US Breach Radar

Cyber incidents disclosed by US organisations, counted daily from SEC 8-K filings, HHS breach reports, state attorney-general notices and the press: how many, how big, by which route, and how long notification took.

Edition
Reference period
Coverage
Nature of this edition
Generated automatically from public sources. Route and sector classification is partly AI-assisted; the most recent 60 days are incomplete.

1Summary

Table 1Incidents by window

2Statistics

Tables 3 to 6 and Figures 2 and 3 follow the window selected here and in section 1. Table 2 and Figure 1 always show the last 24 months.

Table 2Monthly disclosures by channel, last 24 months

Figure 1Incidents per month by channel

    Table 3Individuals affected

    Figure 2Incidents by size of the affected population

    Table 4By sector
    Table 4By route

    Table 5Discovery-to-notification lag, days

    Figure 3Lag from discovery to notification

      Table 6Exploited vulnerabilities named in disclosures

      3Register

      One row per incident. Route, type and sector are classified from the cited sources (rules first, AI-assisted where the source text allows). Open a row for official notices, cited sources and any named vulnerability. Organisation names are as listed by the reporting body.

      Incident register

      4Playbooks by route

      Written by hand. Each describes what a route usually looks like in a disclosure, what to protect, what to confirm, and the wording that signals it. Routes still without a playbook are marked.

      5Method

        6How to cite

        Recommended citation

        Corrections
        [email protected]
        Publisher
        BA Cybersecurity, Tokyo, Japan · ba-cybersecurity.com
        Data
        data.json (the page is rendered from this file)