Conti’s leaked source is still producing operations four years on, and this one gets in through patched CVEs.
Ambulatory cardiac data is continuous, and continuous physiology is a behavioural record collected for a clinical reason.
Two days on manual processes with essential services maintained. The difference between a continuity document and a capability shows in the first hour.
Every sector that survived an outage this year did it on a manual fallback inherited from an earlier era. Digital-only removed it on purpose.
Plants on four continents stopped, most of them never attacked. Assessed at £1.9 billion — the UK’s costliest cyber incident.
Eight per cent, in a scheme with a stable definition and eight years of continuity, is the most credible year-on-year change in this database.
Removing seven participants from a population defined by willingness rather than skill leaves the population substantially intact.
The window between disclosure and exploitation is shortest exactly where the ability to respond is slowest.
Stolen data eventually appears. Unavailable data is noticed immediately. Altered data continues to be used.
The equipment is not unpatched through neglect. It is unpatchable — commissioned to run continuously for thirty years, by a vendor that may no longer exist.
A single business email compromise took $7.9 million. A continental operation recovered $3 million.
Nineteen days inside a dialysis provider, 2.7 million records taken, and treatment never stopped. The continuity is the underreported part.
A support portal is a production system. 18,000 schools did not make 18,000 bad decisions — but the security did not scale with the concentration.
A file list is aimed past the victim, at the customers who now have to ask.
Tax collection stopping is fiscal. Customs stopping means the containers do not move.
A backlog, a staffing problem, and trouble encrypting large files. It reads like a company.