Home / Monthly reports / May 2024

Outages & Breaches: May 2024 in numbers

4 significant outages (2 critical) and 9 data breaches (3 critical) were logged in May 2024. The largest breach by records was Ticketmaster (Live Nation) (560M claimed). The most common outage cause was cyberattack (3 of 4). 1 of the incidents mainly affected the UK.

Outages4▼ 1 vs April

Critical outages2wide impact

Breaches9▲ 6 vs April

Critical breaches3sensitive data at scale

Records exposed19.7Mconfirmed or company-reported

Further claimed609Mattacker claims, unverified

Outage causes

Cyberattack3

Provider error1

Named attackers

ShinyHunters2

DragonForce1

Clop1

Menelik1

Most significant incidents

31 May 2024Ticketmaster confirms Snowflake-linked breachTicketmaster (Live Nation) · breach · ShinyHunters · 560M claimedcritical
16 May 2024MediSecure ransomware hits 12.9 million AustraliansMediSecure · breach · Unknown · 12.9M recordscritical
8 May 2024Ascension hospitals revert to paper after ransomwareAscension · outage · Cyberattackcritical
7 May 2024MoD payroll system breach exposes armed forces staffUK Ministry of Defence (payroll) · breach · Unknown · 270K recordsUKcritical
2 May 2024Google Cloud deletes UniSuper's private cloudUniSuper (Google Cloud) · outage · Provider errorcritical
24 May 2024Sav-Rx breach exposes nearly 3 million peopleSav-Rx · breach · Unknown · 2.8M recordsmajor
16 May 2024WebTPA breach hits 2.4 million policyholdersWebTPA · breach · Unknown · 2.4M recordsmajor
14 May 2024Santander staff and customer data stolen via SnowflakeSantander · breach · ShinyHuntersmajor

All 4 outages

9 May 2024Christie's website down before major auctionsChristie's · outage · Cyberattackminor
8 May 2024Ascension hospitals revert to paper after ransomwareAscension · outage · Cyberattackcritical
5 May 2024LockBit attack shuts Wichita city systemsCity of Wichita · outage · Cyberattackmajor
2 May 2024Google Cloud deletes UniSuper's private cloudUniSuper (Google Cloud) · outage · Provider errorcritical

All 9 data breaches

31 May 2024Ticketmaster confirms Snowflake-linked breachTicketmaster (Live Nation) · breach · ShinyHunters · 560M claimedcritical
24 May 2024Sav-Rx breach exposes nearly 3 million peopleSav-Rx · breach · Unknown · 2.8M recordsmajor
16 May 2024WebTPA breach hits 2.4 million policyholdersWebTPA · breach · Unknown · 2.4M recordsmajor
16 May 2024MediSecure ransomware hits 12.9 million AustraliansMediSecure · breach · Unknown · 12.9M recordscritical
14 May 2024Santander staff and customer data stolen via SnowflakeSantander · breach · ShinyHuntersmajor
9 May 2024Ohio Lottery ransomware hits 538,000Ohio Lottery · breach · DragonForce · 539K recordsmajor
8 May 2024MOVEit hack exposes 800,000 in Georgia universitiesUniversity System of Georgia · breach · Clop · 800K recordsmajor
8 May 2024Hacker claims 49 million Dell customer recordsDell · breach · Menelik · 49M claimedmajor
7 May 2024MoD payroll system breach exposes armed forces staffUK Ministry of Defence (payroll) · breach · Unknown · 270K recordsUKcritical

2024 year to date

Incidents YTD63January to May 2024

Outages YTD25significant outages

Breaches YTD38data breaches

Critical YTD16outages and breaches

Records exposed YTD340Mconfirmed or company-reported

Month	Outages	Breaches	Critical	Running total
Jan	6	9	4	15
Feb	4	9	5	28
Mar	6	8	2	42
Apr	5	3	0	50
May	4	9	5	63
Total	25	38	16	63

Cite this

Nuffield Consulting, “Outages & Breaches: May 2024 in numbers”, The Daily Tech Wire,published May 2024. https://techwire.nuffieldconsulting.com/reports/2024-05/ (retrieved 15 Nov 2026).

The underlying data for every month is in the CSV download.