{"data":{"attacks":[{"changing":true,"criteria":["loss"],"de":{"actor":"Nordkorea (TraderTraitor), laut FBI","name":"Hackerangriff auf Binance","summary":"Laut Binance kamen die Angreifer unter anderem über den gehackten Laptop eines Mitarbeiters ins Netz. In rund vier Stunden leerten sie die Hot Wallets der Börse. Binance ersetzt den Schaden aus eigenen Mitteln, das FBI macht Nordkorea verantwortlich.","victim":"Binance, die größte Kryptobörse"},"disclosed":"2026-10-30","en":{"actor":"North Korea (TraderTraitor), according to the FBI","summary":"Binance says the intruders got in partly through a compromised staff laptop and drained its hot wallets within about four hours. Binance is covering the loss from company funds, and the FBI blames North Korea.","victim":"Binance, the largest cryptocurrency exchange"},"figures":[{"de":"gestohlen, laut Binance","en":"stolen, according to Binance","value":"USD 6.3 billion","value_de":"6,3 Mrd. USD"},{"de":"Blockchains, auf denen die Hot Wallets geleert wurden (Elliptic)","en":"blockchains on which its hot wallets were drained (Elliptic)","value":"11"}],"helps":[{"de":"Lass auf einer Börse nur, womit du handelst. Erspartes gehört in eine Wallet, deren Schlüssel du selbst hast, etwa eine Hardware-Wallet.","en":"Keep on an exchange only what you trade. Keep savings in a wallet whose keys you hold, such as a hardware wallet."},{"de":"Schalte eine Freigabeliste für Auszahlungsadressen ein. Melde dich mit Sicherheitsschlüssel oder Authenticator-App an.","en":"Turn on a withdrawal allow-list and sign in with a security key or an authenticator app."}],"key":"binance-2026","kind":"crypto","name":"Binance hack","sources":[{"by":"FBI","url":"https://www.fbi.gov/investigate/cyber/alerts/2026/north-korea-responsible-for-6-billion-binance-attack"},{"by":"Binance","url":"https://x.com/binance/status/2116773465072251141"},{"by":"Elliptic","url":"https://www.elliptic.co/insights/binance-largest-hack-in-history/"},{"by":"ABC News (Australia)","url":"https://www.abc.net.au/news/2026-10-30/largest-cryptocurrency-hack-billions-stolen-binance/107327732"},{"by":"The Hacker News","url":"https://thehackernews.com/2026/11/fbi-links-north-koreas-tradertraitor-to.html"},{"by":"Al Jazeera (with Reuters)","url":"https://www.aljazeera.com/news/2026/11/1/fbi-blames-north-korea-for-record-6-3bn-crypto-heist"}],"year":2026},{"criteria":["loss"],"de":{"actor":"Nordkorea (TraderTraitor), laut FBI","name":"Hackerangriff auf Bybit","summary":"Bei einer Routineüberweisung aus der Ether-Cold-Wallet von Bybit sahen die Unterzeichner eine manipulierte Oberfläche. Sie gaben eine Transaktion frei, die den Angreifern die Wallet übergab. Bis zum Angriff auf Binance war es der größte bekannte Krypto-Diebstahl.","victim":"Bybit, eine Kryptobörse in Dubai"},"disclosed":"2025-02-21","en":{"actor":"North Korea (TraderTraitor), according to the FBI","summary":"During a routine transfer from Bybit's ether cold wallet, the signers saw a manipulated interface and approved a transaction that handed the wallet to the attackers. It was the largest crypto theft on record until the Binance hack.","victim":"Bybit, a cryptocurrency exchange in Dubai"},"figures":[{"de":"an virtuellen Werten gestohlen (FBI)","en":"in virtual assets stolen (FBI)","value":"USD 1.5 billion","value_de":"1,5 Mrd. USD"},{"de":"Ether und Staked-Ether-Token erbeutet (Bybit)","en":"ether and staked-ether tokens taken (Bybit)","value":"~401,000"}],"helps":[{"de":"Bewahre langfristige Bestände in einer Wallet auf, die du selbst kontrollierst. Nutze auf Börsen eine Freigabeliste für Auszahlungen.","en":"Keep long-term holdings in a wallet you control, and use a withdrawal allow-list on exchanges."},{"de":"Organisationen: Prüft jede Transaktion vor dem Signieren auf einem eigenen, vertrauenswürdigen Gerät.","en":"Organizations: check every transaction on a separate, trusted device before signing it."}],"key":"bybit-2025","kind":"crypto","name":"Bybit hack","sources":[{"by":"FBI Internet Crime Complaint Center","url":"https://www.ic3.gov/PSA/2025/PSA250226"},{"by":"TechCrunch","url":"https://techcrunch.com/2025/02/21/crypto-exchange-bybit-says-it-was-hacked-and-lost-around-1-4-billion"}],"year":2025},{"criteria":["data"],"de":{"actor":"Kriminelle Hacker, angeklagt vom US-Justizministerium; einer bekannte sich im August 2026 schuldig","name":"Datendiebstahl bei Snowflake-Kunden","summary":"Kriminelle meldeten sich mit Passwörtern, die Infostealer-Schadsoftware gestohlen hatte, bei Snowflake-Konten von Kunden an. Die Konten hatten keine Zwei-Faktor-Anmeldung. Die Täter kopierten die Daten und forderten Lösegeld.","victim":"Kunden der Cloud-Datenplattform Snowflake, darunter AT\u0026T, Ticketmaster und Santander"},"disclosed":"2024-05-31","en":{"actor":"Criminal hackers charged by the US Department of Justice; one pleaded guilty in August 2026","summary":"Criminals logged into customers' Snowflake accounts with passwords stolen by infostealer malware. The accounts had no multi-factor sign-in, and the criminals copied the data and demanded ransom.","victim":"Customers of the Snowflake cloud data platform, including AT\u0026T, Ticketmaster and Santander"},"figures":[{"de":"Kundenorganisationen, in deren Konten eingebrochen wurde (US-Justizministerium)","en":"customer organizations broken into (US Department of Justice)","value":"165+"},{"de":"betroffene Menschen bei diesen Kunden (US-Justizministerium)","en":"people affected at those customers (US Department of Justice)","value":"100 million+","value_de":"100 Mio.+"}],"helps":[{"de":"Halte deinen Virenschutz aktuell: Infostealer stehlen die Passwörter, die auf einem Gerät gespeichert sind.","en":"Keep malware protection up to date: infostealers take the passwords saved on a device.","tool":"antivirus"},{"de":"Sei vorsichtig bei Nachrichten, die deine Anrufe oder Einkäufe erwähnen.","en":"Be wary of messages that quote your call or purchase history."},{"de":"Organisationen: Verlangt für jedes Cloud-Konto die Zwei-Faktor-Anmeldung und ersetzt alte Passwörter.","en":"Organizations: require multi-factor sign-in on every cloud account and replace old passwords."}],"key":"snowflake-2024","kind":"extortion","name":"Snowflake customer breaches","sources":[{"by":"US Department of Justice","url":"https://www.justice.gov/opa/pr/canadian-man-pleads-guilty-hacking-us-cloud-storage-provider-and-extorting-its-customers"},{"by":"AT\u0026T, Form 8-K","url":"https://www.sec.gov/Archives/edgar/data/732717/000073271724000046/t-20240506.htm"},{"by":"Mandiant (Google Cloud)","url":"https://cloud.google.com/blog/topics/threat-intelligence/unc5537-snowflake-data-theft-extortion"}],"year":2024},{"criteria":["loss","data","outage"],"de":{"actor":"Ransomware ALPHV/BlackCat, laut UnitedHealth","name":"Ransomware-Angriff auf Change Healthcare","summary":"Im Februar 2024 legte Ransomware Change Healthcare lahm. Apotheken und Praxen in den ganzen USA konnten wochenlang nicht abrechnen und keine Versicherung prüfen. Gestohlen wurden die Daten von rund 193 Millionen Menschen.","victim":"Change Healthcare (UnitedHealth Group), über das ein großer Teil der Arzt- und Apothekenabrechnungen in den USA läuft"},"disclosed":"2024-02-21","en":{"actor":"ALPHV/BlackCat ransomware, according to UnitedHealth","summary":"Ransomware shut down Change Healthcare in February 2024. Pharmacies and clinics across the US could not bill or check insurance for weeks, and the data of about 193 million people was stolen.","victim":"Change Healthcare (UnitedHealth Group), which processes a large share of US medical claims and pharmacy payments"},"figures":[{"de":"Menschen, deren Daten gestohlen wurden (Change Healthcare)","en":"people whose data was stolen (Change Healthcare)","value":"192.7 million","value_de":"192,7 Mio."},{"de":"Kosten 2024 für die Bewältigung und den Ausfall (UnitedHealth)","en":"costs in 2024 for the response and the disruption (UnitedHealth)","value":"USD 3.1 billion","value_de":"3,1 Mrd. USD"}],"helps":[{"de":"Organisationen: Verlangt die Zwei-Faktor-Anmeldung an jedem Fernzugang.","en":"Organizations: require multi-factor sign-in on every remote-access portal."},{"de":"Haltet Offline-Backups bereit und testet die Wiederherstellung der wichtigsten Systeme.","en":"Keep offline backups and test restoring core systems.","tool":"privacy"},{"de":"Praxen und Apotheken: Haltet einen zweiten Weg für Abrechnungen und Zahlungen bereit.","en":"Clinics and pharmacies: keep a second way to file claims and take payments."}],"key":"change-healthcare-2024","kind":"ransomware","name":"Change Healthcare ransomware attack","sources":[{"by":"UnitedHealth Group, Form 10-K 2024","url":"https://www.sec.gov/Archives/edgar/data/731766/000073176625000063/unh-20241231.htm"},{"by":"The Record","url":"https://therecord.media/unitedhealth-ceo-testifies-senate-hearing"},{"by":"Reuters via Business Insurance","url":"https://www.businessinsurance.com/hack-at-unitedhealths-tech-unit-impacted-192-7-million-us-website-shows/"}],"year":2024},{"criteria":["outage"],"de":{"actor":"Russischer Militärgeheimdienst (GRU-Einheit 74455, Sandworm), laut ukrainischem Geheimdienst SBU","name":"Cyberangriff auf Kyivstar","summary":"Ein zerstörerischer Angriff legte am 12. Dezember 2023 das größte Mobilfunknetz der Ukraine lahm. Rund 24 Millionen Kunden hatten weder Telefon noch Internet. Auch manche Luftalarme und Kartenterminals fielen aus.","victim":"Kyivstar, der größte Mobilfunkanbieter der Ukraine"},"disclosed":"2023-12-12","en":{"actor":"Russian military intelligence (GRU unit 74455, Sandworm), according to Ukraine's SBU","summary":"A destructive attack on December 12, 2023, took Ukraine's largest mobile network offline. About 24 million subscribers lost phone and internet service, and some air-raid alerts and card terminals failed too.","victim":"Kyivstar, Ukraine's largest mobile operator"},"figures":[{"de":"Mobilfunkkunden ohne Netz (Kyivstar)","en":"mobile subscribers without service (Kyivstar)","value":"24 million","value_de":"24 Mio."},{"de":"bis alle Dienste wieder liefen (VEON)","en":"until all services were back (VEON)","value":"1 week","value_de":"1 Woche"}],"helps":[{"de":"Halte für Notfälle eine zweite SIM oder eSIM eines anderen Anbieters bereit.","en":"Keep a second SIM or eSIM from another operator for emergencies."},{"de":"Organisationen: Kontrolliert Administratorkonten streng.","en":"Organizations: keep administrator accounts under strict control."},{"de":"Haltet Offline-Backups und einen geübten Plan für den Wiederaufbau der Systeme bereit.","en":"Keep offline backups and a rehearsed plan to rebuild systems.","tool":"privacy"}],"key":"kyivstar-2023","kind":"sabotage","name":"Kyivstar cyberattack","sources":[{"by":"VEON","url":"https://www.veon.com/newsroom/press-releases/kyivstar-restores-services-in-all-categories-brings-99-of-mobile-network-back-on-air"},{"by":"Security Service of Ukraine (SBU)","url":"https://ssu.gov.ua/en/novyny/sbu-vidkryla-kryminalne-provadzhennia-za-faktom-kiberataky-na-kyivstar"},{"by":"The Record","url":"https://therecord.media/russians-infiltrated-kyivstar-months-before"}],"year":2023},{"criteria":["outage"],"de":{"actor":"Nicht zugeordnet","name":"Cyberangriff auf DP World Australia","summary":"Eindringlinge im Netz von DP World Australia zwangen das Unternehmen im November 2023, seine vier Containerterminals vom Internet zu trennen. Die Regierung sprach von einem Vorfall von nationaler Bedeutung.","victim":"DP World Australia, Betreiber von Containerterminals in Sydney, Melbourne, Brisbane und Fremantle"},"disclosed":"2023-11-11","en":{"actor":"Not attributed","summary":"Intruders in DP World Australia's network forced the company to cut its four container terminals off the internet in November 2023. The government called it a nationally significant incident.","victim":"DP World Australia, which runs container terminals in Sydney, Melbourne, Brisbane and Fremantle"},"figures":[{"de":"konnten Lkw in vier Häfen keine Container abholen oder anliefern (DP World)","en":"without trucks collecting or delivering containers at four ports (DP World)","value":"3 days","value_de":"3 Tage"},{"de":"Container stauten sich (DP World)","en":"containers backed up (DP World)","value":"30,000+"}],"helps":[{"de":"Organisationen: Haltet Abläufe für Handbetrieb bereit, falls die Systeme ausfallen.","en":"Organizations: keep manual procedures ready for when systems fail."},{"de":"Trennt Netze, damit ein Einbruch nicht alles erreicht.","en":"Separate networks, so that one intrusion cannot reach everything."},{"de":"Haltet Offline-Backups bereit.","en":"Keep offline backups.","tool":"privacy"}],"key":"dp-world-australia-2023","kind":"intrusion","name":"DP World Australia cyberattack","sources":[{"by":"The Record","url":"https://therecord.media/australian-ports-operator-recovering-from-large-cyber-incident"},{"by":"BleepingComputer","url":"https://www.bleepingcomputer.com/news/security/dp-world-confirms-data-stolen-in-cyberattack-no-ransomware-used/"}],"year":2023},{"criteria":["outage"],"de":{"actor":"Ransomware Conti und Hive, laut Regierung und CCSS","name":"Ransomware-Angriffe auf Costa Ricas Regierung","summary":"Im April 2022 traf die Ransomware Conti das Finanzministerium von Costa Rica und weitere Behörden. Die neue Regierung rief den nationalen Notstand aus. Nach einem zweiten Angriff am 31. Mai arbeiteten die Krankenhäuser und Kliniken der Sozialversicherung wochenlang auf Papier.","victim":"Die Regierung von Costa Rica, zuerst das Finanzministerium, und die Sozialversicherung CCSS"},"disclosed":"2022-04-18","en":{"actor":"Conti and Hive ransomware, according to the government and the CCSS","summary":"Conti ransomware hit Costa Rica's finance ministry and other agencies in April 2022, and the new government declared a national emergency. A second attack on May 31 sent the hospitals and clinics of the social security fund back to paper for weeks.","victim":"Costa Rica's government, starting with the finance ministry, and the social security fund CCSS"},"figures":[{"de":"Ransomware-Gruppen: Conti gegen die Regierung, Hive gegen die Sozialversicherung","en":"ransomware groups: Conti against the government, Hive against the social security fund","value":"2"},{"de":"von 1.500 Servern der Sozialversicherung verschlüsselt (CCSS)","en":"of 1,500 servers of the social security fund encrypted (CCSS)","value":"~30"}],"helps":[{"de":"Organisationen: Verlangt die Zwei-Faktor-Anmeldung für jeden Fernzugriff.","en":"Organizations: require multi-factor sign-in for all remote access."},{"de":"Haltet Offline-Backups bereit und testet die Wiederherstellung.","en":"Keep offline backups and test restoring them.","tool":"privacy"},{"de":"Kliniken: Haltet Papierabläufe für Ausfälle bereit.","en":"Clinics: keep paper procedures ready for downtime."}],"key":"costa-rica-2022","kind":"ransomware","name":"Costa Rica government ransomware attacks","sources":[{"by":"BleepingComputer","url":"https://www.bleepingcomputer.com/news/security/costa-rica-declares-national-emergency-after-conti-ransomware-attacks/"},{"by":"CRHoy","url":"https://www.crhoy.com/nacionales/ccss-confirma-alrededor-de-30-servidores-afectados-por-hackeo/"},{"by":"Delfino","url":"https://delfino.cr/2022/08/todos-los-establecimientos-de-la-ccss-rehabilitan-el-edus-para-atencion-de-usuarios"}],"year":2022},{"criteria":["loss"],"de":{"actor":"Die nordkoreanischen Gruppen Lazarus und APT38, laut FBI","name":"Hackerangriff auf die Ronin-Bridge","summary":"Angreifer brachten fünf der neun Validator-Schlüssel der Ronin-Bridge in ihre Gewalt. Damit zogen sie 173.600 Ether und 25,5 Millionen USDC ab. Sechs Tage lang merkte es niemand, bis ein Nutzer nichts mehr abheben konnte.","victim":"Ronin Network, die Bridge des Spiels Axie Infinity (Sky Mavis)"},"disclosed":"2022-03-29","en":{"actor":"North Korea's Lazarus Group and APT38, according to the FBI","summary":"Attackers took control of five of the nine validator keys that secure the Ronin bridge and withdrew 173,600 ether and 25.5 million USDC. Nobody noticed for six days, until a user could not withdraw.","victim":"Ronin Network, the bridge of the game Axie Infinity (Sky Mavis)"},"figures":[{"de":"gestohlen (FBI)","en":"stolen (FBI)","value":"USD 620 million","value_de":"620 Mio. USD"},{"de":"bis es jemand bemerkte (Ronin)","en":"until anyone noticed (Ronin)","value":"6 days","value_de":"6 Tage"}],"helps":[{"de":"Rechne bei unerwarteten Jobangeboten und Dateien von Recruitern mit einem Angriff.","en":"Treat unexpected job offers and files from recruiters as a possible attack."},{"de":"Organisationen: Verteilt Signaturschlüssel auf unabhängige Stellen. Schlagt bei großen Abhebungen sofort Alarm.","en":"Organizations: spread signing keys across independent parties and alert on large withdrawals at once."}],"key":"ronin-2022","kind":"crypto","name":"Ronin bridge hack","sources":[{"by":"Ronin Network","url":"https://roninchain.com/blog/posts/community-alert-ronin-validators-6513cc78a5edc1001b03c366"},{"by":"BleepingComputer (on the FBI statement)","url":"https://www.bleepingcomputer.com/news/security/fbi-links-largest-crypto-hack-ever-to-north-korean-hackers"}],"year":2022},{"criteria":["outage"],"de":{"actor":"Iranische Behörden beschuldigten ein nicht genanntes anderes Land","name":"Cyberangriff auf Irans Tankstellen","summary":"Am 26. Oktober 2021 legte ein Cyberangriff das Chipkartensystem lahm, mit dem Iraner subventionierten Kraftstoff kaufen. An Tankstellen im ganzen Land bildeten sich lange Schlangen. Die Behörden bestätigten den Angriff. Viele Tankstellen waren auch am nächsten Tag noch geschlossen.","victim":"Irans Chipkartensystem für subventionierten Kraftstoff und die Tankstellen, die es nutzen"},"disclosed":"2021-10-26","en":{"actor":"Iranian officials blamed an unnamed foreign country","summary":"A cyberattack on October 26, 2021, shut down the smart-card system Iranians use to buy subsidized fuel, and long queues formed at filling stations across the country. Officials confirmed the attack, and many stations were still closed the next day.","victim":"Iran's smart-card system for subsidized fuel and the filling stations that use it"},"figures":[{"de":"Verkauf von subventioniertem Kraftstoff per Chipkarte gestört (iranische Behörden)","en":"sales of subsidized fuel by smart card disrupted (Iranian officials)","value":"nationwide","value_de":"landesweit"}],"helps":[{"de":"Organisationen: Sorgt dafür, dass ihr auch ohne das zentrale System verkaufen und kassieren könnt.","en":"Organizations: keep a way to sell and take payment when the central system is down."},{"de":"Kontrolliert zentrale Verwaltungssysteme streng.","en":"Keep central management systems under strict control."},{"de":"Haltet Offline-Backups bereit und übt die Wiederherstellung.","en":"Keep offline backups and rehearse recovery.","tool":"privacy"}],"key":"iran-fuel-2021","kind":"sabotage","name":"Iran fuel station cyberattack","sources":[{"by":"RFE/RL","url":"https://www.globalsecurity.org/wmd/library/news/iran/2021/iran-211026-rferl01.htm"},{"by":"Reuters/AP via Inquirer","url":"https://newsinfo.inquirer.net/1507140/iran-says-cyberattack-causes-widespread-disruption-at-gas-stations"}],"year":2021},{"criteria":["outage"],"de":{"actor":"Nicht zugeordnet","name":"Cyberangriff auf die Hafenterminals von Transnet","summary":"Im Juli 2021 legte ein Cyberangriff das System lahm, das Südafrikas wichtigste Containerterminals steuert. Die Beschäftigten arbeiteten von Hand weiter. Transnet erklärte höhere Gewalt, bis das System wieder lief.","victim":"Transnet, Südafrikas staatlicher Hafen- und Bahnbetreiber"},"disclosed":"2021-07-26","en":{"actor":"Not attributed","summary":"A cyberattack in July 2021 disabled the system that runs South Africa's main container terminals, and staff fell back on manual work. Transnet declared force majeure until the system was restored.","victim":"Transnet, South Africa's state port and rail operator"},"figures":[{"de":"Containerterminals unter höherer Gewalt: Durban, Ngqura, Gqeberha, Kapstadt (Transnet)","en":"container terminals under force majeure: Durban, Ngqura, Gqeberha, Cape Town (Transnet)","value":"4"},{"de":"bis Transnet die höhere Gewalt am 2. August aufhob","en":"until force majeure was lifted on August 2 (Transnet)","value":"11 days","value_de":"11 Tage"}],"helps":[{"de":"Organisationen: Haltet Abläufe für Handbetrieb bereit, falls die Systeme ausfallen.","en":"Organizations: keep manual procedures ready for when systems fail."},{"de":"Haltet Offline-Backups bereit und testet die Wiederherstellung.","en":"Keep offline backups and test restoring them.","tool":"privacy"},{"de":"Trennt Netze, damit ein Einbruch nicht alles erreicht.","en":"Separate networks, so that one intrusion cannot reach everything."}],"key":"transnet-2021","kind":"ransomware","name":"Transnet port terminals cyberattack","sources":[{"by":"TimesLIVE","url":"https://www.timeslive.co.za/news/south-africa/2021-07-27-transnet-declares-force-majeure-over-cyber-attack-and-sabotage/"},{"by":"Sowetan","url":"https://www.sowetan.co.za/news/south-africa/2021-07-31-transnet-to-lift-force-majeure-on-monday/"},{"by":"Institute for Security Studies","url":"https://issafrica.org/iss-today/cyber-attacks-expose-the-vulnerability-of-south-africas-ports"}],"year":2021},{"criteria":["outage"],"de":{"actor":"Ransomware Conti, laut HSE","name":"Ransomware-Angriff auf den HSE (Irland)","summary":"Am 14. Mai 2021 traf die Ransomware Conti den staatlichen Gesundheitsdienst Irlands. Der HSE schaltete sein gesamtes IT-Netz ab. Krankenhäuser arbeiteten auf Papier, Strahlentherapie und andere Behandlungen fielen aus.","victim":"Health Service Executive (HSE), der staatliche Gesundheitsdienst Irlands"},"disclosed":"2021-05-14","en":{"actor":"Conti ransomware, named by the HSE","summary":"Conti ransomware hit Ireland's national health service on May 14, 2021, and the HSE switched off its entire IT network. Hospitals worked on paper, and radiotherapy and other services stopped.","victim":"Health Service Executive (HSE), Ireland's public health service"},"figures":[{"de":"bis alle Server entschlüsselt waren (irischer Rechnungshof)","en":"until all servers were decrypted (Comptroller and Auditor General)","value":"130 days","value_de":"130 Tage"},{"de":"IT-Geräte an rund 4.000 Standorten (irischer Rechnungshof)","en":"IT devices at about 4,000 locations (Comptroller and Auditor General)","value":"70,000+"}],"helps":[{"de":"Organisationen: Überwacht rund um die Uhr und reagiert auf jede Warnung.","en":"Organizations: watch for attacks around the clock and act on alerts."},{"de":"Haltet Offline-Backups und erprobte Pläne für die Wiederherstellung bereit.","en":"Keep offline backups and tested restore plans.","tool":"privacy"},{"de":"Trennt die Netze verbundener Organisationen voneinander.","en":"Separate the networks of connected organizations."}],"key":"hse-ireland-2021","kind":"ransomware","name":"HSE ransomware attack (Ireland)","sources":[{"by":"Comptroller and Auditor General (Ireland)","url":"https://www.audit.gov.ie/en/find-report/publications/2022/12-financial-impact-of-cyber-security-attack.pdf"},{"by":"HSE / PwC post-incident review","url":"https://www.hse.ie/eng/services/publications/conti-cyber-attack-on-the-hse-full-report.pdf"}],"year":2021},{"criteria":["outage"],"de":{"actor":"Ransomware DarkSide, laut FBI","name":"Ransomware-Angriff auf Colonial Pipeline","summary":"Im Mai 2021 traf Ransomware die Büro-IT von Colonial Pipeline. Daraufhin legte das Unternehmen die wichtigste Kraftstoff-Pipeline zur US-Ostküste still. Nach Hamsterkäufen hatten viele Tankstellen kein Benzin mehr.","victim":"Colonial Pipeline, die größte Kraftstoff-Pipeline der USA"},"disclosed":"2021-05-08","en":{"actor":"DarkSide ransomware, according to the FBI","summary":"Ransomware in Colonial Pipeline's office IT led the company to shut down the main fuel pipeline to the US East Coast in May 2021. Panic buying left many filling stations dry.","victim":"Colonial Pipeline, the largest fuel pipeline in the US"},"figures":[{"de":"stand die wichtigste Kraftstoff-Pipeline zur US-Ostküste still (Colonial Pipeline)","en":"that the main fuel pipeline to the US East Coast was shut (Colonial Pipeline)","value":"5 days","value_de":"5 Tage"},{"de":"Lösegeld gezahlt; das FBI stellte 63,7 BTC wieder sicher (US-Justizministerium)","en":"ransom paid; the FBI seized 63.7 BTC back (US Department of Justice)","value":"75 BTC"}],"helps":[{"de":"Organisationen: Trennt die Büro-IT von den Systemen, die den Betrieb steuern.","en":"Organizations: separate office IT from the systems that run operations."},{"de":"Verlangt die Zwei-Faktor-Anmeldung für jedes Konto mit Fernzugriff.","en":"Require multi-factor sign-in on every remote-access account."},{"de":"Haltet Offline-Backups und einen geübten Plan für den Handbetrieb bereit.","en":"Keep offline backups and a rehearsed plan for manual operation.","tool":"privacy"}],"key":"colonial-pipeline-2021","kind":"ransomware","name":"Colonial Pipeline ransomware attack","sources":[{"by":"US Department of Justice","url":"https://www.justice.gov/archives/opa/pr/department-justice-seizes-23-million-cryptocurrency-paid-ransomware-extortionists-darkside"},{"by":"FBI","url":"https://www.fbi.gov/news/press-releases/fbi-statement-on-compromise-of-colonial-pipeline-networks"},{"by":"Associated Press","url":"https://www.news4jax.com/news/florida/2021/05/15/pipeline-operator-says-normal-operations-have-resumed/"}],"year":2021},{"criteria":["data"],"de":{"actor":"Nicht zugeordnet","name":"Abgegriffene Telefonnummern bei Facebook","summary":"Bis September 2019 missbrauchten Angreifer den Kontaktimport von Facebook, um Telefonnummern Profilen zuzuordnen. Im April 2021 stand der Datensatz kostenlos im Netz.","victim":"Meta (Facebook) und seine Nutzer"},"disclosed":"2021-04-03","en":{"actor":"Not attributed","summary":"Before September 2019, attackers abused Facebook's contact import to match phone numbers to profiles. The data set was published free online in April 2021.","victim":"Meta (Facebook) and its users"},"figures":[{"de":"Facebook-Nutzer in 106 Ländern (Bundesgerichtshof)","en":"Facebook users in 106 countries (German Federal Court of Justice)","value":"533 million","value_de":"533 Mio."},{"de":"Bußgeld der irischen Datenschutzbehörde","en":"fine from the Irish Data Protection Commission","value":"EUR 265 million","value_de":"265 Mio. EUR"}],"helps":[{"de":"Verberge deine Telefonnummer und E-Mail-Adresse vor der Profilsuche.","en":"Hide your phone number and email address from profile search."},{"de":"Rechne bei unerwarteten Anrufen und SMS, die deinen Namen nennen, mit Phishing.","en":"Treat unexpected calls and texts that use your name as possible phishing."},{"de":"Nutze die Zwei-Faktor-Anmeldung per App, nicht per SMS.","en":"Use two-factor sign-in with an app, not by text message."}],"key":"facebook-2021","kind":"scraping","name":"Facebook phone number scrape","sources":[{"by":"Bundesgerichtshof","url":"https://www.bundesgerichtshof.de/SharedDocs/Pressemitteilungen/DE/2024/2024218.html"},{"by":"Irish Data Protection Commission","url":"https://www.dataprotection.ie/en/news-media/press-releases/data-protection-commission-announces-decision-in-facebook-data-scraping-inquiry"},{"by":"Meta","url":"https://about.fb.com/news/2021/04/facts-on-news-reports-about-facebook-data/"}],"year":2021},{"criteria":["data"],"de":{"actor":"Eine frühere IT-Fachkraft aus Seattle, die allein handelte; 2022 von einem US-Geschworenengericht verurteilt","name":"Datendiebstahl bei Capital One","summary":"Über eine falsch eingerichtete Cloud lud ein Eindringling Daten von rund 100 Millionen Menschen in den USA und 6 Millionen in Kanada herunter. Die meisten stammten aus Kreditkartenanträgen. Die US-Bankenaufsicht verhängte 80 Millionen Dollar Strafe, weil die Bank beim Umzug in die Cloud ihre Risiken schlecht kontrolliert hatte.","victim":"Capital One, eine US-Bank"},"disclosed":"2019-07-29","en":{"actor":"A former tech worker in Seattle, acting alone; convicted by a US jury in 2022","summary":"An intruder used a misconfigured cloud setup to download data on about 100 million people in the US and 6 million in Canada, mostly from credit card applications. The US bank regulator fined Capital One 80 million dollars for weak risk controls in its move to the cloud.","victim":"Capital One, a US bank"},"figures":[{"de":"Menschen in den USA und Kanada (Capital One)","en":"people in the US and Canada (Capital One)","value":"106 million","value_de":"106 Mio."},{"de":"Strafe der US-Bankenaufsicht OCC","en":"penalty from the US bank regulator OCC","value":"USD 80 million","value_de":"80 Mio. USD"}],"helps":[{"de":"Lass deine Kreditauskunft sperren, wenn deine Social Security Number oder Social Insurance Number offenlag.","en":"Freeze your credit if your Social Security or Social Insurance Number was exposed."},{"de":"Organisationen: Prüft regelmäßig die Rechte und Rollen für Cloud-Speicher.","en":"Organizations: review cloud storage permissions and access roles regularly."}],"key":"capital-one-2019","kind":"data","name":"Capital One data breach","sources":[{"by":"Capital One, Form 8-K","url":"https://www.sec.gov/Archives/edgar/data/927628/000092762819000262/exhibit991-pressrelease72919.htm"},{"by":"US Department of Justice","url":"https://www.justice.gov/usao-wdwa/pr/former-seattle-tech-worker-convicted-wire-fraud-and-computer-intrusions"},{"by":"Office of the Comptroller of the Currency","url":"https://www.occ.gov/news-issuances/news-releases/2020/nr-occ-2020-101.html"}],"year":2019},{"criteria":["data"],"de":{"actor":"Nicht zugeordnet","name":"Datendiebstahl in der Gästedatenbank von Marriott (Starwood)","summary":"Von 2014 bis 2018 saßen Angreifer in der Buchungsdatenbank der Hotelgruppe Starwood. Marriott kaufte Starwood 2016 und entdeckte den Einbruch erst 2018.","victim":"Marriott International, über die Gästedatenbank der Starwood-Hotels"},"disclosed":"2018-11-30","en":{"actor":"Not attributed","summary":"Attackers were inside the reservation database of the Starwood hotel group from 2014 until 2018. Marriott bought Starwood in 2016 and found the intrusion only in 2018.","victim":"Marriott International, through the guest database of the Starwood hotels"},"figures":[{"de":"Gästedatensätze, höchstens (Marriott)","en":"guest records at most (Marriott)","value":"383 million","value_de":"383 Mio."},{"de":"unverschlüsselte Passnummern (Marriott)","en":"unencrypted passport numbers (Marriott)","value":"5.25 million","value_de":"5,25 Mio."}],"helps":[{"de":"Nutze für jedes Bonusprogramm ein eigenes Passwort.","en":"Use a different password for every loyalty program.","tool":"passwords"},{"de":"Sei vorsichtig bei E-Mails, die deine Buchungen oder deine Bonusnummer nennen.","en":"Be wary of emails that quote your bookings or loyalty number."},{"de":"Organisationen: Prüft die IT übernommener Firmen auf Einbrüche.","en":"Organizations: check the IT of companies you take over for intrusions."}],"key":"marriott-2018","kind":"data","name":"Marriott (Starwood) guest database breach","sources":[{"by":"Marriott, Form 8-K","url":"https://www.sec.gov/Archives/edgar/data/1048286/000162828019000090/mar201901ex99.htm"},{"by":"US Federal Trade Commission","url":"https://www.ftc.gov/news-events/news/press-releases/2024/10/ftc-takes-action-against-marriott-starwood-over-multiple-data-breaches"},{"by":"UK Information Commissioner's Office","url":"https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2020/10/ico-fines-marriott-international-inc-184million-for-failing-to-keep-customers-personal-data-secure/"}],"year":2018},{"criteria":["data"],"de":{"actor":"Nicht zugeordnet","name":"Datendiebstahl bei MyFitnessPal","summary":"Unbefugte erbeuteten Benutzernamen, E-Mail-Adressen und gehashte Passwörter von MyFitnessPal-Nutzern. Kartendaten lagen getrennt und waren nicht betroffen.","victim":"Under Armour, Anbieter der App MyFitnessPal"},"disclosed":"2018-03-29","en":{"actor":"Not attributed","summary":"An unauthorized party took usernames, email addresses and hashed passwords of MyFitnessPal users. Payment card data was stored separately and was not affected.","victim":"Under Armour, maker of the MyFitnessPal app"},"figures":[{"de":"Benutzerkonten (Under Armour)","en":"user accounts (Under Armour)","value":"150 million","value_de":"150 Mio."}],"helps":[{"de":"Nutze einen Passwortmanager und für jeden Dienst ein eigenes Passwort.","en":"Use a password manager and a different password for every service.","tool":"passwords"},{"de":"Schalte die Zwei-Faktor-Anmeldung ein, wo die App sie anbietet.","en":"Turn on two-factor sign-in where the app offers it."}],"key":"myfitnesspal-2018","kind":"data","name":"MyFitnessPal data breach","sources":[{"by":"Under Armour, Form 8-K","url":"https://www.sec.gov/Archives/edgar/data/0001336917/000133691718000012/exhibit991march292018.htm"},{"by":"NBC News","url":"https://www.nbcnews.com/tech/security/under-armour-says-data-hacked-150m-myfitnesspal-app-accounts-n861406"}],"year":2018},{"criteria":["loss"],"de":{"actor":"Nicht zugeordnet","name":"NEM-Diebstahl bei Coincheck","summary":"Angreifer erbeuteten die privaten Schlüssel der Online-Wallet, in der alle NEM-Coins der Kunden lagen. In rund acht Stunden zogen sie die Coins ab. Japans Finanzaufsicht ordnete strengere Kontrollen an.","victim":"Coincheck, eine Kryptobörse in Tokio, und ihre Kunden"},"disclosed":"2018-01-26","en":{"actor":"Not attributed","summary":"Attackers obtained the private keys of the online wallet that held all of Coincheck's customer NEM coins and moved the coins out within about eight hours. Japan's regulator ordered the exchange to improve its controls.","victim":"Coincheck, a cryptocurrency exchange in Tokyo, and its customers"},"figures":[{"de":"an NEM-Coins der Kunden gestohlen (japanische Finanzaufsicht), damals rund 530 Mio. US-Dollar","en":"in customers' NEM coins stolen (Japan's Financial Services Agency), about USD 530 million at the time","value":"JPY 58 billion","value_de":"58 Mrd. JPY"},{"de":"NEM-Coins abgezogen (Coincheck)","en":"NEM coins moved out (Coincheck)","value":"523 million","value_de":"523 Mio."}],"helps":[{"de":"Bewahre größere Krypto-Beträge in einer Hardware-Wallet auf, die du selbst kontrollierst, nicht auf einer Börse.","en":"Keep larger crypto amounts in a hardware wallet you control, not on an exchange."},{"de":"Börsen: Lagert den Großteil der Kunden-Coins offline (Cold Storage).","en":"Exchanges: keep most customer coins in offline (cold) storage."}],"key":"coincheck-2018","kind":"crypto","name":"Coincheck NEM theft","sources":[{"by":"Japan Financial Services Agency","url":"https://www.fsa.go.jp/news/30/singi/20181221-1.pdf"},{"by":"Japan Financial Services Agency","url":"https://www.fsa.go.jp/news/30/virtual_currency/kasoutuka.html"}],"year":2018},{"criteria":["data"],"de":{"actor":"Vier Angehörige der chinesischen Volksbefreiungsarmee, 2020 vom US-Justizministerium angeklagt","name":"Datendiebstahl bei Equifax","summary":"Angreifer kamen über eine ungepatchte Webanwendung ins Netz. Sie erbeuteten Namen, Geburtsdaten und Sozialversicherungsnummern von rund 147 Millionen Menschen. Equifax sagte zu, bis zu 700 Millionen Dollar zu zahlen.","victim":"Equifax, eine US-Auskunftei"},"disclosed":"2017-09-07","en":{"actor":"Four members of China's People's Liberation Army, charged by the US Department of Justice in 2020","summary":"Attackers got in through an unpatched web application and took names, birth dates and Social Security numbers of about 147 million people. Equifax agreed to pay up to 700 million dollars.","victim":"Equifax, a US credit reporting agency"},"figures":[{"de":"Menschen, deren Namen und Geburtsdaten erbeutet wurden (FTC)","en":"people whose names and birth dates were taken (FTC)","value":"147 million","value_de":"147 Mio."},{"de":"Vergleich mit FTC, CFPB und US-Bundesstaaten, höchstens","en":"settlement at most, with the FTC, the CFPB and US states","value":"USD 700 million","value_de":"700 Mio. USD"}],"helps":[{"de":"In den USA: Lass deine Kreditauskunft bei den Auskunfteien sperren.","en":"In the US: freeze your credit with the credit bureaus."},{"de":"Prüfe deine Kreditauskünfte auf Konten, die du nicht eröffnet hast.","en":"Check your credit reports for accounts you did not open."},{"de":"Organisationen: Patcht Systeme, die aus dem Internet erreichbar sind, schnell.","en":"Organizations: patch systems that face the internet quickly."}],"key":"equifax-2017","kind":"data","name":"Equifax data breach","sources":[{"by":"US Federal Trade Commission","url":"https://www.ftc.gov/news-events/news/press-releases/2019/07/equifax-pay-575-million-part-settlement-ftc-cfpb-states-related-2017-data-breach"},{"by":"FBI","url":"https://www.fbi.gov/news/stories/chinese-hackers-charged-in-equifax-breach-021020"},{"by":"US Department of Justice","url":"https://www.justice.gov/archives/opa/pr/chinese-military-personnel-charged-computer-fraud-economic-espionage-and-wire-fraud-hacking"}],"year":2017},{"criteria":["data"],"de":{"actor":"Nicht zugeordnet","name":"Datendiebstahl bei Yahoo 2013","summary":"Angreifer kopierten die Daten aller Yahoo-Konten, die im August 2013 bestanden. Yahoo machte den Diebstahl im Dezember 2016 öffentlich. Erst im Oktober 2017 räumte das Unternehmen ein, dass alle Konten betroffen waren.","victim":"Yahoo"},"disclosed":"2016-12-14","en":{"actor":"Not attributed","summary":"Attackers copied data of every Yahoo user account that existed in August 2013. Yahoo disclosed the theft in December 2016 and said only in October 2017 that all accounts were affected.","victim":"Yahoo"},"figures":[{"de":"Benutzerkonten: alle, die im August 2013 bestanden (Yahoo)","en":"user accounts: every account that existed in August 2013 (Yahoo)","value":"3 billion","value_de":"3 Mrd."}],"helps":[{"de":"Nutze einen Passwortmanager und für jeden Dienst ein eigenes Passwort.","en":"Use a password manager and a different password for every service.","tool":"passwords"},{"de":"Schalte die Zwei-Faktor-Anmeldung ein, vor allem für dein Haupt-E-Mail-Konto.","en":"Turn on two-factor sign-in, above all for your main email account."},{"de":"Beantworte Sicherheitsfragen so, dass niemand die Antwort nachschlagen kann.","en":"Give security questions answers nobody can look up."}],"key":"yahoo-2013","kind":"data","name":"Yahoo data theft of 2013","sources":[{"by":"Yahoo/Oath, Verizon Form 8-K","url":"https://www.sec.gov/Archives/edgar/data/732712/000073271217000003/a2017_10x3xoathxexhibitx991.htm"},{"by":"Dark Reading","url":"https://www.darkreading.com/cyberattacks-data-breaches/yahoo-all-3-billion-accounts-affected-in-2013-breach"}],"year":2016},{"criteria":["data"],"de":{"actor":"Zwei Offiziere des russischen Geheimdienstes FSB und zwei Hacker, die für sie arbeiteten; 2017 vom US-Justizministerium angeklagt","name":"Datendiebstahl bei Yahoo 2014","summary":"Ende 2014 wurden Kontodaten von mindestens 500 Millionen Yahoo-Nutzern gestohlen, darunter Namen, E-Mail-Adressen, Geburtsdaten und gehashte Passwörter. Yahoo informierte die Öffentlichkeit erst im September 2016.","victim":"Yahoo"},"disclosed":"2016-09-22","en":{"actor":"Two officers of Russia's FSB intelligence service and two hackers working with them, charged by the US Department of Justice in 2017","summary":"Account data of at least 500 million Yahoo users was stolen in late 2014, including names, email addresses, birth dates and hashed passwords. Yahoo told the public only in September 2016.","victim":"Yahoo"},"figures":[{"de":"Benutzerkonten, mindestens (Yahoo)","en":"user accounts at least (Yahoo)","value":"500 million","value_de":"500 Mio."},{"de":"Strafe der US-Börsenaufsicht SEC, weil Anleger zwei Jahre zu spät davon erfuhren","en":"SEC penalty for telling investors two years late","value":"USD 35 million","value_de":"35 Mio. USD"}],"helps":[{"de":"Nutze einen Passwortmanager und für jeden Dienst ein eigenes Passwort.","en":"Use a password manager and a different password for every service.","tool":"passwords"},{"de":"Schalte die Zwei-Faktor-Anmeldung für E-Mail-Konten ein.","en":"Turn on two-factor sign-in for email accounts."}],"key":"yahoo-2014","kind":"data","name":"Yahoo data theft of 2014","sources":[{"by":"Yahoo, Form 8-K","url":"https://www.sec.gov/Archives/edgar/data/1011006/000119312516717056/d260014dex991.htm"},{"by":"US Securities and Exchange Commission","url":"https://www.sec.gov/news/press-release/2018-71"},{"by":"US Department of Justice","url":"https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions"}],"year":2016},{"criteria":["loss"],"de":{"actor":"Eine kriminelle Gruppe; laut Europol wurde ihr mutmaßlicher Anführer im März 2018 in Spanien festgenommen","happened":"2013 bis 2018","name":"Bankdiebstähle durch Carbanak und Cobalt","summary":"Eine kriminelle Gruppe schickte Bankangestellten gezielte Phishing-Mails und übernahm interne Systeme. Sie stahl Geld über gefälschte Überweisungen und über Geldautomaten, die auf Befehl auszahlten.","victim":"Mehr als 100 Banken und andere Finanzinstitute in rund 40 Ländern"},"disclosed":"2015-02-16","en":{"actor":"A criminal group; Europol said its suspected leader was arrested in Spain in March 2018","happened":"2013 to 2018","summary":"A criminal group sent spear-phishing emails to bank staff and took over internal systems. It stole money through fraudulent transfers and through ATMs that paid out on command.","victim":"More than 100 banks and other financial institutions in about 40 countries"},"figures":[{"de":"Schaden der Finanzbranche insgesamt (Europol)","en":"losses of the financial industry in total (Europol)","value":"EUR 1 billion+","value_de":"1 Mrd. EUR+"},{"de":"Banken und andere Finanzinstitute in 40 Ländern (Europol)","en":"banks and other financial institutions in 40 countries (Europol)","value":"100+"}],"helps":[{"de":"Banken: Gebt den Beschäftigten eine phishing-sichere Anmeldung und vergebt Administratorrechte sparsam.","en":"Banks: give staff phishing-resistant sign-in and keep administrator rights tight."},{"de":"Trennt Zahlungs- und Geldautomatensysteme vom Büronetz. Schlagt bei ungewöhnlichen Überweisungen Alarm.","en":"Keep payment and ATM systems apart from office networks, and alert on unusual transfers."}],"key":"carbanak-2015","kind":"bank","name":"Carbanak and Cobalt bank thefts","sources":[{"by":"Europol","url":"https://www.europol.europa.eu/media-press/newsroom/news/mastermind-behind-eur-1-billion-cyber-bank-robbery-arrested-in-spain"},{"by":"Kaspersky","url":"https://securelist.com/the-great-bank-robbery-the-carbanak-apt/68732/"}],"year":2015},{"criteria":["data"],"de":{"actor":"Ein US-Hacker und zwei Komplizen in oder nahe Russland, angeklagt vom US-Justizministerium; der US-Hacker erhielt 20 Jahre Haft","happened":"Ende 2007 bis 2008","name":"Datendiebstahl bei Heartland Payment Systems","summary":"Angreifer drangen über eine SQL-Injection-Lücke ein. Ihre Schadsoftware las Kartendaten mit, während sie durch die Systeme von Heartland liefen. Die Anklage nannte es den größten Fall von Hacking und Identitätsdiebstahl, den sie je verfolgt hatte.","victim":"Heartland Payment Systems, ein US-Abwickler von Kartenzahlungen"},"disclosed":"2009-01-20","en":{"actor":"A US hacker and two accomplices in or near Russia, charged by the US Department of Justice; the US hacker was sentenced to 20 years","happened":"Late 2007 to 2008","summary":"Attackers broke in through a SQL injection flaw and planted malware that read card data as it passed through Heartland's systems. Prosecutors called it the largest hacking and identity theft case they had ever brought.","victim":"Heartland Payment Systems, a US card payment processor"},"figures":[{"de":"Kartennummern, gestohlen bei Heartland und vier weiteren Firmen (US-Justizministerium)","en":"card numbers stolen from Heartland and four other companies (US Department of Justice)","value":"130 million+","value_de":"130 Mio.+"},{"de":"Kosten, die Heartland für 2009 verbuchte (Jahresbericht)","en":"costs Heartland booked for 2009 (annual report)","value":"USD 128.9 million","value_de":"128,9 Mio. USD"}],"helps":[{"de":"Schalte Benachrichtigungen für deine Karte ein und prüfe deine Abrechnungen.","en":"Turn on card alerts and check your statements."},{"de":"Zahlungsdienstleister: Verschlüsselt Kartendaten durchgehend und achtet auf unbekannte Software auf Servern.","en":"Payment firms: encrypt card data end to end and watch servers for unknown software."}],"key":"heartland-2009","kind":"data","name":"Heartland Payment Systems breach","sources":[{"by":"US Attorney, District of New Jersey","url":"https://www.justice.gov/sites/default/files/usao-nj/legacy/2013/11/29/gonz0817%20rel.pdf"},{"by":"Heartland Payment Systems, Form 10-K 2009","url":"https://www.sec.gov/Archives/edgar/data/0001144354/000119312510052648/d10k.htm"}],"year":2009}],"checked":"2026-11-01","excluded":[{"de":"Rund 850.000 Bitcoin verschwanden, 200.000 davon tauchten wieder auf. Der Rest war damals weniger als 500 Millionen US-Dollar wert.","en":"About 850,000 bitcoin went missing, and 200,000 of them were found again. At the time, the rest was worth less than 500 million US dollars.","name":"Mt. Gox","year":2014},{"de":"Token im Wert von rund 610 Millionen US-Dollar wurden abgezogen. Der Angreifer gab sie innerhalb von zwei Wochen zurück.","en":"About 610 million US dollars in tokens were taken, but the attacker returned them within two weeks.","name":"Poly Network","year":2021},{"de":"Spionage über ein manipuliertes Update, das weniger als 18.000 Kunden installierten. Kein belegter Schaden, keine Datenmenge und kein Ausfall erreicht die Schwellen.","en":"Espionage through a tampered update that fewer than 18,000 customers installed. No confirmed loss, data count or outage reaches the thresholds.","name":"SolarWinds","year":2020},{"de":"Rund 40 Millionen Zahlungskarten und die Kontaktdaten von bis zu 70 Millionen Menschen: unter 100 Millionen.","en":"About 40 million payment cards and the contact details of up to 70 million people: below 100 million.","name":"Target","year":2013},{"de":"Krankenhäuser arbeiteten wochenlang auf Papier, aber in einer Klinikgruppe, nicht in einem landesweiten Dienst. Erbeutet wurden Daten von 5,6 Millionen Menschen.","en":"Hospitals worked on paper for weeks, but in one hospital group, not a national service. Data of 5.6 million people was taken.","name":"Ascension","year":2024},{"de":"Die Autoproduktion stand rund fünf Wochen still. Autobau ist kein kritischer Dienst. Die bisher verbuchten Kosten von 196 Millionen Pfund liegen unter der Schwelle.","en":"Car production stopped for about five weeks. Making cars is not a critical service, and the costs booked so far, 196 million pounds, are below the threshold.","name":"Jaguar Land Rover","year":2025}]},"description":"Die Cyberangriffe mit der größten belegten Wirkung: mindestens 500 Millionen US-Dollar Schaden, Daten von 100 Millionen Menschen oder landesweite Ausfälle.","language":"de","latest_measurement":"2026-11-01","method":"latency-v3","method_page":"https://crackthe.net/de/daten/methode/","source":"https://crackthe.net/","text":"Wie ein Angriff auf diese Liste kommt Jedes Jahr werden Tausende Angriffe bekannt. Diese Liste enthält nur die mit der größten Wirkung. Ein Angriff kommt auf die Liste, wenn er mindestens eines von drei Kriterien erfüllt. Die Zahl dahinter muss vom Opfer, einer Behörde, einer Aufsicht oder einem Gericht stammen, nicht nur aus der Presse oder von den Angreifern.\nKriteriumErfüllt, wenn Schadenmindestens 500 Millionen US-Dollar gestohlen wurden oder verloren gingen, zum damaligen Wert; die eigenen Kosten des Opfers zählen mit DatenDaten von mindestens 100 Millionen Menschen, Benutzerkonten oder Zahlungskarten erbeutet oder veröffentlicht wurden Ausfallkritische Dienste wie Gesundheitsversorgung, Energie, Verkehr, Telekommunikation oder Zahlungsverkehr landesweit mindestens einen Tag ausfielen Angriffe, die sich über eine bekannte Schwachstelle verbreiteten, etwa WannaCry und NotPetya, stehen in der Liste der Schwachstellen. Angriffe auf industrielle Steuerungssysteme haben eigene Karten.\nDie Maßnahmen auf jeder Karte helfen gegen Angriffe dieser Art. Das heißt nicht, dass sie genau diesen Angriff verhindert hätten.","title":"Die größten Cyberangriffe: Diebstähle, Datenlecks und Ausfälle","url":"https://crackthe.net/de/sicherheit/angriffe/"}