Explore publicly reported breaches by access method, affected technology, and reported security weaknesses. An unknown mechanism means the available sources do not establish how the breach occurred. Download JSON · Download CSV · Feed · Coverage and limitations · Methodology
loading records…
Date
Organization
Breach mechanism
ATT&CK
Source type
Impact
Records affected
Analysis of the records in view
Breach mechanisms
Source types
By the highest-ranked source type on each record.
Reported security weaknesses
Actor types and roles
Affected sectors
By the affected organization’s sector.
Time from incident to disclosure or regulatory report
Third parties named in breach reports
Share price after an 8-K
Cited vulnerabilities and KEV status
Organizations with multiple records
ATT&CK techniques
Technologies and systems named
Time to discovery and public disclosure
Records by year
Breach mechanism mix by year
Time to discovery and to disclosure, by year
Ransomware share by year
Terms in breach narratives, by year
Ransomware claims matched to independent reporting
Coverage and limitations
Records come from regulatory reports, organization disclosures, news coverage, and existing breach datasets.
Coverage is uneven. US healthcare and selected state reporting systems are overrepresented. Many sources omit the breach mechanism.
Multiple records for one organization may describe separate breaches or additional reporting on the same breach.