Home / Monthly reports / September 2025

Outages & Breaches: September 2025 in numbers

6 significant outages (5 critical) and 7 data breaches (2 critical) were logged in September 2025. The largest breach by records was Salesforce customers (Salesloft Drift) (1.5B claimed). The longest outage with a known duration was Optus Triple Zero (13 hours). The most common outage cause was cyberattack (3 of 6). 4 of the incidents mainly affected the UK.

Most significant incidents

• 29 Sep 2025Qilin ransomware halts Asahi beer production in JapanAsahi · outage · Cyberattackcritical
• 26 Sep 2025Battery fire destroys South Korea's government data centreSouth Korea NIRS · outage · Power / firecritical
• 26 Sep 2025Hackers steal data on 8,000 nursery childrenKido nurseries (London) · breach · Radiant · 8K recordsUKcritical
• 19 Sep 2025Check-in system attack disrupts major European airportsCollins Aerospace (MUSE) · outage · Cyberattackcritical
• 18 Sep 2025Optus firewall upgrade blocks emergency calls for 13 hoursOptus Triple Zero · outage · Configuration change · 13 hourscritical
• 17 Sep 2025ShinyHunters claims 1.5 billion Salesforce records from 760 firmsSalesforce customers (Salesloft Drift) · breach · ShinyHunters · 1.5B claimedcritical
• 1 Sep 2025Cyberattack halts JLR production for weeksJaguar Land Rover · outage · CyberattackUKcritical
• 30 Sep 2025Harrods third-party breach affects 430,000 customersHarrods · breach · Unknown · 430K recordsUKmajor

All 6 outages

• 29 Sep 2025Qilin ransomware halts Asahi beer production in JapanAsahi · outage · Cyberattackcritical
• 26 Sep 2025Battery fire destroys South Korea's government data centreSouth Korea NIRS · outage · Power / firecritical
• 19 Sep 2025Check-in system attack disrupts major European airportsCollins Aerospace (MUSE) · outage · Cyberattackcritical
• 18 Sep 2025Optus firewall upgrade blocks emergency calls for 13 hoursOptus Triple Zero · outage · Configuration change · 13 hourscritical
• 6 Sep 2025Red Sea cable cuts slow Azure trafficMicrosoft Azure (Red Sea cables) · outage · Physical damage / conflictminor
• 1 Sep 2025Cyberattack halts JLR production for weeksJaguar Land Rover · outage · CyberattackUKcritical

All 7 data breaches

• 30 Sep 2025Harrods third-party breach affects 430,000 customersHarrods · breach · Unknown · 430K recordsUKmajor
• 26 Sep 2025Hackers steal data on 8,000 nursery childrenKido nurseries (London) · breach · Radiant · 8K recordsUKcritical
• 22 Sep 2025Stellantis confirms breach via Salesforce compromiseStellantis · breach · ShinyHuntersmajor
• 17 Sep 2025ShinyHunters claims 1.5 billion Salesforce records from 760 firmsSalesforce customers (Salesloft Drift) · breach · ShinyHunters · 1.5B claimedcritical
• 15 Sep 2025Former FinWise employee accesses 689,000 customer recordsFinWise · breach · Insider · 689K recordsmajor
• 10 Sep 2025JLR confirms data stolen in production-halting attackJaguar Land Rover · breach · Scattered SpiderUKmajor
• 5 Sep 2025Wealthsimple breach via compromised software packageWealthsimple · breach · Unknownmajor