Index live· 1,284 files · 148 editions
ForensicPost

Search the index

29 results
Try
Results for “Cost”Newest first
26-0812
File

Lazarus Paired a Windows Zero-Day With Post-Quantum Encryption Against Defence Firms

Adopting ML-KEM cost the attacker one library. It costs a defence contractor its entire estate.

Lazarus GroupCVE-2026-68820 — Windows AFD.sysDefenceEspionage
Sev 5TargetDefence, aerospace and aviation firmsActorLazarus GroupNot established
26-0716
File

Craneware Discloses Compromise of Hospital Billing and Pricing Software

Revenue-cycle software for thousands of hospitals. Billing data is clinical data wearing an accounting costume.

UnattributedUnder reviewHealthcareHealthcare
Sev 3TargetCranewareActorUnattributedUSA
26-0712
File

Deepfakes Reported in 40% of Business Email Compromise Incidents

BEC was already the costliest category using plain text and patience. Synthesis removed the last verification step people actually used.

MultipleBEC with synthetic mediaFinanceFraud
Sev 4TargetCorporate payment processesActorMultiple
26-0514
File

Post-quantum Migration Costed at $15 Billion Globally

The algorithms are free. The $15 billion is discovery, hardware replacement and re-certification — and small institutions will not be paying it.

UnattributedStandards migrationMultipleCryptography
Sev 3TargetGlobal cryptographic estateActorUnattributed
26-0413
File

You Outsourced the Help Desk and Kept the Consequences

The contract moves the work, the staffing and the cost. It does not move the consequence of resetting the wrong person’s credential.

Scattered SpiderHelp-desk social engineeringMultipleIdentity
Sev 4TargetOutsourced IT service desksActorScattered Spider
26-0411
File

M&S and Co-op Intrusions Assessed as a Single Event Costing up to £440 Million

A phone call to an outsourced service desk, a password reset, and £270–440 million across two retailers assessed as one event.

Scattered SpiderHelp-desk social engineeringRetailRetail
Sev 5TargetMarks & Spencer and Co-opActorScattered Spider
26-0304
File

US Healthcare Downtime Costs Around $900,000 per Day

$900,000 a day against demands in the low millions. Printing those two numbers together constructs the attacker’s argument for them.

MultipleRansomwareHealthcareHealthcare
Sev 4TargetUS healthcare providersActorMultipleUSA
26-0207
File

Thirteen Letters About Selling Americans’ Data Abroad

Espionage acquires data covertly at cost and risk. The same categories are purchasable, leaving no incident for anyone to file.

UnattributedRegulatoryMultipleData brokers
Sev 3TargetUS data broker marketActorUnattributedUSA
26-0131
File

Emergency Dispatch Survived Both Municipal Ransomware Incidents This Quarter

Two cities, two attacks, dispatch survived both. The cost is annual and questioned; the benefit is a disaster that cannot be evidenced.

MultipleRansomwarePublic sectorPublic sector
Sev 3TargetMunicipal emergency systemsActorMultiple
26-0119
File

Jaguar Land Rover Intrusion Halted Production and Cost £1.9 Billion

Plants on four continents stopped, most of them never attacked. Assessed at £1.9 billion — the UK’s costliest cyber incident.

UnattributedManufacturingManufacturing
Sev 5TargetJaguar Land RoverActorUnattributedUnited Kingdom
25-1127
File

Nevada Published a $1.5 Million Incident Response Bill

The only reliable incident costs in this corpus come from organisations that had no choice but to publish them.

UnattributedRansomwarePublic sectorAnalysis
Sev 3TargetNevada state governmentActorUnattributedUSA
25-1011
File

Seven Hundred and Forty Thousand Records, and the Shops Shut

One of very few files here where the corpus can see both halves of the cost — the records and the stoppage.

RansomHouseLogisticsLogistics
Sev 4TargetAskul CorporationActorRansomHouse
25-1011b
File

Self-service Moved the Identity Boundary Onto the Employee

Self-service is not a convenience feature with a security cost. It is a decision about who holds authority.

MultipleDelegated authority abuseMultipleMethod
Sev 4TargetSelf-service estatesActorMultiple
25-1004c
File

Jaguar Land Rover Cut Hundreds of Roles After the Attack

Breach registers count individuals. Cost surveys estimate dollars. Nothing counts jobs.

Scattered Lapsus$ HuntersDownstream of 25-0902ManufacturingManufacturing
Sev 4TargetJaguar Land RoverActorScattered Lapsus$ Hunters
25-0910
File

Five Million Dollars a Breach, and Fewer Firms Are Insured

The cost went up and the cover went down. Every available explanation for that is uncomfortable.

MultipleVariousLegalLegal
Sev 3TargetLegal sectorActorMultiple
25-0721
File

Ninety-four per Cent of Tested Agents Could Be Hijacked by What They Read

Recruiting an insider costs money, time and exposure to prosecution. Persuading an agent costs a paragraph and works every time.

MultiplePrompt injectionCloudExploitation
Sev 4TargetAI agent deploymentsActorMultiple
25-0505
File

A Steel Producer Stopped Its Own Furnaces

Furnaces have physical states that are expensive to leave. Stopping cost real money before the attacker did anything — and they stopped on detection.

UnattributedManufacturingManufacturing
Sev 3TargetNorth American steel producerActorUnattributedUSA
25-0325
File

Understaffed Breaches Cost $1.76 Million More

Avoided-loss reasoning is unfalsifiable. A differential compares what actually happened to two groups — in the currency budgets are written in.

MultipleWorkforce
Sev 3TargetUnderstaffed organisationsActorUnattributed
25-0216
File

Southern Water Disclosed £4.5 Million of Costs From the Black Basta Attack

Response cost and extortion demand are different quantities. The phrase “the attack cost £4.5m” invites the error of treating them as one.

Black BastaWaterCost
Sev 4TargetSouthern WaterActorBlack BastaUnited Kingdom
24-1205
File

Termite Claims Blue Yonder Data and Says It Will Reuse the Email Lists

A stated plan costs nothing to announce and cannot be checked, and it raises pressure on the victim at no risk to the group.

TermiteExtortionRetailVerification
Sev 4TargetBlue YonderActorTermiteUSA
24-1125
File

Starbucks and Morrisons Fell Back to Manual Processes After Blue Yonder Outage

A slower process for tinned goods costs margin. A slower process for produce costs the produce.

TermiteRetailFallback
Sev 4TargetBlue Yonder customersActorTermiteUnited Kingdom
24-1024
File

The City Dropped It, and the Record Stands Corrected

A wrong assurance cost nothing. A correct correction cost a lawsuit and months under an order.

RhysidaPublic sectorAccountability
Sev 3TargetCity of ColumbusActorRhysidaUSA
24-0901
File

Transport for London Penetrated Over Three Days in August 2024

The case where the availability cost is documented and the confidentiality count is the footnote.

Scattered SpiderPublic sectorIdentity
Sev 4TargetTransport for LondonActorScattered SpiderUnited Kingdom
24-0722
File

Insurers Put CrowdStrike Outage Cost to US Fortune 500 at $5.4 Billion

Liability caps sever the connection between the cost of a defect and the party positioned to prevent it.

Faulty vendor updateMultipleFunding
Sev 5TargetCrowdStrike Falcon customersActorUnattributedUSA
24-0719
File

CrowdStrike Content Update Crashed Windows Systems Worldwide

Identical harm, no attacker, and the same absence of any obligation to measure what it cost.

Faulty vendor updateMultipleAvailability
Sev 5TargetCrowdStrike Falcon customersActorUnattributed
24-0413
File

Twelve Point Nine Million Records, and No Money to Write the Letters

The practical entitlement reads: you will be told, unless telling you costs more than the organisation has left.

HealthcareVictims
Sev 4TargetMediSecureActorUnattributedAustralia
23-0911
File

MGM Resorts Put the Cost of Its September Attack at About $100 Million

A breach notification counts records. It has no field for a fortnight of manual check-in.

Scattered SpiderSocial engineeringHospitalityAvailability
Sev 4TargetMGM Resorts InternationalActorScattered SpiderUSA
23-0814
File

Clorox Put the Cost of Its August Cyberattack at $49 Million

The $49m covers consultants and forensics. It does not cover the sales that never happened.

UnattributedManufacturingManufacturing
Sev 4TargetThe Clorox CompanyActorUnattributedUSA
23-0124
File

Riot Games Refused a Ransom After League of Legends Source Code Was Stolen

Costly to the refuser, costless to everyone else. The only one in the database like that.

UnattributedSocial engineeringTechnologyAftermath
Sev 3TargetRiot GamesActorUnattributedUSA
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging