Incidents by attack type:
A cyberattack on BAE Systems took down the Bankruptcy Noticing Center it operates for the U.S. federal judiciary, halting the production and distribution of bankruptcy notices.
A cyber incident at Femern Link Contractors brought construction of the Denmark–Germany Fehmarnbelt tunnel to a standstill at the Rødbyhavn site.
Attackers hijacked internet-exposed refrigeration controllers to heat fridges and freezers at hundreds of French supermarkets, spoiling food and triggering fires.
The UK arm of South Africa's Foschini Group disclosed a cyberattack that took several IT systems offline across its Phase Eight, Hobbs and Whistles brands.
Dutch-based retail group Ahold Delhaize took websites, apps and online grocery services offline across its European and US banners after a security incident on its network, while keeping stores open.
Cryptocurrency exchange Bitget said suspected North Korean attackers spoofed transaction data through a compromised backend to drain about $351.6 million from its hot and warm wallets.
Welsh police force Dyfed-Powys Police confirmed a cyber incident, identified on 14 September 2026, that disrupted non-emergency systems and may have exposed staff information; 999 and 101 services were unaffected.
Colorado officials disclosed that foreign actors breached the control systems of two small water utilities, altering equipment settings and disabling alarms before the intrusions were contained.
Bridgestone Americas confirmed a cyberattack that interrupted production at several of its North American manufacturing and retreading plants, though the company said it contained the incident early and found no evidence of customer data theft.
Hackers used stolen IT-vendor credentials to break into the Pix transaction-processing environment of Brazilian fintech Sinqia, a subsidiary of Evertec, and attempted to move more than $130 million in fraudulent real-time payments before the activity was halted.
Medical-device maker Boston Scientific disclosed a cybersecurity incident that caused a network outage and disrupted company operations, including the systems used to process and ship customer orders for its cardiac and interventional devices.
The UK government confirmed that a cyberattack knocked a small-scale energy generator offline for four days, in what was reported as the first disruptive Iranian-linked cyberattack of its kind in Britain, alongside attacks on U.S. water utilities.
A cyberattack detected on 4 August 2026 disrupted IT systems at the North Carolina State Ports Authority, forcing manual gate processing at the Port of Wilmington, the Port of Morehead City and the Charlotte Inland Port.
A coordinated intrusion into the operational technology of more than 30 Minnesota municipal water and wastewater utilities forced several communities onto manual controls in late July 2026.
Japanese beverage group Sapporo Holdings disclosed suspected unauthorised access at its overseas subsidiaries Pokka in Singapore and Sleeman Breweries in Canada, shutting down affected systems to investigate.
Ukraine's state postal operator Ukrposhta said a hostile overnight attack on its IT systems left its mobile application and some digital services malfunctioning, amid ongoing Russian cyber and physical attacks on Ukrainian infrastructure.
An unauthorized party gained remote access to Brazil's Defesa Civil Alerta emergency platform and broadcast fake highest-priority alerts reading 'misantropi4' to phones in several states overnight, forcing authorities to take the system offline and open a federal investigation.
A cyberattack against the shared communications infrastructure used by Bank Melli, Bank Saderat, Bank Tejarat and the Export Development Bank of Iran knocked ATMs, point-of-sale terminals and online banking offline, though officials said no customer data was accessed.
A hacker going by the name TeamPCP claims to hold a significant quantity of internal data belonging to Mistral AI, the French startup
The hacker ChimeraZ claims to hold data linked to La Boîte Immo, a French company specialized in software and digital services for
In early May 2026, West Pharmaceutical's plant at Le Nouvion-en-Thiérache (Aisne, France), which employs around 770 people making rubber components for syringes and medical devices, was hit by a cyberattack that halted production for roughly two weeks; no data exfiltration was confirmed.
The Ambroise Paré clinic in Beuvry says it was the victim of a cybersecurity incident on 21 April 2026, according to a communication published on 30
A database attributed to ADEMI, an agricultural weighing system, is currently circulating online, exposing sensitive information related to
A student allegedly cloned Taiwan High Speed Rail's TETRA radio parameters and sent a General Alarm that stopped three trains on 5 April 2026; he and an accomplice were arrested in late April.