Every public disclosure, dated and sourced.

Incidents worldwide, by country.

77 incidents from 11 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.

1. United States5 Nov 2026Queens Public LibraryThe source does not say how they got in.The Record
2. United States5 Nov 2026Xplicit Audio LLCThe source does not say how they got in.Vermont Attorney General
3. United States5 Nov 2026Killingly Public Schools (KPS)The source does not say how they got in.Vermont Attorney General
4. United States4 Nov 2026DreamHostHow they got in: a known flaw in software the victim ran.BleepingComputer
5. United States4 Nov 2026The Town of LincolnThe source does not say how they got in.Vermont Attorney General
6. United States4 Nov 2026Vanguard Group, Inc.The source does not say how they got in.Vermont Attorney General
7. United States4 Nov 2026Byker & Associates, Inc.The source does not say how they got in.Vermont Attorney General
8. United States4 Nov 2026RevSpring, Inc.The source does not say how they got in.California Attorney General
9. United States4 Nov 2026Hoag Memorial Hospital PresbyterianThe source does not say how they got in.California Attorney General
10. United States4 Nov 2026New Century Ophthamology P.C.The source does not say how they got in.Vermont Attorney General
11. United States4 Nov 2026Alation Inc.The source does not say how they got in.Vermont Attorney General
12. United States3 Nov 2026WorkOSThe source does not say how they got in.BleepingComputer (via SecOpsNews feed)