Malware identifiedNo threat source identified ITUnited StatesHackers Manipulated Water Supply at Unnamed Water District – ‘Kemuri’.03/15/2016 “Kemuri” Water company – KWCNo Malware identifiedNo threat source identifiedOT ITUnited StatesThyssenkrupp Technical Trade Secrets Stolen02/16/2016 Thyssenkrupp AGNo Malware identifiedNo threat source identified ITGermanyMajor Aircraft Component Manufacturer Scammed out of $50Million01/15/2016 Fischer Advanced Composite Components AG (FACC) Phishing AttackNo threat source identified ITAustriaHackers cause power outages to close to 1/4 million people12/23/2015 Ukrainian KyivoblenergoNo Malware identified Russian Security Services225K Customers Without Power in Ukraine Power Grid Hack12/23/2015 Ukrenergo – Ukrainian power companyNo Malware identifiedNo threat source identifiedOTUkraineUnited Hack Connects To Attack Group05/29/2015 United AirlinesNo Malware identified Black Vine ITUnited StatesSellafield Nuclear Waste Facility in UK Pleads Guilty; Insists There Never has been a Successful Cyberattack05/29/2015 SellafieldNo Malware identifiedNo threat source identified ITUnited KingdomAttempted Cover-Up of Sewage Spillage01/01/2015No victims identifiedNo Malware identifiedNo threat source identifiedAustraliaCyber attack at German Steel Mill damages equipment12/22/2014 German Steel MillNo Malware identifiedNo threat source identifiedOT ITGermanyMarriott System Breach Undetected for 4 Years (2014 to 2018)05/31/2014 MarriottNo Malware identifiedNo threat source identified ITUnited KingdomTarget Suffers Largest Retail Data Breach in U.S. History.11/15/2013No victims identifiedNo Malware identifiedNo threat source identified IT PrivacyUnited StatesOT Attack on Bowman Avenue Dam Illustrates Vulnerability of the U.S. Infrastructure06/01/2013 Bowman Avenue Dam, NYNo Malware identified Iran ITUnited StatesPoughkeepsie, NY, Utility Hacked02/19/2013 Central Hudson Gas & ElectricNo Malware identifiedNo threat source identified ITUnited StatesFL Utility Suffers DDoS02/17/2013 JEANo Malware identifiedNo threat source identified ITUnited StatesSecurity Firm Hacked02/01/2013 Bit9No Malware identifiedNo threat source identified ITUnited States30,000 Hard drives wiped by virus01/01/2013 Saudi Aramco Shamoon Cutting Sword of JusticeMiddle EastVirun Infection in turbo Control System at US Electric Utility10/01/2012 UnidentifiedNo Malware identifiedNo threat source identifiedOT ITUnited StatesNatanz and Fordo Facilities closed down “Automation Network” after New Worm Targeted Iran’s Nuclear Program07/22/2012 Natanz Nuclear Facility Fordow Fuel Enrichment PlantNo Malware identifiedNo threat source identified ITIranIranian Oil Terminal offline after malware attack04/22/2012No victims identified FlameNo threat source identifiedIran123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102