https://techwire.nuffieldconsulting.com/incidents/Significant IT outages and data breaches, compiled from public reporting by Nuffield Consulting. Updated several times a day.en-gbSun, 15 Nov 2026 21:54:36 +0000https://techwire.nuffieldconsulting.com/incidents/2026-11-13-workday-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-workday-outage/Fri, 13 Nov 2026 12:00:00 +0000OutageOutage · Workday · severity major. Disaster-recovery services unexpectedly connected to production databases during a weekly backup test on 13 November, so Workday put production tenants into maintenance from about 22:15 UTC. Users at thousands of employers could not reach HR, payroll or time tracking for about 18 hours; tenants were restored in stages on 14 November. Source: San Francisco Chronicle.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-national-weather-service-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-national-weather-service-outage/Fri, 13 Nov 2026 12:00:00 +0000OutageOutage · US National Weather Service · severity minor. NWS reported nationwide internet and communications issues on Friday afternoon, leaving some web products unreachable or stale; it later said radars were working and that a weather radio problem was regional. Source: WBTV.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-faa-air-traffic-control-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-faa-air-traffic-control-outage/Fri, 13 Nov 2026 12:00:00 +0000OutageOutage · FAA air traffic control (US) · severity critical. A router overloaded during contractor L3Harris's work to replace copper wiring with fibre at a remote site, disrupting FAA radar and communications and forcing a nationwide ground stop from 20:54 to 01:15 UTC on 13 November. Thousands of flights were cancelled on Friday and Saturday; officials say there is no evidence of hacking or AI involvement. Source: TechCrunch.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-university-of-texas-at-arlington-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-university-of-texas-at-arlington-breach/Fri, 13 Nov 2026 12:00:00 +0000Data breachData breach · University of Texas at Arlington · severity major. The university confirmed personal information was stolen but has not said what; the Qilin ransomware gang has claimed responsibility. Source: The Record.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-uchealth-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-uchealth-breach/Fri, 13 Nov 2026 12:00:00 +0000Data breachData breach · UCHealth · severity major. An intruder accessed two employee accounts in UCHealth's Microsoft cloud environment and may have taken files; its electronic health record was not accessed. Source: GlobeNewswire.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-uber-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-uber-breach/Fri, 13 Nov 2026 12:00:00 +0000Data breachData breach · Uber · severity major. Attackers used credentials stolen in the Fireworks AI breach to reach Uber data on US drivers; filings in three states cover about 7,900 people so far and more are expected. Source: TechCrunch.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-dexcom-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-dexcom-breach/Fri, 13 Nov 2026 12:00:00 +0000Data breachData breach · Dexcom · severity major. Dexcom notified the California attorney general of an incident dated 2 November without giving a count; it earlier said voice-phishing calls led to access to some internal documents. Source: GalaxyWarden.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-cursor-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-cursor-breach/Fri, 13 Nov 2026 12:00:00 +0000Data breachData breach · Cursor (Anysphere) · severity major. Cursor says an attacker used a key it had issued to Fireworks AI to read coding-agent traces, then used credentials found in them to plant tampered Claude Code extension versions in its marketplace cache on 29 October. Up to 5,000 users may have downloaded them; some customer API credentials, support records and archived source code were also exposed. Source: Cyber Security News.https://techwire.nuffieldconsulting.com/incidents/2026-11-13-city-of-osaka-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-13-city-of-osaka-breach/Fri, 13 Nov 2026 12:00:00 +0000Data breachData breach · City of Osaka · severity major. The breach of the Arara email service used by the city's platform provider exposed addresses of people emailed by the city's system between July and October. Source: The Record.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-yandex-cloud-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-yandex-cloud-outage/Thu, 12 Nov 2026 12:00:00 +0000OutageOutage · Yandex Cloud · severity major. Strikes since early October caused a fire and outages; Yandex says it restored over 97% of customer data but lost 2.84% and now turns on backups by default. Source: The Register.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-quantum-systems-drones-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-quantum-systems-drones-outage/Thu, 12 Nov 2026 12:00:00 +0000OutageOutage · Quantum Systems drones (Bundeswehr) · severity major. A malicious fake update pushed via the drone maker's compromised update server led the German military to ground its Quantum Systems drones briefly; flights have resumed. Source: DroneXL.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-microsoft-365-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-microsoft-365-outage/Thu, 12 Nov 2026 12:00:00 +0000OutageOutage · Microsoft 365 (Exchange Online / Outlook) · severity critical. Outlook, Exchange Online, Teams and Copilot failed worldwide from Thursday evening UK time; Microsoft declared the incident fixed early on 14 November. It blamed a problem from an earlier network capacity upgrade that surfaced after a later network change and overloaded servers, not a cyberattack. UK police, courts, GP practices and ISP support lines were among those hit; a full post-incident report is pending. Source: Lowyat.NET.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-tsmc-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-tsmc-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · TSMC · severity major. Data on some current and former staff appeared online and matched records held by an outside provider; TSMC says its own systems were not breached. A seller claims 46,000 records. Source: Cyber Security News.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-sogo-hong-kong-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-sogo-hong-kong-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · Sogo Hong Kong · severity major. Hong Kong's privacy commissioner disclosed the breach at the department store, which may have exposed member numbers, names, phone numbers, email addresses and points balances; jeweller Chow Sang Sang reported a separate breach the same day. Source: The Star (SCMP).https://techwire.nuffieldconsulting.com/incidents/2026-11-12-premise-health-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-premise-health-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · Premise Health · severity major. A former employee allegedly took data for about six months before discovery in September; filings in five states total 416,733 people and the final figure could be far higher. Source: BankInfoSecurity.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-philippine-government-agencies-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-philippine-government-agencies-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · Philippine government agencies · severity major. Agencies including the tax bureau, SEC, DICT and the coast guard filed breach notices; the BIR says some taxpayer profile data may have been exposed but not filing or payment records. Source: The Philippine Star.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-notion-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-notion-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · Notion · severity major. Attackers who breached AI vendor Fireworks took transcripts from a Notion AI feature, affecting about 1% of customers; Notion cut its links to Fireworks on 3 November. Source: TechCrunch.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-connectwise-screenconnect-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-connectwise-screenconnect-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · ConnectWise ScreenConnect · severity major. Huntress saw attackers reach 288 endpoints at 48 organisations through the third-party RMM+ add-on; ConnectWise disabled it in about 400 partner environments. Source: The Record.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-chainstack-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-chainstack-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · Chainstack · severity major. Attackers entered via an exposed Grafana instance with default credentials and reached parts of production; names, email addresses, password hashes and node credentials are treated as exposed. Source: The Block.https://techwire.nuffieldconsulting.com/incidents/2026-11-12-apify-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-12-apify-breach/Thu, 12 Nov 2026 12:00:00 +0000Data breachData breach · Apify · severity major. An intruder reached parts of the web-scraping platform's internal systems on 9–10 November; Apify rotated customer API tokens and proxy passwords, revoked OAuth links such as GitHub and says 2FA codes may have been exposed. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-11-ntt-docomo-5g-sa-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-11-ntt-docomo-5g-sa-outage/Wed, 11 Nov 2026 12:00:00 +0000OutageOutage · NTT Docomo 5G SA · severity major. Docomo's 5G standalone network failed for about nine hours on 11 November, after a 14-hour failure days earlier that hit up to 1.5 million customers. Both were caused by congestion in switching equipment; the underlying fault is still under investigation. Source: Light Reading.https://techwire.nuffieldconsulting.com/incidents/2026-11-11-epuap-poland-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-11-epuap-poland-outage/Wed, 11 Nov 2026 12:00:00 +0000OutageOutage · ePUAP (Poland) · severity major. The national e-government document platform was shut as a precaution after an attack was detected and stopped. It is partly back but has not regained full functionality, and the digital ministry has given no date for full restoration. Source: TVP Info.https://techwire.nuffieldconsulting.com/incidents/2026-11-11-canonical-ubuntu-online-services-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-11-canonical-ubuntu-online-services-outage/Wed, 11 Nov 2026 12:00:00 +0000OutageOutage · Canonical / Ubuntu online services · severity major. A data-centre infrastructure incident took down Ubuntu websites, DNS, Launchpad, the keyserver and other services from about 11:00 to 18:40 UTC; Canonical has not published a root cause. Source: The Register.https://techwire.nuffieldconsulting.com/incidents/2026-11-11-tajik-government-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-11-tajik-government-breach/Wed, 11 Nov 2026 12:00:00 +0000Data breachData breach · Tajik government · severity major. Researchers say the Silent Lynx group used an AI agent to steal more than 2,000 government security documents. Source: Reuters.https://techwire.nuffieldconsulting.com/incidents/2026-11-11-maersk-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-11-maersk-breach/Wed, 11 Nov 2026 12:00:00 +0000Data breachData breach · Maersk · severity major. WhiteArmor ransomware claims about 100GB, including some 30,000 driver records, and demands $5m; Maersk says no sensitive data has been disclosed so far. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-11-csctelecom-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-11-csctelecom-breach/Wed, 11 Nov 2026 12:00:00 +0000Data breachData breach · CSCTelecom · severity critical. An open database held four years of SMS traffic for banks, insurers, retailers and healthcare providers, including login codes, password resets and medical results. Source: Cybernews.https://techwire.nuffieldconsulting.com/incidents/2026-11-10-virgin-media-hub-4-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-10-virgin-media-hub-4-outage/Tue, 10 Nov 2026 12:00:00 +0000OutageOutage · Virgin Media Hub 4 · severity minor. Some customers lost access to router settings as a precaution, and Hitron business routers are also affected; Virgin Media says there is no evidence of exploitation. Source: ISPreview.https://techwire.nuffieldconsulting.com/incidents/2026-11-10-apple-icloud-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-10-apple-icloud-outage/Tue, 10 Nov 2026 12:00:00 +0000OutageOutage · Apple iCloud · severity major. Apple's status page showed outages for iCloud Mail, Calendar, Contacts, iWork for iCloud and Game Center from about 22:49 UK time on 10 November; Apple marked the issues resolved by about 01:30 on 11 November without giving a cause. Source: The Apple Post.https://techwire.nuffieldconsulting.com/incidents/2026-11-10-qubole-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-10-qubole-breach/Tue, 10 Nov 2026 12:00:00 +0000Data breachData breach · Qubole · severity major. An attacker used compromised credentials for the platform's AWS account to reach customers' cloud environments between 14 and 26 October; one victim lost millions of files. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-10-github-ci-secret-stealer-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-10-github-ci-secret-stealer-breach/Tue, 10 Nov 2026 12:00:00 +0000Data breachData breach · GitHub users (compromised accounts) · severity major. From 10 November attackers used 4,837 compromised GitHub accounts to open pull requests carrying a payload that exfiltrates GitHub Actions secrets and cloud and AI-provider credentials; at least 1,835 repositories ran it. Source: Aikido Security.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-n-able-n-central-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-n-able-n-central-outage/Mon, 09 Nov 2026 12:00:00 +0000OutageOutage · N-able N-central · severity critical. Hosted N-central was taken offline on 9 November after researcher-published exploits; all hosted servers were back on a patched build by early 11 November, after about 35 hours, with built-in remote control temporarily disabled. Source: Cyberpress.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-lloyds-banking-group-apps-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-lloyds-banking-group-apps-outage/Mon, 09 Nov 2026 12:00:00 +0000OutageOutage · Lloyds Banking Group apps · severity minor. More than 4,200 Downdetector reports came in on Monday morning, mostly about the Lloyds app; the bank later said services were back to normal. Source: Yahoo News UK.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-beget-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-beget-outage/Mon, 09 Nov 2026 12:00:00 +0000OutageOutage · Beget · severity critical. Attackers erased cloud data from 1 November. By 9 November about 60% of shared hosting and 40% of dedicated servers were back, but cloud VPS, S3 and Kubernetes data, CDN settings and IP configuration were lost permanently. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-york-university-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-york-university-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · York University · severity major. A threat actor stole information submitted through online forms. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-vanderbilt-university-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-vanderbilt-university-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Vanderbilt University · severity major. A gang says it encrypted databases and stole student, staff and research data; staff were asked to shut down devices and classes were disrupted while the university investigates. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-technical-university-of-munich-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-technical-university-of-munich-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Technical University of Munich · severity major. Attackers took central myTUM login passwords and used a sysadmin account against the TUMonline campus system, which was offline until 9 November. Source: The Register.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-sega-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-sega-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · SEGA · severity minor. The exposure came from a breach at its mailing provider, ARARA. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-revolve-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-revolve-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Revolve · severity major. An intrusion on its e-commerce platform in September exposed names, contact details and stored card numbers with expiry dates of 1,515,073 people. Source: SecurityWeek.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-nitori-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-nitori-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Nitori · severity critical. The furniture retailer confirmed unauthorised access on 6 November; email and home addresses may be exposed, while passwords and card details were not. Source: The Star (Reuters).https://techwire.nuffieldconsulting.com/incidents/2026-11-09-msad-insurance-group-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-msad-insurance-group-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · MS&AD Insurance Group · severity major. The Japanese group's count of affected records has grown past one million. Source: eSecurity Planet.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-government-of-gibraltar-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-government-of-gibraltar-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Government of Gibraltar · severity major. Hackers were inside the Microsoft 365 environment until Microsoft raised the alarm; the UK's NCSC is helping and some services were suspended. Source: The Olive Press.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-frontline-education-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-frontline-education-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Frontline Education · severity critical. Data on school district staff and students, including some Social Security numbers, dates of birth and health insurance IDs, was taken in an August intrusion; filings now put the total at 3,085,266. Source: SecurityWeek.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-fireworks-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-fireworks-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Fireworks · severity major. Its second breach in weeks came via a hack of a third-party cloud provider on 24 October, exposing customer datasets, model weights and billing data; customers Notion and Uber have since reported data taken through it. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-09-amplifon-americas-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-09-amplifon-americas-breach/Mon, 09 Nov 2026 12:00:00 +0000Data breachData breach · Amplifon Americas · severity major. Files were copied from internal systems; exposed data includes health, insurance and ID details. Source: SecurityWeek.https://techwire.nuffieldconsulting.com/incidents/2026-11-08-who-gives-a-crap-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-08-who-gives-a-crap-breach/Sun, 08 Nov 2026 12:00:00 +0000Data breachData breach · Who Gives A Crap · severity minor. Names, contact details, addresses and spend totals were taken from a US marketing provider between 30 October and 1 November; passwords and payment details were not affected. Source: TechRadar.https://techwire.nuffieldconsulting.com/incidents/2026-11-08-iris-ohyama-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-08-iris-ohyama-breach/Sun, 08 Nov 2026 12:00:00 +0000Data breachData breach · Iris Ohyama · severity major. Unauthorised access to a third-party cloud service may have exposed personal data. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-07-workos-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-07-workos-breach/Sat, 07 Nov 2026 12:00:00 +0000Data breachData breach · WorkOS · severity major. The researcher operating the tool says it broke out of its test environment and reached an internal sales app. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-07-credit-mutuel-arkea-breach/https://techwire.nuffieldconsulting.com/incidents/2026-11-07-credit-mutuel-arkea-breach/Sat, 07 Nov 2026 12:00:00 +0000Data breachData breach · Crédit Mutuel Arkéa · severity critical. Attackers made fraudulent transfers of up to $133M; some systems were suspended. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-06-veeam-software-appliance-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-06-veeam-software-appliance-outage/Fri, 06 Nov 2026 12:00:00 +0000OutageOutage · Veeam Software Appliance · severity minor. Virtual appliances would not start on some AMD EPYC servers. Source: BleepingComputer.https://techwire.nuffieldconsulting.com/incidents/2026-11-06-shinkin-banking-network-japan-outage/https://techwire.nuffieldconsulting.com/incidents/2026-11-06-shinkin-banking-network-japan-outage/Fri, 06 Nov 2026 12:00:00 +0000OutageOutage · Shinkin banking network (Japan) · severity major. The shared banking system fault disrupted about 3,400 branches. Source: Insider Paper.