MKT—KSA / 06
Attacks on companies and nations
An expanded archive of documented attack paths, disruption and response across companies, nations and critical systems.
- 2024-02-2101Healthcare / United States
Change Healthcare
Open case file ↗01 Path
Access using compromised credentials to an environment without multifactor authentication.
02 Impact
Claims, payment and prescription services were disrupted nationally, affecting healthcare providers.
- 2023-05-3102Multiple organizations / Global
MOVEit Transfer exploitation
Open case file ↗01 Path
Exploitation of a SQL-injection flaw in internet-facing MOVEit Transfer instances to steal data.
02 Impact
Multiple organizations faced data theft and extortion; impact varies by each official disclosure.
- 2023-09-1103Hospitality / United States
MGM Resorts
Open case file ↗01 Path
A cybersecurity issue affected IT systems; the initial filing did not specify the entry path.
02 Impact
The company shut down systems as a precaution and experienced operational disruption.
- 2022-07-1504Government / Albania
Albania government networks
Open case file ↗01 Path
State-sponsored actors used initial access followed by wiping and destructive tooling against government networks.
02 Impact
Digital government services were disrupted and systems and data were damaged in a documented destructive campaign.
- 2022-04-1705Government / Costa Rica
Costa Rica — Conti
Open case file ↗01 Path
A ransomware campaign targeted government bodies; the government source did not publish the complete entry path.
02 Impact
Customs and tax platforms were disrupted, affecting foreign trade and public services.
- 2022-02-2406Satellite communications / Ukraine and Europe
Viasat KA-SAT
Open case file ↗01 Path
A cyber operation targeted the KA-SAT network as Russia's invasion of Ukraine began.
02 Impact
A significant satellite-communications outage affected users in Ukraine and several European countries.
- 2021-05-0707Energy / United States
Colonial Pipeline
Open case file ↗01 Path
DarkSide-linked ransomware led to precautionary shutdowns across parts of the infrastructure.
02 Impact
Fuel supply across the U.S. East Coast was disrupted, producing market and operational effects.
- 2021-03-0208Mail servers / Global
Microsoft Exchange on-premises
Open case file ↗01 Path
Exploitation of on-premises Exchange flaws to reach email and install web shells.
02 Impact
Multiple organizations faced unauthorized access and persistence inside mail servers.
- 2020-12-1309Government and enterprise / Supply chain
SolarWinds Orion
Open case file ↗01 Path
Malicious code inside signed, trusted Orion updates reached customer networks.
02 Impact
Long-lived covert access to government and private networks, including data and credential theft.
- 2017-06-2710Enterprise and government / Global
NotPetya
Open case file ↗01 Path
A compromised M.E.Doc update was followed by internal spread through SMB, credentials and administrative tools.
02 Impact
Broad disruption and irrecoverable encryption affected transport, pharmaceuticals, government and other sectors, with losses in the billions.
- 2017-05-1211National healthcare / United Kingdom
NHS — WannaCry
Open case file ↗01 Path
Worm propagation through unpatched Windows systems and SMBv1 flaws.
02 Impact
Hospitals and practices were disrupted, cancelling thousands of appointments and procedures.
- 2017-05-1312Credit data / United States
Equifax
Open case file ↗01 Path
Exploitation of a web-application vulnerability to reach internal files.
02 Impact
Personal data belonging to millions of consumers was exposed, including identifiers and sensitive financial records.
- 2016-02-0413Financial sector / Bangladesh
Bangladesh Bank cyber theft
Open case file ↗01 Path
Compromise of the bank environment and fraudulent SWIFT messages in an international bank-theft campaign.
02 Impact
Attackers transferred tens of millions of dollars, while additional transfers were stopped after detection.
- 2015-12-2314Energy / Ukraine
Ukraine power distribution
Open case file ↗01 Path
Access to electricity-distribution networks was followed by operational control and deliberate system disruption.
02 Impact
Power was lost for a large customer population, while call centers and operational components were affected.
- 2015-06-0415Government personnel data / United States
U.S. Office of Personnel Management
Open case file ↗01 Path
Compromise of personnel and background-investigation systems; the public summary does not provide the complete entry path.
02 Impact
Current and former employee data, background-investigation records and fingerprints were exposed across linked incidents.
- 2012-08-1516Energy / Saudi Arabia
Shamoon / Saudi Aramco
Open case file ↗01 Path
The initial entry vector was not officially resolved; the malware propagated inside the business environment through network shares.
02 Impact
The malware wiped workstation data and disrupted a large part of the business network while production systems remained isolated.