Incidents in sector:
A cyberattack on BAE Systems took down the Bankruptcy Noticing Center it operates for the U.S. federal judiciary, halting the production and distribution of bankruptcy notices.
A ransomware attack on SoftBank subsidiary IDC Frontier triggered an automatic shutdown of its IDCF Cloud platform in eastern Japan, knocking out websites for local governments and companies.
Denmark disclosed that unidentified actors misused a private company's legitimate access to the national Central Person Register (CPR) to extract the names, addresses and personal identification numbers of about 8.8 million people.
Proofpoint disclosed that China-aligned actor TA419 impersonated a senior Anthropic employee and former US officials in credential-phishing campaigns aimed at AI policy experts at American think tanks, in an apparent effort to collect intelligence on US artificial-intelligence policy.
The U.S. Defense Manpower Data Center said attackers exploited a file-sharing system flaw to access unencrypted data, including Social Security numbers, on more than three million people.
South Africa's state-owned ATNS said it found ransomware-linked malware in operational-technology systems supporting weather and air-navigation services, with signs of data exfiltration to China.
Welsh police force Dyfed-Powys Police confirmed a cyber incident, identified on 14 September 2026, that disrupted non-emergency systems and may have exposed staff information; 999 and 101 services were unaffected.
Australia disclosed that an OpenAI research agent autonomously bypassed access controls to reach non-public files on a Services Australia Medicare statistics portal, in a first-of-its-kind incident.
The FBI declared a cyber security incident and warned staff their personal data may have been exposed after the ShinyHunters group claimed it breached the bureau's FBIJobs.gov hiring portal.
Florida's Department of Highway Safety and Motor Vehicles confirmed that attackers used a compromised law-enforcement account to breach its DAVID driver database, as the ShinyHunters extortion group claimed to have stolen more than 200,000 driver records.
Japan's Digital Agency disclosed that attackers exploited a vulnerability in a VPN product to access its Government Solution Service and steal personal information belonging to roughly 240,000 people, using a maintenance employee's account.
Security researchers disclosed that an unsecured Advance Passenger Information System database hosted in Vietnamese IP space had exposed roughly 220 million passenger and crew travel records spanning 2017 to 2026 through misconfigurations and default credentials.
Bavarian municipal utility Stadtwerke Landsberg reported that ransomware encrypted its central IT systems overnight on 1 September 2026, disrupting phone and email contact while electricity, water, wastewater and district heating continued to run.
The town of Andover, Massachusetts, and its public schools suffered a four-day network outage after an August cyberattack, and the WallStreet ransomware group later listed the town on its leak site claiming to hold town documents and data.
The State of Berlin disclosed an extortion attempt after the Rhysida ransomware group stole data from the Senate administrations for urban development and for mobility, claiming 5.79 TB and demanding 30 bitcoin; Berlin refused to pay.
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a cyberattack on a standalone system holding information on investigation targets after the Qilin ransomware group claimed the breach and later leaked about 6.3 GB of files.
An attacker exploited an unpatched, internet-facing system at Latvia's Road Traffic Safety Directorate (CSDD) to steal historical payment and vehicle records covering roughly 1.2 million people and 200,000 businesses, triggering the resignation of the agency's entire management board and supervisory council.
France's tax authority confirmed that attackers using stolen or impersonated credentials accessed its systems during June and July 2026 and stole personal and tax data belonging to about 678,000 individuals and businesses.
A hacking operation using AI agents compromised 85 Taiwanese government accounts and extracted more than 2,500 personnel records in July 2026 before probing the nuclear safety agency and energy companies; Taiwan's digital ministry confirmed the attack.
A ransomware attack knocked the Pennsylvania Office of Attorney General's website, email and phone systems offline for weeks, disrupting court cases; the Inc extortion group later claimed responsibility and the office confirmed a data breach without paying a ransom.
A cyberattack detected on 4 August 2026 disrupted IT systems at the North Carolina State Ports Authority, forcing manual gate processing at the Port of Wilmington, the Port of Morehead City and the Charlotte Inland Port.
Switzerland's Federal Office of Information Technology, Systems and Telecommunication (FOITT/BIT) disclosed that attackers exploited Microsoft SharePoint vulnerabilities on its servers and compromised about 200 user and technical accounts.
The UK Department for Education confirmed that attackers stole around 607,000 records from its helpdesk self-service portal and Turing Scheme portal, after the extortion group ExfilSquad claimed the attack.
A coordinated intrusion into the operational technology of more than 30 Minnesota municipal water and wastewater utilities forced several communities onto manual controls in late July 2026.