Four 2024 Incidents Did Their Damage by Stopping Things, Not Taking Them

This desk files availability as the half of security nobody counts: breach law is built around confidentiality, an incident where nothing is stolen but a service stops generates no notification and no statistic, and the harm to the affected person is immediate and concrete.

Four incidents from 2024 make that case better than the argument ever did.

192.7 million at Change Healthcare. 5.6 million at Ascension. Around a million potentially affected at Synnovis. Those figures exist because a law requires them.

No equivalent figure exists for a month of paper charting or two weeks of manual sales, because no law requires one. The corpus has been reading the record through the only aperture the record has.

What changed is that at 24-0604 an NHS trust’s own patient safety investigation connected an outage to a death. That is the mechanism the corpus filed as missing at 25-1219 — the one connecting an incident to a person — appearing once.

What did not change is the counting. One finding, arrived at because a health service investigates deaths as a matter of course, is not a measurement regime. It is an accident of a sector that already had one.

Four incidents is not a year and not a sample. They are here because they were large, Western, and covered — which is the same selection this corpus documented at 25-0502 and measured against incident-response data at 25-1225b.

Graded medium. The individual facts are established in the linked files; the claim that 2024 was distinctive is this desk’s reading, and a reading built on the four cases the record happened to preserve.