Bert Kondruss, KonBriefing Research, Germany
September 14, 2022
Cyber incident overview
The chart shows the number of known incidents for each day of the month. Details are listed further below.
Diagram in high resolution (License: CC BY 4.0):
Hacker attacks statistics April
By country
Diagram in high resolution (License: CC BY 4.0):
By industry
Diagram in high resolution (License: CC BY 4.0):
Notes
- The statistics are based on the known incidents listed here.
- Since only some of the cases become known, the evaluations are not representative.
- Industries where incidents are immediately visible due to public access (e.g. healthcare) are more represented than others.
- An incident may be assigned to multiple countries or industries. Also, a country cannot always be assigned. So the totals shown on the charts may be different.
- The graphics may be reused according to the license Creative Commons Attribution 4.0 / CC BY 4.0 (attribution: KonBriefing.com).
Details, examples and sources / list of affected companies
April 1, 2022
Discord server hacked, $550,000 worth of NFTs stolen
Bored Ape Yacht Club (BAYC)
https://cryptoslate.com/bored-ape-yacht-...
April 1, 2022
Ransomware at a municipality in the Netherlands
Buren, Gelderland, Netherlands
https://www.buren.nl/nieuws/gegevens-aan...
April 2022
Ransomware at a toys and crafts chain in the UK
The Works - Birmingham, England, United Kingdom
https://www.bbc.com/news/business-609936...
April 1, 2022
Unauthorized access at an auto insurer in the U.S.
Elephant Insurance - Richmond, Virginia, USA
https://www.insurancebusinessmag.com/us/...
April 2, 2022
$15.6 million stolen from a DeFi protocoll
Inverse Finance
https://www.coindesk.com/tech/2022/04/02...
April 2022
Ransomware at an Indonesian natural gas company
Perusahaan Gas Negara (PGN) - Jakarta, Indonesia
https://techmonitor.ai/technology/cybers...
April 4, 2022
Ransomware at a library in Switzerland
Lutry, Canton of Vaud, Switzerland
https://www.24heures.ch/la-bibliotheque-...
April 2022
900,000 emails from a Russian state-owned media and propaganda agency published
Всероссийская государственная телевизионная и радиовещательная компания (ВГТРК) (VGTRK) - Moscow, Russia
https://www.dailydot.com/debug/hackers-v...
April 4, 2022
Ransomware at a health service in Pennsylvania
Maternal & Family Health Services (MFHS) - Wilkes-Barre, Pennsylvania, USA (Luzerne County)
https://www.mfhs.org/important-informati...
April 2022
Unauthorized access at a moving vehicle rental company in the U.S.
U-Haul - Phoenix, Arizona, USA (Maricopa County)
The access extended over 5 months.
https://therecord.media/5-month-u-haul-b...
https://www.uhaul.com/Update/
April 5, 2022
Cyber attack on a school district in Pennsylvania, USA
Peters Township School District (PTSD) - McMurray, Pennsylvania, USA (Washington County)
https://apps.web.maine.gov/online/aeview...
April 6, 2022
Cyberattack on the systems of a federal justice agency in Brazil
Justiça Federal de Pernambuco - Pernambuco, Brazil
https://www.cisoadvisor.com.br/sistemas-...
April 6, 2022
Cyber attack on the department of Ardèche in France
Departement Ardèche - Privas, Auvergne-Rhône-Alpes, France
https://www.francebleu.fr/infos/faits-di...
April 6, 2022
Cyberattack on the Italian Ministry for Ecological Change
Ministero della transizione ecologica - Roma, Lazio, Italy
https://www.repubblica.it/tecnologia/202...
April 6, 2022
Ransomware at a sports betting provider in Nigeria
bet9ja - Nigeria
https://twitter.com/Bet9jaOfficial/statu...
April 6, 2022
Russian oil company website hacked
Газпром нефть (Gazprom Neft) - Moscow, Russia
https://www.reuters.com/business/energy/...
April 2022
Cyberattack on a underwater cable in Hawaii stopped
Hawaii, USA
https://www.hawaiipublicradio.org/local-...
April 7, 2022
Cyber attack at a provider of HR software in Germany
perbit Software GmbH - Altenberge, North Rhine-Westphalia, Germany
This affects HR data of other companies that use services.
https://www.perbit.com/newsevents/news/a...
April 7, 2022
Cyber attack on a manufacturer of pumps and valves in Germany
KSB SE & Co. KGaA - Frankenthal (Pfalz), Rhineland-Palatinate, Germany
https://www.finanzen.net/nachricht/aktie...
April 2022 ?
Cyberattack on a professional organization for executives in New Zealand
Institute of Directors in New Zealand - Wellington, New Zealand
https://www.iod.org.nz/
April 2022
300,000 emails of a business center company from Saint Petersburg leaked
Петровский форт (Petrofort) - Saint Petersburg (Санкт-Петербург), Russia
https://twitter.com/cyber_etc/status/151...
April 2022
100,000 emails leaked from a Russian company in the oil/gas sector
Aerogaz - Russia
https://twitter.com/cyber_etc/status/151...
April 2022
37,500 emails leaked from a Russian timber company
Форест (Forest) - Russia
https://twitter.com/cyber_etc/status/151...
April 7, 2022
Cyberattack the Ukrainian power grid repelled
Ukraine
https://www.reuters.com/world/europe/rus...
April 8, 2022
Cyber attack on a university of applied sciences in Belgium
Hogeschool Vives - Kortrijk, Flemish Region, Belgium
https://www.vrt.be/vrtnws/nl/2022/04/12/...
April 8, 2022
DDoS attack on the Finnish Ministry of Defense
Puolustusministeriö (Ministry of Defense) - Helsinki, Finland
The attacks occurred at the time when Ukrainian President Zelenskyy was addressing the Finnish Parliament.
https://yle.fi/news/3-12397024
April 8, 2022
DDoS attack on the Finnish Ministry of Foreign Affairs
Ulkoministeriö (Ministry of Foreign Affairs) - Helsinki, Finland
The attacks occurred at the time when Ukrainian President Zelenskyy was addressing the Finnish Parliament.
https://yle.fi/news/3-12397024
April 8, 2022
Destructive Russian malware has hit 2 organizations in Ukraine
Ukraine
Microsoft counted 4 organizations hit between March 31 and April 8.
https://query.prod.cms.rt.microsoft.com/...
April 2022
A Missouri community college lost $900,000 to online fraud
Ozarks Technical Community College - Springfield, Missouri, USA (Greene County)
https://eu.news-leader.com/story/news/ed...
April 9, 2022
Website of a media company from Cameroon defaced
ekiosque.cm - Cameroon
https://www.digitalbusiness.africa/mecon...
April 9, 2022
Website of a telecommunication company from Cameroon defaced
Orange Pulse - Cameroon
https://www.digitalbusiness.africa/mecon...
April 2022
Ransomware at a university in Florida
Florida International University (FIU) - Miami, Florida, USA (Miami-Dade County)
https://therecord.media/blackcat-ransomw...
April 10, 2022
DDoS attack on a telecommunications company in Andorra
Andorra Telecom - Andorra
https://twitter.com/AndorraTelecom/statu...
April 2022
Cyber attack on a Belgian supplier of coffee and coffee machines
Miko Coffee Services SA - Turnhout, Belgium
https://www.lecho.be/entreprises/produit...
April 11, 2022
Cyber attack on an insurance company in Germany
Baloise - Bad Homburg vor der Höhe, Hesse, Germany (Hochtaunuskreis)
https://www.baloise.com/de/home/news-sto...
April 2022
Cyberattack on a hospital in Spain averted
Granada, Andalusia, Spain
https://www.granadahoy.com/granada/hospi...
April 11, 2022
700 GB data of the Russian government leaked
Russia
Among them are 500,000 e-mails. The Russian Ministry of Culture has the largest share with 446 GB.
https://twitter.com/NatSecGeek/status/15...
April 12, 2022
Cyber attack on a wind turbine operator
Deutsche Windtechnik AG - Bremen, Germany
https://www.deutsche-windtechnik.com/pre...
April 2022
Cyber attack on Indian state oil company
Oil India Limited - Duliajan, Assam, India
https://economictimes.indiatimes.com/ind...
April 12, 2022
250,000 emails from Department of Education of the Russian Strezhevoy City District Administration
Russia
https://twitter.com/NatSecGeek/status/15...
April 12, 2022
DDoS attack on a crypto currency platform
Currency.com - London, United Kingdom
The attack came shortly after the platform announced that it would no longer serve customers from Russia.
https://www.accesswire.com/697718/Curren...
April 13, 2022
Cyber attack on a food online platform in Italy
EasyCoop - Castenaso, Emilia-Romagna, Italy
https://www.cybersecurity360.it/nuove-mi...
April 13, 2022
450,000 emails leaked from a Russian oil and gas company
Technotec - Russia
https://twitter.com/NatSecGeek/status/15...
April 13, 2022
Cyber attack on a cloud vendor
Heroku - San Francisco, California, USA (San Francisco County)
https://status.heroku.com/incidents/2413
April 2022
Cyberattack on a franchisor of health care stores in Germany
Sanitätshaus Aktuell AG - Vettelschoß, Rhineland-Palatinate, Germany (Landkreis Neuwied)
https://www.sani-aktuell.de/einblicke-vo...
April 2022
Cyber attack on a research institute in Germany
Fraunhofer-Institut für Mikrostruktur von Werkstoffen und Systemen (IMWS) - Halle (Saale), Saxony-Anhalt, Germany
https://www.watson.de/deutschland/analys...
April 2022
Cyber attack on the Spanish Football Federation
Real Federación Española de Fútbol (RFEF) - Las Rozas de Madrid, Spain
https://www.rfef.es/noticias/comunicado-...
April 2022
DDoS attacks on Icelandic websites
Iceland
https://www.ruv.is/frett/2022/04/14/fjol...
April 14, 2022
Cyberattack on an investigative web platform in Malawi
Malawi
https://malawi24.com/2022/04/17/malawi-p...
April 14, 2022
768,000 emails of German-Russian joint venture for oil facility projecting leaked
Gazprom Linde Engineering - Russia
https://twitter.com/YourAnonTV/status/15...
April 14, 2022
Cyber attack on a provider of online greeting cards in the UK
funkypigeon.com Limited - Bristol, England, United Kingdom
https://www.theguardian.com/business/202...
April 2022
Ransomware at a Pennsylvania municipality
Lower Makefield Township, Pennsylvania, USA (Bucks County)
https://levittownnow.com/2022/04/20/cybe...
April 15, 2022
Cyber attack on an association of milk producers in Switzerland
Laiteries Réunies de Genève (LRG) - Plan-les-Ouates, Canton of Geneva, Switzerland
https://www.20min.ch/fr/story/les-donnee...
April 15, 2022
Hacker attack on a plant engineering company in Germany
IMA Schelling Group - Lübbecke, North Rhine-Westphalia, Germany (Kreis Minden-Lübbecke)
https://www.imaschelling.com/en/it-incid...
April 2022
Unauthorized access at an insurance company in France
Emoa Mutuelle du Var - Six-Fours-les-Plages, Provence-Alpes-Côte d’Azur, France
https://www.20minutes.fr/sante/3331987-2...
April 15, 2022
Cyber attack on the administration of a city in Italy
Civitavecchia Servizi Pubblici (CSP) - Civitavecchia, Lazio, Italy
https://www.bignotizie.it/csp-sotto-atta...
April 15, 2022
Cyberattack on the healthcare provider of the province of Messina, Italy
Azienda Sanitaria Provinciale Messina (ASP Messina) - Messina, Regione Siciliana, Italy
ASP Messina was already affected by a cyberattack in November 2021.
https://tg24.sky.it/palermo/2022/04/15/a...
April 15, 2022
399 GB data of a Russian travel company leaked
Continent Express - Russia
https://twitter.com/cyber_etc/status/151...
April 15, 2022
Cyberattack on a county in Hawaii averted
Maui County - Wailuku, Hawaii, USA
https://www.mauicounty.gov/CivicAlerts.a...
April 2022
DDoS attack on a school district in Kansas
Topeka Public Schools, Unified School District No. 501 - Topeka, Kansas, USA (Shawnee County)
https://eu.cjonline.com/story/news/educa...
April 16, 2022
Cyberattack on the Bulgarian post
Български пощи (Bulgarian Post) - Sofia / София, Bulgaria
https://www.bgpost.bg/bg/messages/3371
April 16, 2022
Cyberattack on the Municipality of Quito in Ecuador
Municipio de Quito - Quito, Ecuador
https://de-de.facebook.com/MunicipioQuit...
April 16, 2022
Cyber attack on a fashion company in Italy
Giorgio Armani SpA - Milano, Italy
https://canaledieci.it/2022/04/18/hacker...
April 16, 2022
Cyberattack on Puerto Rico's toll system
AutoExpreso - Puerto Rico
https://www.telemundopr.com/noticias/pue...
April 17, 2022
$182 million stolen from cryptocurrency project
Beanstalk Farms
https://www.theverge.com/2022/4/18/23030...
April 2022
Unauthorized access at a transport authority in Australia
Transport for NSW - Sydney, New South Wales, Australia
At the authority, there was already an unauthorized access in early 2021 due to a vulnerability in a file transfer software.
https://www.zdnet.com/article/transport-...
April 17, 2022
Cyber attack on the portal of a social insurance company in Costa Rica
Caja Costarricense de Seguro Social (CCSS) - San José, Costa Rica
https://www.larepublica.net/noticia/port...
April 17, 2022
Cyber attack on an aviation handling company in Germany
AHS Aviation Handling Services GmbH - Hamburg, Germany
https://www.aerotelegraph.com/abfertigun...
April 17, 2022
Cyberattack on the Sri Lanka Police website
රී ලංකා පොලීසිය / இலங்கை காவல் - Colombo / කොළඹ / கொழும்பு, Sri Lanka / ශ්රී ලංකා / இலங்கை
https://www.newsfirst.lk/2022/04/17/poli...
April 17, 2022
Cyberattack on a county in Kansas
Unified Government of Wyandotte County and Kansas City, Kansas - Kansas City, Kansas, USA (Wyandotte County)
https://fox4kc.com/news/wyandotte-county...
April 18, 2022
Canadian airline affected by cyber attack
Sunwing Airlines - Toronto, Ontario, Canada
According to the press, there was a cyber attack on an external IT service provider. Thousands of passengers are stuck.
https://www.cbc.ca/news/business/sunwing...
April 2022
Ransomware at the Ministry of Finance of Costa Rica
Ministerio de Hacienda - San José, Costa Rica
https://www.larepublica.net/noticia/hack...
April 18, 2022
Cyber attack on an IT company in Germany
Reitzner AG - Dillingen an der Donau, Bavaria, Germany
https://www.augsburger-allgemeine.de/dil...
April 18, 2022
Cyberattack on a service provider for libraries in Germany
ekz.bibliotheksservice GmbH - Reutlingen, Baden-Württemberg, Germany (Landkreis Reutlingen)
https://www.ekz.de/
April 18, 2022
Cyber attack on a technology service provider in Germany
TÜV NORD GROUP - Hannover, Lower Saxony, Germany
https://www.tuev-nord-group.com/en/newsr...
April 18, 2022
Cyber attack on a municipal utility in Germany
Donau-Stadtwerke Dillingen-Lauingen (DSDL) - Dillingen an der Donau, Bavaria, Germany
https://www.augsburger-allgemeine.de/dil...
April 2022
Cyber attack on the Italian banking association
Associazione Bancaria Italiana (ABI) - Roma, Lazio, Italy
https://www.repubblica.it/economia/2022/...
April 2022
Ransomware at a construction company in Japan
(京成建設株式会社) Keisei Construction Co., Ltd - Funabashi / 船橋市, Kantō / 関東地方, Japan
April 18, 2022
Cyber attack on a Russian bank
АО Банк ПСКБ (JSC Bank 'PSCB') - Saint Petersburg (Санкт-Петербург), Russia
https://twitter.com/xxNB65/status/151586...
April 18, 2022
222 GB of data from a Russian natural gas construction company leaked
Газрегион (Gazregion) - Moscow, Russia
https://twitter.com/YourAnonTV/status/15...
April 19, 2022
1.2 GB of data and videos of an IT company from Belarus leaked
Synesis - Minsk, Belarus
https://twitter.com/NatSecGeek/status/15...
April 19, 2022
Cyber attack on a city in Germany
Schriesheim, Baden-Württemberg, Germany (Rhein-Neckar district)
https://www.rnz.de/nachrichten/bergstras...
April 19, 2022
Unauthorized access to data of a university library in Germany
Universitätsbibliothek Leipzig - Leipzig, Saxony, Germany
Affected are about 70,000 records with personal data.
https://www.ub.uni-leipzig.de/aktuelles/...
April 19, 2022
Cyber attack on a city in Spain
Ayuntamiento de Gijón - Gijón / Xixón, Asturias, Spain
https://www.elcomercio.es/gijon/hackean-...
April 19, 2022
Cyberattack on a group of hospitals in France
Groupement Hospitalier de Territoire (GHT) Cœur Grand Est - Verdun, Grand Est, France
https://www.lunion.fr/id363641/article/2...
April 19, 2022
Youtube channel of an Indian newspaper hacked
O Heraldo / Herald Goa - India
https://www.heraldgoa.in/Goa/Malicious-c...
April 19, 2022
Ransomware at a property management company in Japan
株式会社 明光トレーディング (Meiko Trading Co.) - Tokyo / 東京, Japan
(Report on Ransomware Attack on Our Servers)
https://www.meiko-trading.co.jp/pdf/serv...
April 19, 2022
426,000 mails of a Russian bookkeeping company leaked
Тендертех (Tendertech) - Russia
https://twitter.com/NatSecGeek/status/15...
April 19, 2022
15,600 emails leaked from a Russian military construction company
ГУОВ и ГС (GUOV i GS) - Russia
https://twitter.com/NatSecGeek/status/15...
April 19, 2022
87,500 emails leaked from a Russian oil and gas exploration company
Неоком Геосервис (Neocom Geoservice) - Russia
https://twitter.com/YourAnonTV/status/15...
April 2022
Ransomware at a ventilation manufacturer in the UK
Ventilations - Caerphilly, Wales, United Kingdom
https://caerphilly.observer/news/1008845...
' The Group was also impacted in Q2 by a cyber incident that affected our production facility in south Wales'
https://tools.eurolandir.com/tools/Press...
April 20, 2022
Cyberattack the government research council in Argentina
Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) - Buenos Aires, Argentina
https://www.a24.com/actualidad/el-conice...
April 2022
Unauthorized access at a hospital in Belgium
AZ Herentals - Herentals, Flemish Region, Belgium
https://www.azherentals.be/datalek-az-he...
April 20, 2022
Attack on the website of a regulatory authority in Bulgaria
Комисия за енергийно и водно регулиране (КЕВР) / Energy and Water Regulatory Commission - Sofia / София, Bulgaria
https://nova.bg/news/view/2022/04/20/366...
April 20, 2022
DDoS attacks on Czech websites
Czech Republik
Affected are railroads, airports and government facilities.
https://english.radio.cz/czech-websites-...
April 20, 2022
DDoS attack on the website of the Czech Office for Cyber and Information Security
Národní úřad pro kybernetickou a informační bezpečnost (NUKIB) - Brno, Czech Republic
https://twitter.com/NUKIB_CZ/status/1516...
April 20, 2022
Cyber attack on a property manager in France
Oralia Partner - Lyon, Auvergne-Rhône-Alpes, France
https://www.lemagit.fr/actualites/252516...
April 20, 2022
DDoS attack on the website of the Israeli airport authority
רשות שדות התעופה בישראל (Israel Airports Authority) - Tel Aviv / תֵּל־אָבִיב–יָפוֹ, Israel
https://www.ynetnews.com/article/by5kfrp...
April 20, 2022
DDoS attack on a Russian-language TV station from Israel
9 канал - Israel
https://www.9tv.co.il/item/44317
April 20, 2022
DDoS attack on a TV station in Israel
KAN - Israel
https://www.jpost.com/breaking-news/arti...
April 2022
Fraudulent transfers at a bank in Pakistan
United Bank Limited (UBL) - Karachi / كراچى, Pakistan
https://tribune.com.pk/story/2354210/ano...
April 20, 2022
250,000 emails from a Russian investment company leaked
Ворлдвайд Инвест АС (Worldwide Invest) - Russia
https://twitter.com/NatSecGeek/status/15...
April 20, 2022
575,000 emails of a Russian property management company leaked
Sawatzky Property Management - Russia
https://twitter.com/NatSecGeek/status/15...
April 21, 2022
Attackers steal $1 million from DeFi protocol then lose access
ZEED
https://www.vice.com/en/article/xgdjg7/c...
April 21, 2022
DDoS attack on a website of the Argentine parliament
Senado de la Nación Argentina - Buenos Aires, Argentina
Affected was the upper house of the Argentine National Congress.
https://tn.com.ar/politica/2022/04/21/de...
April 21, 2022
Cyber attack on a logistics company in Switzerland
M+R Spedag Group - Muttenz, Canton of Basel-Landschaft, Switzerland
https://www.inside-it.ch/grosser-schweiz...
April 21, 2022
DDoS attacks on Estonian state websites
Estonia
https://www.err.ee/1608572725/eesti-riik...
April 21, 2022
365,000 mails from a Russian real-estate investment company leaked
Accent Capital - Russia
https://twitter.com/NatSecGeek/status/15...
April 21, 2022
Ransomware at a US professional association for dentists
American Dental Association (ADA) - Chicago, Illinois, USA (Cook County, DuPage County)
https://therecord.media/american-dental-...
April 2022
Ransomware at a vocational school in Austria
Höhere Technische Bundeslehr- und Versuchsanstalt St. Pölten (HTL) - St. Pölten, Lower Austria, Austria
https://www.heute.at/s/black-cat-attacki...
April 22, 2022
DDoS attacks on Estonian state websites
Estonia
https://www.err.ee/1608573781/ummistusru...
April 22, 2022
DDoS attack on the website of a NATO cyber defense center in Estonia
NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) - Tallinn, Estonia
https://www.err.ee/1608573781/ummistusru...
April 22, 2022
Unauthorized access at an organization for engineers in Portugal
Ordem dos Engenheiros - Lisbon, Portugal
https://www.ordemengenheiros.pt/pt/atual...
April 22, 2022
640,000 mails of a Russian manufacturer of hydraulic equipment leaked
Энерпред (Enerpred) - Irkutsk / Ирку́тск, Russia
https://twitter.com/YourAnonTV/status/15...
April 22, 2022
DDoS attack on the website of the Ukrainian post
Укрпошта (Ukrposhta) - Kyiv / Київ, Ukraine
The attack is believed to be related to the sale of a stamp showing an Ukrainian soldier confronting the cruiser Moskva, which later sank.
https://www.euronews.com/next/2022/04/22...
April 2022
Cyberattack on a US healthcare provider
Tenet Healthcare Corporation (THC) - Dallas, Texas, USA (Dallas County & Collin, Kaufman, Rockwall County)
https://investor.tenethealth.com/press-r...
April 24, 2022
DDoS attacks on Estonian state websites
Estonia
https://www.err.ee/1608574828/ummistusru...
April 24, 2022
Cyberattack on a hospital in Arizona
Yuma Regional Medical Center - Yuma, Arizona, USA (Yuma County)
https://kyma.com/news/2022/04/25/yrmc-fa...
April 2022
Cyberattack on a library system in New York state
Westchester Library System - Greenburgh, New York, USA (Westchester County)
https://patch.com/new-york/newrochelle/s...
April 25, 2022
Instagram account of well-known NFT collection hacked, 91 NFTs worth $2.8 million stolen
Bored Ape Yacht Club
https://www.theblockcrypto.com/post/1433...
April 25, 2022
Cyber attack on a manufacturer of conveyor systems in Switzerland
Ferag AG - Hinwil, Canton of Zurich, Switzerland