CRWD Software / service outage
Jul 19, 2024 CrowdStrike
A faulty Falcon content update caused Windows crashes across millions of hosts and disrupted critical services worldwide.
1-month vs SPY -23.5 pp Below SPY
Recovery Recovered
Incident catalog
Thirty cases. Pick one and see what happened.
Search by company or ticker. Filter by incident type, year, recovery or available data. Every case also includes a 14-day media-attention summary and article register.
T Privacy breach
Jul 12, 2024 AT&T
AT&T disclosed that threat actors illegally downloaded call and text interaction records covering nearly all wireless customers for specified periods.
1-month vs SPY +7.2 pp Above SPY
Recovery Recovered
UNH Ransomware
Feb 21, 2024 UnitedHealth Group (Change Healthcare)
The Change Healthcare ransomware attack disrupted US claims, pharmacy and payment infrastructure on a national scale.
1-month vs SPY -10.7 pp Below SPY
Recovery Recovered
MSFT Security breach
Jan 19, 2024 Microsoft
Microsoft disclosed that Midnight Blizzard accessed and exfiltrated email from a small percentage of corporate accounts, including senior leadership.
1-month vs SPY -2.0 pp Below SPY
Recovery Recovered
CZR Ransomware
Sep 14, 2023 Caesars Entertainment
Caesars disclosed a social-engineering attack through an outsourced IT support vendor that led to theft of loyalty-program customer data.
1-month vs SPY -16.0 pp Below SPY
Recovery Not recovered within 24 months
MGM Ransomware
Sep 11, 2023 MGM Resorts International
MGM disclosed a cybersecurity issue that forced system shutdowns and disrupted hotel and casino operations across multiple US properties.
1-month vs SPY -11.4 pp Below SPY
Recovery Recovered
CLX Disruptive cyberattack
Aug 14, 2023 The Clorox Company
Clorox disclosed unauthorized activity that forced systems offline and later caused widescale operational, order-processing and product-availability disruption.
1-month vs SPY -7.2 pp Below SPY
Recovery Recovered
PRGS Supply-chain compromise
May 31, 2023 Progress Software
Progress disclosed a zero-day vulnerability in MOVEit Transfer that was exploited across many customer environments in a mass data-theft campaign.
1-month vs SPY -8.8 pp Below SPY
Recovery Recovered
UBER Security breach
Sep 15, 2022 Uber Technologies
Uber disclosed a compromise of internal systems after an attacker used a contractor's credentials and gained access to several employee tools.
1-month vs SPY -17.5 pp Below SPY
Recovery Recovered
TWLO Security breach
Aug 7, 2022 Twilio
Twilio disclosed that a social-engineering campaign stole employee credentials and enabled access to data associated with customer accounts.
1-month vs SPY -16.2 pp Below SPY
Recovery Recovered
OKTA Supply-chain compromise
Mar 22, 2022 Okta
Okta confirmed that an attacker had accessed a third-party support engineer's laptop and could interact with limited customer-support data.
1-month vs SPY -15.4 pp Below SPY
Recovery Not recovered within 24 months
TMUS Privacy breach
Aug 16, 2021 T-Mobile US
T-Mobile confirmed unauthorized access to its data and later identified tens of millions of current, former and prospective customers in stolen files.
1-month vs SPY -11.3 pp Below SPY
Recovery Recovered
FSLY Software / service outage
Jun 8, 2021 Fastly
A latent Fastly software bug triggered by a valid customer configuration caused a broad global outage across its edge network.
1-month vs SPY +6.1 pp Above SPY
Recovery No initial drop
GRMN Ransomware
Jul 23, 2020 Garmin
A ransomware attack encrypted Garmin systems and interrupted online services, customer support, applications and company communications.
1-month vs SPY -2.8 pp Below SPY
Recovery Recovered
CTSH Ransomware
Apr 18, 2020 Cognizant Technology Solutions
Cognizant disclosed a Maze ransomware attack on internal systems that caused service disruption for some clients.
1-month vs SPY -4.2 pp Below SPY
Recovery Recovered
COF Privacy breach
Jul 29, 2019 Capital One Financial
Capital One disclosed unauthorized access affecting about 100 million people in the United States and 6 million in Canada.
1-month vs SPY -7.7 pp Below SPY
Recovery Recovered
MAR Privacy breach
Nov 30, 2018 Marriott International
Marriott disclosed long-running unauthorized access to the legacy Starwood reservation database, affecting hundreds of millions of guest records.
1-month vs SPY -2.9 pp Below SPY
Recovery Recovered
FB Data misuse
Mar 17, 2018 Facebook (now Meta Platforms)
Reporting and Facebook's response exposed large-scale misuse of platform-derived user data by Cambridge Analytica and related parties.
1-month vs SPY -7.4 pp Below SPY
Recovery Recovered
EFX Privacy breach
Sep 7, 2017 Equifax
Equifax disclosed unauthorized access involving sensitive identity information for roughly 143 million US consumers at the initial announcement.
1-month vs SPY -25.5 pp Below SPY
Recovery Recovered
FDX Destructive cyberattack
Jun 27, 2017 FedEx
NotPetya significantly disrupted FedEx subsidiary TNT Express worldwide, affecting communications, operations, revenue and restoration work.
1-month vs SPY -5.2 pp Below SPY
Recovery Recovered
MRK Destructive cyberattack
Jun 27, 2017 Merck & Co.
NotPetya disrupted Merck's worldwide manufacturing, research and sales operations and produced hundreds of millions of dollars in recorded effects.
1-month vs SPY -5.0 pp Below SPY
Recovery Recovered
MDLZ Destructive cyberattack
Jun 27, 2017 Mondelez International
The NotPetya malware incident affected a significant portion of Mondelez's global sales, distribution and financial networks.
1-month vs SPY -2.6 pp Below SPY
Recovery Recovered
ANTM Privacy breach
Feb 4, 2015 Anthem (now Elevance Health)
Anthem disclosed a sophisticated external attack that obtained personal information associated with tens of millions of people.
1-month vs SPY +3.4 pp Above SPY
Recovery Recovered
SNE Destructive cyberattack
Nov 24, 2014 Sony Group
A destructive attack on Sony Pictures disabled systems, exposed sensitive business and employee data, and disrupted studio operations.
1-month vs SPY -0.7 pp Below SPY
Recovery No initial drop
JPM Security breach
Oct 2, 2014 JPMorgan Chase
JPMorgan Chase disclosed that a cyberattack compromised contact information associated with 76 million households and 7 million businesses.
1-month vs SPY -1.0 pp Below SPY
Recovery No initial drop
HD Security breach
Sep 8, 2014 The Home Depot
Home Depot confirmed a breach of payment systems at US and Canadian stores, later reporting exposure involving up to 56 million cards.
1-month vs SPY +4.5 pp Above SPY
Recovery Recovered
EBAY Security breach
May 21, 2014 eBay
eBay disclosed that compromised employee credentials enabled access to a customer database and asked all users to reset passwords.
1-month vs SPY -10.0 pp Below SPY
Recovery Recovered
TGT Security breach
Dec 19, 2013 Target
Target confirmed unauthorized access to payment-card data from US stores during the peak holiday shopping period.
1-month vs SPY -6.8 pp Below SPY
Recovery Recovered
ADBE Security breach
Oct 3, 2013 Adobe
Adobe disclosed unauthorized access to customer information and source code for multiple products, followed by a broad password reset.
1-month vs SPY +1.8 pp Above SPY
Recovery Recovered
TJX Security breach
Jan 17, 2007 The TJX Companies
TJX disclosed an intrusion into systems processing customer transactions after investigators found that payment-card data had been stolen.
1-month vs SPY -6.3 pp Below SPY
Recovery Recovered
No cases match those filters
Change or reset the filters. The catalog is curated, so a missing company does not mean it never had an incident.