{ "updated": "2026-11-04", "windowStart": "2025-01-01", "windowEnd": "2026-11-04", "incidents": [ { "id": "conduent-2025", "date": "2025-01-13", "name": "Conduent client-data theft", "victim": "Conduent", "country": "United States", "city": "Florham Park", "lat": 40.825, "lng": -74.388, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "The filing says notification costs were material and does not publish a dollar total.", "sourceName": "Conduent Form 8-K", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1677703/000167770325000067/cndt-20250409.htm", "summary": "On 13 January 2025 a threat actor got into part of Conduent’s environment and took files tied to client end-users. Conduent said operations were back within days and that the stolen data held personal information on a significant number of people. It did not publish a loss figure." }, { "id": "bybit-2025", "date": "2025-02-21", "name": "Bybit cold-wallet theft", "victim": "Bybit", "country": "United Arab Emirates", "city": "", "lat": 24.45, "lng": 54.38, "type": "breach", "lossUsd": 1460000000, "lossKind": "stolen", "lossNote": "Bybit’s own accounting of the one cold wallet: $1.46 billion. Counted as stolen funds. The FBI described the same theft as approximately $1.5 billion.", "sourceName": "Bybit", "sourceUrl": "https://www.bybit.com/en/learn/this-week-in-bybit/bybit-security-incident-timeline", "summary": "On 21 February 2025 attackers changed the logic of one Bybit Ethereum cold wallet during a routine transfer and drained it. Bybit said the loss was $1.46 billion: 401,347 ETH, 90,375 stETH, 15,000 cmETH and 8,000 mETH. The pin marks the United Arab Emirates because the notice does not name a city." }, { "id": "yale-2025", "date": "2025-03-08", "name": "Yale New Haven Health data theft", "victim": "Yale New Haven Health", "country": "United States", "city": "New Haven", "lat": 41.308, "lng": -72.928, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "The hospital notice does not publish a dollar loss.", "sourceName": "Yale New Haven Health", "sourceUrl": "https://www.greenwichhospital.org/news/yale-new-haven-health-notifies-patients-of-data-security-incident", "summary": "On 8 March 2025 Yale New Haven Health found unusual activity and later said an unauthorized party copied patient data that day. The data could include name, date of birth, address, phone, email, race or ethnicity, Social Security number, patient type and medical-record number. The electronic medical record, payment data and employee HR files were not in the theft. Patient care continued." }, { "id": "ms-2025", "date": "2025-04-22", "name": "Marks & Spencer cyberattack", "victim": "Marks & Spencer", "country": "United Kingdom", "city": "London", "lat": 51.514, "lng": -0.152, "type": "disruption", "lossUsd": 403000000, "lossKind": "damages", "lossNote": "M&S estimate, via Reuters, of about £300 million ($403 million) of 2025/26 operating profit before insurance and other mitigation. Counted as reported damages, not cash stolen.", "sourceName": "Reuters", "sourceUrl": "https://www.reuters.com/business/media-telecom/britains-ms-says-cyberattack-cost-400-million-2025-05-21/", "summary": "Marks & Spencer disclosed a cyberattack on 22 April 2025 and suspended online clothing orders on 25 April. On 21 May the company said the attack would cost about £300 million ($403 million) in operating profit, before mitigation, and that online disruption was likely to last into July. Reuters reported that the chief executive would not say whether a ransom was paid." }, { "id": "legal-aid-2025", "date": "2025-04-23", "name": "Legal Aid Agency data breach", "victim": "Legal Aid Agency", "country": "United Kingdom", "city": "London", "lat": 51.503, "lng": -0.112, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "The government notice does not publish a dollar loss.", "sourceName": "UK Government", "sourceUrl": "https://www.gov.uk/government/news/legal-aid-agency-data-breach", "summary": "On 23 April 2025 the Legal Aid Agency learned of a cyberattack on the service providers use to log work and get paid. By 16 May it said the attackers had reached applicant data going back to 2007, which could include contact details, dates of birth, national identity numbers, criminal history, employment and financial data, and in some cases a partner’s information. The systems were taken offline. No loss figure was published." }, { "id": "skt-2025", "date": "2025-04-18", "name": "SK Telecom USIM breach", "victim": "SK Telecom", "country": "South Korea", "city": "Seoul", "lat": 37.566, "lng": 126.978, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "The ministry notice counts records, not won or dollars.", "sourceName": "Ministry of Science and ICT", "sourceUrl": "https://www.msit.go.kr/eng/bbs/view.do?bbsSeqNo=42&nttSeqNo=1139", "summary": "SK Telecom detected abnormal outbound traffic late on 18 April 2025. The public-private investigation later said 25 categories of USIM data, 9.82 GB and about 26.96 million IMSI records, had leaked, and that malware was on 28 servers. The notice does not state a theft or damage figure in money." }, { "id": "coop-2025", "date": "2025-04", "name": "Co-op cyberattack", "victim": "Co-op", "country": "United Kingdom", "city": "", "lat": 54.2, "lng": -2.4, "type": "disruption", "lossUsd": null, "lossKind": "damages", "lossNote": "Co-op said at least £206 million in lost sales. The BBC article does not publish a dollar figure, so it is not in the header total.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.co.uk/news/articles/ckgq9dke4e5o", "summary": "The Co-op said an April 2025 cyberattack cost at least £206 million in lost sales. Stores had empty shelves and payment problems, and the company later said all 6.5 million members had data stolen. The pin marks the United Kingdom. The pound figure stays off the dollar total." }, { "id": "coinbase-2025", "date": "2025-05-11", "name": "Coinbase support-insider breach", "victim": "Coinbase", "country": "United States", "city": "", "lat": 39.83, "lng": -98.58, "type": "breach", "lossUsd": null, "lossKind": "damages", "lossNote": "Coinbase estimated $180 million to $400 million, a range, and refused a $20 million demand. Neither number is added to the total.", "sourceName": "Coinbase Form 8-K", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm", "summary": "On 11 May 2025 Coinbase received an extortion email. The company said overseas support contractors had been paid to copy customer and internal data, including names, contact details, masked identity numbers, government-ID images and account snapshots. Passwords, private keys and customer funds were not taken. Coinbase refused the demand, which its own blog put at $20 million, and estimated remediation and reimbursements at $180 million to $400 million. The pin marks the United States because the filing names no city." }, { "id": "unfi-2025", "date": "2025-06-05", "name": "United Natural Foods outage", "victim": "United Natural Foods", "country": "United States", "city": "Providence", "lat": 41.824, "lng": -71.413, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The 8-K does not publish a dollar loss.", "sourceName": "UNFI Form 8-K", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1020859/000102085925000021/unfi-20250605.htm", "summary": "On 5 June 2025 United Natural Foods found unauthorized activity and took systems offline, which stopped it fulfilling and distributing customer orders. The company said on 26 June that core ordering and invoicing systems were restored. The June 8-K does not give a dollar figure." }, { "id": "aflac-2025", "date": "2025-06-12", "name": "Aflac unauthorized access", "victim": "Aflac", "country": "United States", "city": "Columbus", "lat": 32.461, "lng": -84.988, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "Aflac said the potential loss could not be reasonably estimated.", "sourceName": "Aflac SEC filing", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/4977/000162828026011402/R25.htm", "summary": "Aflac identified unauthorized access to a limited number of U.S. systems on 12 June 2025 and said it contained the access within hours. The systems were not hit by ransomware, and policy service continued. In December 2025 the company said personal information of about 22.65 million people was involved, and that it could not reasonably estimate the loss." }, { "id": "qantas-2025", "date": "2025-06-30", "name": "Qantas contact-centre breach", "victim": "Qantas", "country": "Australia", "city": "Sydney", "lat": -33.869, "lng": 151.209, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "Qantas published a customer count, not a dollar loss.", "sourceName": "Reuters", "sourceUrl": "https://www.reuters.com/world/asia-pacific/qantas-confirms-over-million-customers-personal-information-leaked-2025-07-09/", "summary": "On 30 June 2025 Qantas detected unusual activity on a third-party platform used by a contact centre. Reuters reported that Qantas later put the unique customers at 5.7 million, after removing duplicates from an initial 6 million service records. Stolen fields included phone numbers, birth dates or home addresses for more than a million customers, and name and email for about four million more. Card, financial and passport details were not in that system." }, { "id": "coupang-2025", "date": "2025-06-24", "name": "Coupang account breach", "victim": "Coupang", "country": "South Korea", "city": "Seoul", "lat": 37.52, "lng": 127.04, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "Coupang published an account count, not a dollar loss.", "sourceName": "BleepingComputer", "sourceUrl": "https://www.bleepingcomputer.com/news/security/retail-giant-coupang-suffers-data-breach-impacting-337-million-people/", "summary": "Coupang said unauthorized access on 24 June 2025 exposed personal information from 33.7 million accounts. It found the access on 18 November 2025, first as about 4,500 accounts, then the wider set. Exposed data included names, phone numbers, email addresses, physical addresses and order information. Payment data and passwords were not exposed. No dollar loss was published." }, { "id": "allianz-2025", "date": "2025-07-16", "name": "Allianz Life CRM breach", "victim": "Allianz Life", "country": "United States", "city": "Minneapolis", "lat": 44.978, "lng": -93.265, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "The notice counts people, not dollars.", "sourceName": "BleepingComputer", "sourceUrl": "https://www.bleepingcomputer.com/news/security/allianz-life-says-july-data-breach-impacts-15-million-people/", "summary": "Allianz Life said a threat actor got into a cloud system it used on 16 July 2025 and took personal information on customers, financial professionals and some employees. BleepingComputer, quoting the company’s notice and its report to U.S. authorities, put the total at 1,497,036 people. Exposed data included names, addresses, dates of birth and Social Security numbers. No dollar loss was stated." }, { "id": "jlr-2025", "date": "2025-08", "name": "Jaguar Land Rover shutdown", "victim": "Jaguar Land Rover", "country": "United Kingdom", "city": "Solihull", "lat": 52.412, "lng": -1.778, "type": "disruption", "lossUsd": 2550000000, "lossKind": "damages", "lossNote": "Cyber Monitoring Centre central estimate of £1.9 billion, which Reuters reported as $2.55 billion. The centre’s modelled range is £1.6 billion to £2.1 billion, and it called the figure scenario analysis rather than confirmed accounts. Counted as reported damages.", "sourceName": "Reuters", "sourceUrl": "https://www.reuters.com/sustainability/boards-policy-regulation/jaguar-land-rover-hack-cost-uk-economy-25-billion-report-says-2025-10-22/", "summary": "In late August 2025 Jaguar Land Rover shut internal IT and stopped manufacturing, including at Solihull, Halewood and Wolverhampton. On 22 October the Cyber Monitoring Centre estimated a £1.9 billion hit to the UK, affecting more than 5,000 organisations, mostly from lost manufacturing output. Reuters reported that estimate as $2.55 billion. It is an economy-wide damage model, not cash taken from the company." }, { "id": "harrods-2025", "date": "2025-09", "name": "Harrods customer-record theft", "victim": "Harrods", "country": "United Kingdom", "city": "London", "lat": 51.499, "lng": -0.163, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "Harrods described the stolen records and did not publish a dollar loss.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cpq5w324pd3o", "summary": "In late September 2025 Harrods said data on 430,000 customer records was stolen from a third-party provider. The company said the data was basic contact and marketing information, not passwords or payment details, and that it would not engage with the threat actor. It said this theft was separate from an attempted intrusion in May. No dollar figure was published." }, { "id": "collins-2025", "date": "2025-09-19", "name": "Collins Aerospace MUSE ransomware", "victim": "Collins Aerospace", "country": "United States", "city": "Charlotte", "lat": 35.227, "lng": -80.843, "type": "ransomware", "lossUsd": null, "lossKind": null, "lossNote": "RTX said the incident was not expected to be material to the company. No dollar figure was published.", "sourceName": "RTX Form 8-K", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/101829/000010182925000036/rtx-20250919.htm", "summary": "On 19 September 2025 RTX said ransomware hit systems that support Collins Aerospace’s MUSE passenger-processing software, which sits on customer networks rather than the RTX enterprise network. Airlines and airports moved to backup or manual check-in and had delays and cancellations. RTX said the incident was not expected to be material to its results." }, { "id": "upbit-2025", "date": "2025-11-27", "name": "Upbit Solana-asset theft", "victim": "Upbit", "country": "South Korea", "city": "Seoul", "lat": 37.57, "lng": 127.03, "type": "breach", "lossUsd": null, "lossKind": "stolen", "lossNote": "Dunamu’s CEO told Yonhap the transfer was about 54 billion won (US$36.9 million). Reuters, also citing Yonhap, reported 44.5 billion won ($30.4 million). The dollar figures disagree, so neither is added.", "sourceName": "Yonhap", "sourceUrl": "https://en.yna.co.kr/view/AEN20251127007651320", "summary": "At 4:42 a.m. on 27 November 2025 Solana-related assets left Upbit for an unauthorized wallet. Dunamu’s chief executive told Yonhap the amount was about 54 billion won (US$36.9 million) and that Upbit would cover it so customers were not left with the loss. A later Reuters report, also citing Yonhap, said 44.5 billion won ($30.4 million). Because those dollar figures do not match, the board leaves the amount off the total." }, { "id": "poland-grid-2025", "date": "2025-12-29", "name": "Poland energy-sector attack", "victim": "Polish energy operators", "country": "Poland", "city": "", "lat": 52.07, "lng": 19.4, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The government report does not publish a damage figure in money.", "sourceName": "Poland Ministry of Digital Affairs", "sourceUrl": "https://www.gov.pl/web/cyfryzacja/cyberatak-na-infrastrukture-sektora-energii-w-polsce-opublikowano-szczegolowy-raport-cert-polska", "summary": "On 29 December 2025 a coordinated destructive attack hit Polish energy infrastructure: wind and solar farms, a private manufacturer, and a combined heat and power plant serving almost half a million heat customers. CERT Polska said the malware was built to destroy data and stop industrial equipment. Power supplies were not cut. The ministry linked the activity to clusters including Static Tundra, Berserk Bear, Ghost Blizzard and Dragonfly. No monetary loss was published." }, { "id": "ficoba-2026", "date": "2026-01", "name": "France bank-account registry", "victim": "DGFiP", "country": "France", "city": "Paris", "lat": 48.857, "lng": 2.352, "type": "breach", "lossUsd": null, "lossKind": null, "lossNote": "The tax authority published an account count, not a euro or dollar loss.", "sourceName": "DGFiP", "sourceUrl": "https://www.impots.gouv.fr/actualite/acces-illegitimes-au-fichier-national-des-comptes-bancaires-ficoba", "summary": "From the end of January 2026 someone using a civil servant’s credentials consulted France’s national bank-account file, FICOBA. DGFiP said the access concerned about 1.2 million accounts and could include IBAN, the holder’s identity and address. A 27 February update said the tax identifier was not viewed. Access was restricted, and the people affected were to be notified. No monetary loss was published." }, { "id": "ummc-2026", "date": "2026-02-19", "name": "UMMC ransomware", "victim": "University of Mississippi Medical Center", "country": "United States", "city": "Jackson", "lat": 32.299, "lng": -90.185, "type": "ransomware", "lossUsd": null, "lossKind": null, "lossNote": "The medical center has not published a dollar loss.", "sourceName": "University of Mississippi Medical Center", "sourceUrl": "https://www.umc.edu/news/VCNotes/2026/02/20.html", "summary": "On 19 February 2026 the University of Mississippi Medical Center took its systems down after a ransomware attack. The electronic health record and phones were out. Clinics and elective procedures were cancelled for Thursday and Friday. Inpatient care continued on paper, and emergency departments stayed open. A later note said operations were largely back by 28 February. No dollar figure was published." }, { "id": "stryker-2026", "date": "2026-03-11", "name": "Stryker systems disruption", "victim": "Stryker", "country": "United States", "city": "Kalamazoo", "lat": 42.292, "lng": -85.587, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "Stryker said the financial impact was not yet known.", "sourceName": "Stryker Form 8-K", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/310764/000119312526102460/d76279d8k.htm", "summary": "On 11 March 2026 Stryker identified a cybersecurity incident that disrupted its Microsoft environment worldwide. The company said it had no indication of ransomware or malware and believed the incident was contained. Ordering, manufacturing and shipping were affected. It had not yet decided whether the financial impact would be material." }, { "id": "boston-scientific-2026", "date": "2026-08-25", "name": "Boston Scientific outage", "victim": "Boston Scientific", "country": "United States", "city": "Marlborough", "lat": 42.346, "lng": -71.552, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "Boston Scientific said the financial impact was not yet known.", "sourceName": "Boston Scientific Form 8-K", "sourceUrl": "https://www.sec.gov/Archives/edgar/data/885725/000088572526000056/bsx-20260826.htm", "summary": "On 25 August 2026 Boston Scientific identified a cybersecurity incident that disrupted operations worldwide, including systems used to process and ship customer orders. The 26 August filing said the timeline for full restoration was unknown and that the company had not yet determined whether the impact would be material." }, { "id": "france-fridges-2026", "date": "2026-10-12", "name": "French supermarket refrigeration attack", "victim": "French grocery stores", "country": "France", "city": "", "lat": 46.6, "lng": 2.2, "type": "disruption", "lossUsd": null, "lossKind": "damages", "lossNote": "BBC reported food losses estimated at tens of millions of euros. That is not a dollar figure, so it is not in the total.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "The BBC said a cyberattack three weeks before the 2 November wave disrupted refrigeration at as many as 700 French grocery stores. Food losses were estimated at tens of millions of euros. That estimate is not a dollar figure, so it stays off the total." }, { "id": "belgium-fridges-2026", "date": "2026-11-02", "name": "Belgian supermarket refrigeration attack", "victim": "Belgian supermarkets", "country": "Belgium", "city": "Brussels", "lat": 50.85, "lng": 4.35, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "Neither the BBC report nor the Belgian cybersecurity centre published a dollar loss.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "On 2 November 2026 Belgian supermarkets were among the hardest hit when store refrigeration was taken over. Dozens of stores reported failures, temperatures across the European wave reached 50C, and federal prosecutors opened an investigation. A Delhaize manager told the BBC the shop had to throw food away. No loss figure was published." }, { "id": "ireland-fridges-2026", "date": "2026-11-02", "name": "SuperValu refrigeration incident", "victim": "Musgrave Group", "country": "Ireland", "city": "Dublin", "lat": 53.35, "lng": -6.26, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "Musgrave did not publish a loss figure.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "Musgrave Group said a cyber-incident on 2 November 2026 affected refrigeration at 13 SuperValu stores in Ireland. A spokesman said replenishment of chilled and frozen food was already under way. No loss figure was published." }, { "id": "germany-fridges-2026", "date": "2026-11-02", "name": "Rewe Büsken refrigeration attack", "victim": "Rewe Büsken", "country": "Germany", "city": "", "lat": 51.16, "lng": 10.45, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "Rewe did not publish a loss figure.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "Rewe told the BBC that refrigeration at its Büsken supermarket in western Germany failed after a cyberattack on system provider Danfoss. The systems were back the same afternoon, 2 November 2026. The pin marks Germany. No loss figure was published." }, { "id": "portugal-fridges-2026", "date": "2026-11-02", "name": "Intermarché refrigeration attack", "victim": "Mosqueteiros", "country": "Portugal", "city": "", "lat": 39.5, "lng": -8.0, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "Mosqueteiros did not publish a loss figure.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "The Mosqueteiros group said incidents at seven Intermarché stores in Portugal were linked to a cyberattack. It said the attack appeared to target an outside provider that manages the refrigeration systems. No loss figure was published." }, { "id": "italy-fridges-2026", "date": "2026-11-02", "name": "Italy refrigeration attacks", "victim": "Italian retailers", "country": "Italy", "city": "Sicily", "lat": 37.5, "lng": 14.2, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The Italian government did not publish a loss figure.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "Italy’s government said the European refrigeration attacks had a very limited impact: a few shops, mostly still running obsolete systems with interfaces exposed to the internet. The BBC, citing the national cybersecurity agency, reported at least four Co-op supermarkets in Sicily and one business in Tuscany. Palazzo Chigi said it had found no case of a health risk from thawing. No loss figure was published." }, { "id": "netherlands-fridges-2026", "date": "2026-11-02", "name": "Netherlands refrigeration disruption", "victim": "Dutch shops", "country": "Netherlands", "city": "", "lat": 52.13, "lng": 5.29, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The report does not publish a loss figure.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "The BBC reported that a small number of corner shops in the Netherlands lost refrigeration in the 2 November wave. It did not name the shops or publish a loss figure." }, { "id": "luxembourg-fridges-2026", "date": "2026-11-02", "name": "Luxembourg refrigeration incidents", "victim": "Luxembourg supermarkets", "country": "Luxembourg", "city": "Luxembourg", "lat": 49.61, "lng": 6.13, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The advisory does not publish a loss figure.", "sourceName": "Centre for Cybersecurity Belgium", "sourceUrl": "https://ccb.belgium.be/advisories/warning-update-security-incidents-across-europe-targeting-remote-controllers", "summary": "The Belgian cybersecurity centre said the November wave of attacks on exposed refrigeration controllers reached Luxembourg as well as Belgium, the Netherlands, Sweden, Ireland and Estonia. Attackers forced units into defrost cycles as high as 50C. The notice does not name a Luxembourg chain or a loss figure." }, { "id": "estonia-fridges-2026", "date": "2026-11-02", "name": "Estonia supermarket refrigeration attack", "victim": "Estonian supermarket", "country": "Estonia", "city": "Tallinn", "lat": 59.44, "lng": 24.75, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The report does not publish a loss figure.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "Estonian public broadcaster ERR reported that hackers raised the refrigeration temperature to 50C in at least one supermarket during the 2 November wave. The BBC carried that account. No chain name and no loss figure were published." }, { "id": "uk-fridges-2026", "date": "2026-11-02", "name": "UK food-supply refrigeration exploits", "victim": "UK food-supply operators", "country": "United Kingdom", "city": "", "lat": 53.0, "lng": -1.5, "type": "disruption", "lossUsd": null, "lossKind": null, "lossNote": "The NCSC said the full impact was not known.", "sourceName": "BBC News", "sourceUrl": "https://www.bbc.com/news/articles/cwy8lm1m59mvo", "summary": "The head of the UK National Cyber Security Centre told the BBC that a couple of organisations had vulnerable refrigeration technology exploited after the European attacks. He said it ran through the food supply chain, not only supermarkets, and that the full impact was not known. No loss figure was published." } ] }