Weekly briefing › No. 1
Weekly briefing · No. 1 · 19 Mar 2026
A destructive cyberattack on medical device giant Stryker dominated headlines this week, linked to Iranian actors wiping 200,000+ systems globally.
Meanwhile, several ransomware incidents affected critical infrastructure including healthcare and financial services.
This issue’s disclosures
CriticalMar 11
Stryker Corporation
Infrastructure · 200,000+ devices wiped records
Iran-linked Handala group wiped over 200,000 Stryker devices and exfiltrated 50 terabytes of data in retaliation for military strikes. Manufacturing and shipping operations disrupted globally.
What it means: Healthcare supply chains could be compromised affecting medical procedures and device availability for patients.
Mar 11
CriticalMar 12
Infutor
Data Broker · 676.8M records
Hacker posted database containing full names, addresses, phone numbers, dates of birth, and Social Security Numbers of Americans.
What it means: One of the largest personal data exposures ever recorded creates massive identity theft risks for most Americans.
Mar 12
HighMar 15
Organisation not named
Infrastructure · Unknown records
The disclosure as indexed does not name the organisation.
Chinese government-affiliated hackers breached FBI internal computer systems that hold information about domestic surveillance orders and wiretap warrants.
What it means: Foreign intelligence access to U.S. surveillance infrastructure could compromise national security operations.
Mar 15
Mar 09
AkzoNobel
Individual Identity · 170GB stolen records
Attackers compromised 170,000 files including client agreements, passport details, financial data, and internal documents at the Dutch paint manufacturer's U.S. operations.
What it means: Corporate espionage risks for business partners and employees with sensitive personal data exposed.
Mar 09
Mar 13
Loblaw Companies
Individual Identity · Unknown records
Suspicious network activity detected at Canada's largest retailer, compromising customer names, phone numbers, and email addresses.
What it means: Shopping data from millions of Canadian customers creates targeted fraud opportunities.
Mar 13
HighMar 05
University of Hawaii Cancer Center
Healthcare · 1.2M records
August 2025 breach now confirmed to affect 1.2 million individuals including SSNs, driver's license data, and voter registration information from multiple legacy files.
What it means: Decades of personal data from Hawaiian residents creates long-term identity theft risks.
Mar 05
Jan 26
LexisNexis Legal & Professional
Financial · Unknown records
Hackers exploited unpatched vulnerability to access customer and business information including account details and contact information.
What it means: Legal professionals' sensitive client data may be exposed affecting attorney-client privilege.
Jan 26
HighMar 11
TELUS Digital
Infrastructure · 1PB compromised records
Cyberattack compromised 1 petabyte of BPO customer data including source codes, FBI background checks, financial information, voice recordings, and Salesforce data.
What it means: Massive exposure of customer business data across multiple industries could fuel corporate espionage.
Mar 11
This issue by category
Where this issue’s disclosures sit.
The 8 disclosures in issue No. 1, by the category we filed each one under.