Cuvvur Threat Intelligence
The costliest breaches, decoded for leadership. What happened, what it cost, and the one decision that would have stopped it.
Latest briefing · Infrastructure · Europe & US
Attackers remotely switched internet-connected fridges to defrost. Around 700 French grocery stores lost food worth an estimated tens of millions of euros, then stores in 10 more countries were hit.
Building and cooling controls are business systems. Keep them off the open internet and alert on unusual changes.
€10M+
food losses in French stores alone (estimated tens of millions)
Read the briefing →$6.3B
crypto reported stolen
Malware hidden inside an AI tool gave attackers the access they needed to move billions in crypto.
Read the briefing →8.8M
people's records accessed
A supplier with access to the national population register used one of the weakest passwords in the world.
Read the briefing →16
financial institutions hit
Brokerages and a crypto exchange lost customer data in a coordinated campaign using AI-written lures.
Read the briefing →153M+
licence scans exposed
An ID-checking service used by bars, shops and venues exposed scans of licences, ID cards and travel documents.
Read the briefing →9 months
before anyone noticed
Personnel records for 2.76 million living and 294,000 deceased service members sat exposed to attackers for nine months.
Read the briefing →12
utilities hit at once
Small, regional water systems were hit together through exposed remote-control panels.
Read the briefing →30M+
records confirmed stolen
A learning platform used by schools and universities saw terabytes of data taken, starting with a phone call.
Read the briefing →27.4M
health records exposed
The largest healthcare breach of 2026 touched patients served by dental offices across the US.
Read the briefing →13M
customer records at risk
Attackers called staff, talked their way into a work account and reached millions of customer records.
Read the briefing →200K+
devices wiped
A data-wiping attack reset devices worldwide at a medical technology company and disrupted work for three weeks.
Read the briefing →£1.9bn
estimated cost to the UK economy
Every factory stopped. The pain spread to around 5,000 businesses — many of them small suppliers who never saw the attackers.
Read the briefing →£300M
lost operating profit
Online clothing orders stopped for 46 days. The CEO said the attackers got in through human error.
Read the briefing →$1.02B
lost by dealers in three weeks
Family-run and franchise dealerships went back to pen and paper for three weeks after their software provider was hit by ransomware.
Read the briefing →5.6M
people's data stolen
An employee downloaded a file they thought was legitimate. Ambulances were diverted and the data of 5.6 million people was stolen.
Read the briefing →$2B+
in costs reported by UnitedHealth
A single stolen login on a remote-access portal froze pharmacy and hospital payments across America.
Read the briefing →$100M
hit to quarterly earnings
No malware exploit opened the door. A caller convinced the help desk to reset a login — and Las Vegas casinos went dark.
Read the briefing →800
stores forced to close
Tills went dark, freezers and shelves stayed full, and customers were turned away. The attack never touched the stores directly.
Read the briefing →$4.4M
ransom paid within hours
America's largest fuel pipeline stopped for days after attackers logged in with one old password.
Read the briefing →~$40M
stolen in a single withdrawal
No vault was cracked. Phishing and stolen login codes did the work — and the same tricks hit ordinary staff every day.
Read the briefing →