September 14, 2022
Cyber incident overview
The chart shows the number of known incidents for each day of the month. Details are listed further below.
Diagram in high resolution (License: CC BY 4.0):
Hacker attacks statistics April
By country
Diagram in high resolution (License: CC BY 4.0):
By industry
Diagram in high resolution (License: CC BY 4.0):
Notes
- The statistics are based on the known incidents listed here.
- Since only some of the cases become known, the evaluations are not representative.
- Industries where incidents are immediately visible due to public access (e.g. healthcare) are more represented than others.
- An incident may be assigned to multiple countries or industries. Also, a country cannot always be assigned. So the totals shown on the charts may be different.
- The graphics may be reused according to the license Creative Commons Attribution 4.0 / CC BY 4.0 (attribution: KonBriefing.com).
Details, examples and sources / list of affected companies
April 1, 2022
Discord server hacked, $550,000 worth of NFTs stolen
Bored Ape Yacht Club (BAYC)
https://cryptoslate.com/bored-ape-yacht-...

Ransomware at a municipality in the Netherlands
Buren, Gelderland, Netherlands
https://www.buren.nl/nieuws/gegevens-aan...

Ransomware at a toys and crafts chain in the UK
The Works - Birmingham, United Kingdom
https://www.bbc.com/news/business-609936...

Unauthorized access at an auto insurer in the U.S.
Elephant Insurance - Richmond, Virginia, USA
https://www.insurancebusinessmag.com/us/...
2 April 2022
$15.6 million stolen from a DeFi protocoll
Inverse Finance - (Location unknown)
https://www.coindesk.com/tech/2022/04/02...

Ransomware at an Indonesian natural gas company
Perusahaan Gas Negara (PGN) - Jakarta, Indonesia
https://techmonitor.ai/technology/cybers...

Ransomware at a library in Switzerland
Lutry, Vaud, Switzerland
https://www.24heures.ch/la-bibliotheque-...

900,000 emails from a Russian state-owned media and propaganda agency published
Всероссийская государственная телевизионная и радиовещательная компания (ВГТРК) (VGTRK) - Moscow, Russia
https://www.dailydot.com/debug/hackers-v...

Unauthorized access at a moving vehicle rental company in the U.S.
U-Haul - Phoenix, Arizona, USA (Maricopa County)
The access extended over 5 months.
https://therecord.media/5-month-u-haul-b...
https://www.uhaul.com/Update/

Cyberattack on the systems of a federal justice agency in Brazil
Justiça Federal de Pernambuco - Pernambuco, Brazil
https://www.cisoadvisor.com.br/sistemas-...

Cyber attack on the department of Ardèche in France
Departement Ardèche - Privas, Auvergne-Rhône-Alpes / Département Ardèche, France
https://www.francebleu.fr/infos/faits-di...

Cyberattack on the Italian Ministry for Ecological Change
Ministero della transizione ecologica - Roma, Lazio, Italy
https://www.repubblica.it/tecnologia/202...

Ransomware at a sports betting provider in Nigeria
bet9ja - Nigeria, Nigeria
https://twitter.com/Bet9jaOfficial/statu...

Russian oil company website hacked
Газпром нефть (Gazprom Neft) - Moscow, Russia
https://www.reuters.com/business/energy/...

Cyberattack on a underwater cable in Hawaii stopped
Hawaii, Hawaii, USA
https://www.hawaiipublicradio.org/local-...

Cyber attack at a provider of HR software in Germany
perbit Software GmbH - Altenberge, North Rhine-Westphalia, Germany
This affects HR data of other companies that use services.
https://www.perbit.com/newsevents/news/a...

Cyber attack on a manufacturer of pumps and valves in Germany
KSB SE & Co. KGaA - Frankenthal (Pfalz), Rhineland-Palatinate, Germany
https://www.finanzen.net/nachricht/aktie...

Cyberattack on a professional organization for executives in New Zealand
Institute of Directors in New Zealand - Wellington, New Zealand
https://www.iod.org.nz/

100,000 emails leaked from a Russian company in the oil/gas sector
Aerogaz - Russia
https://twitter.com/cyber_etc/status/151...

300,000 emails of a business center company from Saint Petersburg leaked
Петровский форт (Petrofort) - Saint Petersburg, Russia
https://twitter.com/cyber_etc/status/151...

37,500 emails leaked from a Russian timber company
Форест (Forest) - Russia
https://twitter.com/cyber_etc/status/151...

Cyberattack the Ukrainian power grid repelled
Ukraine, Ukraine
https://www.reuters.com/world/europe/rus...

Cyber attack on a university of applied sciences in Belgium
Hogeschool Vives - Kortrijk, Belgium
https://www.vrt.be/vrtnws/nl/2022/04/12/...

DDoS attack on the Finnish Ministry of Defense
Puolustusministeriö (Ministry of Defense) - Helsinki, Finland
The attacks occurred at the time when Ukrainian President Zelenskyy was addressing the Finnish Parliament.
https://yle.fi/news/3-12397024

DDoS attack on the Finnish Ministry of Foreign Affairs
Ulkoministeriö (Ministry of Foreign Affairs) - Helsinki, Finland
The attacks occurred at the time when Ukrainian President Zelenskyy was addressing the Finnish Parliament.
https://yle.fi/news/3-12397024

Destructive Russian malware has hit 2 organizations in Ukraine
Ukraine
Microsoft counted 4 organizations hit between March 31 and April 8.
https://query.prod.cms.rt.microsoft.com/...

A Missouri community college lost $900,000 to online fraud
Ozarks Technical Community College - Springfield, Missouri, USA
https://eu.news-leader.com/story/news/ed...

Website of a media company from Cameroon defaced
ekiosque.cm - Cameroon
https://www.digitalbusiness.africa/mecon...

Website of a telecommunication company from Cameroon defaced
Orange Pulse - Cameroon
https://www.digitalbusiness.africa/mecon...

Ransomware at a university in Florida
Florida International University (FIU) - Miami, Florida, USA
https://therecord.media/blackcat-ransomw...

DDoS attack on a telecommunications company in Andorra
Andorra Telecom - Andorra
https://twitter.com/AndorraTelecom/statu...

Cyber attack on a Belgian supplier of coffee and coffee machines
Miko Coffee Services SA - Turnhout, Belgium
https://www.lecho.be/entreprises/produit...


Cyber attack on an insurance company in Germany
Baloise - Bad Homburg vor der Höhe, Hesse, Germany
https://www.baloise.com/de/home/news-sto...

Cyberattack on a hospital in Spain averted
Granada, Andalusia, Spain
https://www.granadahoy.com/granada/hospi...

700 GB data of the Russian government leaked
Russia
Among them are 500,000 e-mails. The Russian Ministry of Culture has the largest share with 446 GB.
https://twitter.com/NatSecGeek/status/15...

Cyber attack on a wind turbine operator
Deutsche Windtechnik AG - Bremen, Germany
https://www.deutsche-windtechnik.com/pre...

Cyber attack on Indian state oil company
Oil India Limited - Duliajan, Assam, India
https://economictimes.indiatimes.com/ind...

250,000 emails from Department of Education of the Russian Strezhevoy City District Administration
Russia
https://twitter.com/NatSecGeek/status/15...

DDoS attack on a crypto currency platform
Currency.com - London, United Kingdom
The attack came shortly after the platform announced that it would no longer serve customers from Russia.
https://www.accesswire.com/697718/Curren...

Cyber attack on a food online platform in Italy
EasyCoop - Castenaso, Emilia-Romagna, Italy
https://www.cybersecurity360.it/nuove-mi...

450,000 emails leaked from a Russian oil and gas company
Technotec - Russia, Russia
https://twitter.com/NatSecGeek/status/15...

Cyber attack on a cloud vendor
Heroku - San Francisco, California, USA
https://status.heroku.com/incidents/2413

Cyber attack on a research institute in Germany
Fraunhofer-Institut für Mikrostruktur von Werkstoffen und Systemen (IMWS) - Halle (Saale), Saxony-Anhalt, Germany
https://www.watson.de/deutschland/analys...

Cyber attack on the Spanish Football Federation
Real Federación Española de Fútbol (RFEF) - Las Rozas de Madrid, Spain
https://www.rfef.es/noticias/comunicado-...

DDoS attacks on Icelandic websites
Island
https://www.ruv.is/frett/2022/04/14/fjol...

Cyberattack on an investigative web platform in Malawi
Investigative website - Malawi
https://malawi24.com/2022/04/17/malawi-p...

768,000 emails of German-Russian joint venture for oil facility projecting leaked
Gazprom Linde Engineering - Russia
https://twitter.com/YourAnonTV/status/15...

Cyber attack on a provider of online greeting cards in the UK
funkypigeon.com Limited - Bristol, England, United Kingdom
https://www.theguardian.com/business/202...

Ransomware at a Pennsylvania municipality
Lower Makefield Township, Pennsylvania, USA
https://levittownnow.com/2022/04/20/cybe...

Cyber attack on an association of milk producers in Switzerland
Laiteries Réunies de Genève (LRG) - Plan-les-Ouates, Canton of Geneva, Switzerland
https://www.20min.ch/fr/story/les-donnee...

Hacker attack on a plant engineering company in Germany
IMA Schelling Group - Lübbecke, North Rhine-Westphalia, Germany
https://www.imaschelling.com/en/it-incid...

Unauthorized access at an insurance company in France
Emoa Mutuelle du Var - Six-Fours-les-Plages, Département Var, Provence-Alpes-Côte d’Azur, France
https://www.20minutes.fr/sante/3331987-2...

Cyber attack on the administration of a city in Italy
Civitavecchia Servizi Pubblici (CSP) - Civitavecchia, Lazio, Italy
https://www.bignotizie.it/csp-sotto-atta...

Cyberattack on the healthcare provider of the province of Messina, Italy
Azienda Sanitaria Provinciale Messina (ASP Messina) - Messina, Italy
ASP Messina was already affected by a cyberattack in November 2021.
https://tg24.sky.it/palermo/2022/04/15/a...

399 GB data of a Russian travel company leaked
Continent Express - Russia
https://twitter.com/cyber_etc/status/151...

Cyberattack on a county in Hawaii averted
Maui County - Wailuku, Hawaii, USA
https://www.mauicounty.gov/CivicAlerts.a...

DDoS attack on a school district in Kansas
Topeka Public Schools, Unified School District No. 501 - Topeka, Kansas, USA (Shawnee County)
https://eu.cjonline.com/story/news/educa...

Cyberattack on the Bulgarian post
Български пощи (Bulgarian Post) - Sofia, Bulgaria
https://www.bgpost.bg/bg/messages/3371

Cyberattack on the Municipality of Quito in Ecuador
Municipio de Quito - Quito, Ecuador
https://de-de.facebook.com/MunicipioQuit...

Cyber attack on a fashion company in Italy
Giorgio Armani SpA - Milano, Italy
https://canaledieci.it/2022/04/18/hacker...

Cyberattack on Puerto Rico's toll system
AutoExpreso - Puerto Rico
https://www.telemundopr.com/noticias/pue...
April 17, 2022
$182 million stolen from cryptocurrency project
Beanstalk Farms
https://www.theverge.com/2022/4/18/23030...

Unauthorized access at a transport authority in Australia
Transport for NSW - Sydney, Australia
At the authority, there was already an unauthorized access in early 2021 due to a vulnerability in a file transfer software.
https://www.zdnet.com/article/transport-...

Cyber attack on the portal of a social insurance company in Costa Rica
Caja Costarricense de Seguro Social (CCSS) - San José, Costa Rica
https://www.larepublica.net/noticia/port...

Cyber attack on an aviation handling company in Germany
AHS Aviation Handling Services GmbH - Hamburg, Germany
https://www.aerotelegraph.com/abfertigun...

Cyberattack on the Sri Lanka Police website
රී ලංකා පොලීසිය / இலங்கை காவல் - Colombo, Sri Lanka
https://www.newsfirst.lk/2022/04/17/poli...

Cyberattack on a county in Kansas
Unified Government of Wyandotte County and Kansas City, Kansas - Kansas City, Kansas, USA (Wyandotte County)
https://fox4kc.com/news/wyandotte-county...

Canadian airline affected by cyber attack
Sunwing Airlines - Toronto, Ontario, Canada
According to the press, there was a cyber attack on an external IT service provider. Thousands of passengers are stuck.
https://www.cbc.ca/news/business/sunwing...

Ransomware at the Ministry of Finance of Costa Rica
Ministerio de Hacienda - San José, Costa Rica
https://www.larepublica.net/noticia/hack...

Cyber attack on a municipal utility in Germany
Donau-Stadtwerke Dillingen-Lauingen (DSDL) - Dillingen an der Donau, Bavaria, Germany
https://www.augsburger-allgemeine.de/dil...

Cyber attack on a technology service provider in Germany
TÜV NORD GROUP - Hannover, Lower Saxony, Germany
https://www.tuev-nord-group.com/en/newsr...

Cyber attack on an IT company in Germany
Reitzner AG - Dillingen an der Donau, Bavaria, Germany
https://www.augsburger-allgemeine.de/dil...

Cyberattack on a service provider for libraries in Germany
ekz.bibliotheksservice GmbH - Reutlingen, Baden-Württemberg, Germany
https://www.ekz.de/

Cyber attack on the Italian banking association
Associazione Bancaria Italiana (ABI) - Roma, Lazio, Italy
https://www.repubblica.it/economia/2022/...

Ransomware at a construction company in Japan
(京成建設株式会社) Keisei Construction Co., Ltd - Funabashi, Chiba, Japan

222 GB of data from a Russian natural gas construction company leaked
Газрегион (Gazregion) - Moscow, Russia
https://twitter.com/YourAnonTV/status/15...

Cyber attack on a Russian bank
АО Банк ПСКБ (JSC Bank 'PSCB') - Saint Petersburg, Russia
https://twitter.com/xxNB65/status/151586...

1.2 GB of data and videos of an IT company from Belarus leaked
Synesis - Minsk, Belarus
https://twitter.com/NatSecGeek/status/15...

Cyber attack on a city in Germany
Schriesheim, Baden-Württemberg, Germany
https://www.rnz.de/nachrichten/bergstras...

Unauthorized access to data of a university library in Germany
Universitätsbibliothek Leipzig - Leipzig, Germany
Affected are about 70,000 records with personal data.
https://www.ub.uni-leipzig.de/aktuelles/...

Cyber attack on a city in Spain
Ayuntamiento de Gijón - Gijón, Asturias, Spain
https://www.elcomercio.es/gijon/hackean-...

Cyberattack on a group of hospitals in France
Groupement Hospitalier de Territoire (GHT) Cœur Grand Est - Verdun, Grand Est / Département Meuse, France
https://www.lunion.fr/id363641/article/2...

Youtube channel of an Indian newspaper hacked
O Heraldo / Herald Goa - India
https://www.heraldgoa.in/Goa/Malicious-c...

Ransomware at a property management company in Japan
株式会社 明光トレーディング (Meiko Trading Co.) - Tokyo, Japan
(Report on Ransomware Attack on Our Servers)
https://www.meiko-trading.co.jp/pdf/serv...

15,600 emails leaked from a Russian military construction company
ГУОВ и ГС (GUOV i GS) - Russia
https://twitter.com/NatSecGeek/status/15...

426,000 mails of a Russian bookkeeping company leaked
Тендертех (Tendertech) - Russia
https://twitter.com/NatSecGeek/status/15...

87,500 emails leaked from a Russian oil and gas exploration company
Неоком Геосервис (Neocom Geoservice) - Russia
https://twitter.com/YourAnonTV/status/15...

Cyberattack the government research council in Argentina
Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) - Buenos Aires, Argentina
https://www.a24.com/actualidad/el-conice...

Unauthorized access at a hospital in Belgium
AZ Herentals - Herentals, Belgium
https://www.azherentals.be/datalek-az-he...

Attack on the website of a regulatory authority in Bulgaria
Комисия за енергийно и водно регулиране (КЕВР) / Energy and Water Regulatory Commission - Sofia, Bulgaria
https://nova.bg/news/view/2022/04/20/366...

DDoS attack on the website of the Czech Office for Cyber and Information Security
Národní úřad pro kybernetickou a informační bezpečnost (NUKIB) - Brno, Czech Republic
https://twitter.com/NUKIB_CZ/status/1516...

DDoS attacks on Czech websites
Czech republic
Affected are railroads, airports and government facilities.
https://english.radio.cz/czech-websites-...

Cyber attack on a property manager in France
Oralia Partner - Lyon, France
https://www.lemagit.fr/actualites/252516...

DDoS attack on a Russian-language TV station from Israel
9 канал - Israel
https://www.9tv.co.il/item/44317

DDoS attack on a TV station in Israel
KAN - Israel
https://www.jpost.com/breaking-news/arti...

DDoS attack on the website of the Israeli airport authority
רשות שדות התעופה בישראל (Israel Airports Authority) - Tel Aviv, Israel
https://www.ynetnews.com/article/by5kfrp...

Fraudulent transfers at a bank in Pakistan
United Bank Limited (UBL) - Karachi, Pakistan
https://tribune.com.pk/story/2354210/ano...

250,000 emails from a Russian investment company leaked
Ворлдвайд Инвест АС (Worldwide Invest) - Russia
https://twitter.com/NatSecGeek/status/15...

575,000 emails of a Russian property management company leaked
Sawatzky Property Management - Russia
https://twitter.com/NatSecGeek/status/15...
April 21, 2022
Attackers steal $1 million from DeFi protocol then lose access
ZEED - (Location unknown)
https://www.vice.com/en/article/xgdjg7/c...

DDoS attack on a website of the Argentine parliament
Senado de la Nación Argentina - Buenos Aires, Argentina
Affected was the upper house of the Argentine National Congress.
https://tn.com.ar/politica/2022/04/21/de...

Cyber attack on a logistics company in Switzerland
M+R Spedag Group - Muttenz, Canton of Basel-Landschaft, Switzerland
https://www.inside-it.ch/grosser-schweiz...

DDoS attacks on Estonian state websites
Estonia
https://www.err.ee/1608572725/eesti-riik...

365,000 mails from a Russian real-estate investment company leaked
Accent Capital - Russia
https://twitter.com/NatSecGeek/status/15...

Ransomware at a US professional association for dentists
American Dental Association (ADA) - Chicago, Illinois, USA
https://therecord.media/american-dental-...

Ransomware at a vocational school in Austria
Höhere Technische Bundeslehr- und Versuchsanstalt St. Pölten (HTL) - St. Pölten, Lower Austria, Austria
https://www.heute.at/s/black-cat-attacki...

DDoS attacks on Estonian state websites
Estonia
https://www.err.ee/1608573781/ummistusru...


DDoS attack on the website of a NATO cyber defense center in Estonia
NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) - Tallinn, Estonia
https://www.err.ee/1608573781/ummistusru...

Unauthorized access at an organization for engineers in Portugal
Ordem dos Engenheiros - Lisbon, Portugal
https://www.ordemengenheiros.pt/pt/atual...

640,000 mails of a Russian manufacturer of hydraulic equipment leaked
Энерпред (Enerpred) - Irkutsk, Russia
https://twitter.com/YourAnonTV/status/15...

DDoS attack on the website of the Ukrainian post
Укрпошта (Ukrposhta) - Kyiv, Ukraine
The attack is believed to be related to the sale of a stamp showing an Ukrainian soldier confronting the cruiser Moskva, which later sank.
https://www.euronews.com/next/2022/04/22...

Cyberattack on a US healthcare provider
Tenet Healthcare Corporation (THC) - Dallas, Texas, USA
https://investor.tenethealth.com/press-r...

DDoS attacks on Estonian state websites
Estonia
https://www.err.ee/1608574828/ummistusru...

Cyberattack on a hospital in Arizona
Yuma Regional Medical Center - Yuma, Arizona, USA
https://kyma.com/news/2022/04/25/yrmc-fa...

Cyberattack on a library system in New York state
Westchester Library System - Greenburgh, New York, USA (Westchester County)
https://patch.com/new-york/newrochelle/s...
April 25, 2022
Instagram account of well-known NFT collection hacked, 91 NFTs worth $2.8 million stolen
Bored Ape Yacht Club
https://www.theblockcrypto.com/post/1433...

Cyber attack on a manufacturer of conveyor systems in Switzerland
Ferag AG - Hinwil, Canton of Zurich, Switzerland
https://www.ferag.com/en/company/news-ne...

Instagram channel of a Swiss emergency service hijacked
Schutz & Rettung Zürich - Zurich, Canton of Zürich, Switzerland
https://www.toponline.ch/news/zuerich/de...

Cyber attack on a city in the Czech Republic
Žďár nad Sázavou, Czech Republic
https://www.zdarns.cz/online-sluzby/aktu...

1.1 million emails of a Russian service provider for the energy industry leaked
АЛЕТ (ALET) - Moscow, Russia
https://twitter.com/YourAnonTV/status/15...

657 GB of data extracted from a Russian company that supports small and medium-sized enterprises
Корпорация МСП (KorpMSP) - Russia
https://twitter.com/xxNB65/status/151859...

Hacker attack on a hospital in Portugal
Hospital Garcia de Orta (HGO) - Almada, Portugal