Get alerts on this situation
We’ll email you as it develops, and you can follow the whole thread from day one.
Unsubscribe anytime.
[SITUATION] · [QUIET]
5 clusters · 11 sources · 31 days · First seen · Last updated
Categories: TECHNOLOGY
2026 Iran-linked cyberattacks worldwide
Overview
In early June 2026 a series of high‑profile cyber incidents were reported across the United States and Europe. A whistleblower alleged that the U.S. Social Security Administration database had been uploaded to an unsecured third‑party server, prompting claims of the largest U.S. data breach in history. Simultaneously, Russian‑linked malware disrupted energy and water facilities in Poland, Sweden and Norway, while Iranian hackers attacked U.S. critical‑infrastructure providers and the medical‑technology firm Stryker, wiping thousands of devices. A subsequent overview of the first half of the year highlighted that both criminal groups and state‑linked actors intensified campaigns, including supply‑chain attacks on open‑source projects and a breach of the Canvas learning platform that exposed personal data for tens of millions. By the end of June, Israel’s National Cyber Directorate confirmed that hostile Iranian cyber incidents had risen sharply, from about 1,600 in June 2025 to roughly 4,800 in June 2026, after the U.S.–Israeli offensive against Tehran. The campaigns again targeted systems used by Israel’s critical infrastructure, public institutions, and numerous small‑ and medium‑sized firms, including law and accounting offices. Israel says core infrastructure has been defended, while less‑protected organisations suffered data wipes. Iranian officials continue to deny involvement. The directorate noted expanded cooperation with the United States and allies such as Germany to bolster cyber defences. Late June saw a wave of distributed‑denial‑of‑service attacks that flooded India’s CBSE re‑evaluation portal, a sports‑betting site covering the World Cup opening, and the U.S. AlertDC emergency‑notification system and National Weather Service website. Group 313 Team claimed responsibility, though attribution remains unverified, and a Russian‑based hosting provider was linked to the betting‑site attack. Ransomware‑style intrusions hit civilian energy and water infrastructure in Poland, Sweden and Norway, again suspected of Russian origin.
Timeline
-
26 days ago
[TECHNOLOGY] 2 sources2026 Global Cyberattacks Disrupt Public Services and Critical InfrastructureJune 2026 saw DDoS attacks on India's exam portal, a World Cup betting site, US emergency alerts and weather services, while major data breaches exposed Social Security data and critical infrastructure in the U
-
about 1 month ago
[TECHNOLOGY] 2 sourcesIranian cyber attacks on Israel surge to roughly 4,800 incidents in 2026Iranian cyber attacks on Israel rose from ~1,600 in June 2025 to ~4,800 in June 2026, targeting critical infrastructure and businesses, officials say.
-
about 1 month ago
[TECHNOLOGY] 2 sourcesIran cyberattacks on Israel surge to 4,800 incidents in 2026Iranian cyberattacks on Israel rose from about 1,600 in June 2025 to roughly 4,800 in June 2026, targeting critical infrastructure and businesses, with Israel saying it has so far prevented damage to core net‑w
-
about 2 months ago
[TECHNOLOGY] 2 sourcesGlobal cyber attacks in 2026 target infrastructure, data and businessesCyber attacks surged in early 2026, hitting U.S. Social Security data, European energy systems, Stryker, and Canvas, with Iran-linked hackers and ShinyHunters leading high‑impact breaches.
-
about 2 months ago
[TECHNOLOGY] 3 sources2026 Cybersecurity Breaches Expose Massive Social Security Leak and NATO‑Region Infrastructure Hacks2026 sees a possible massive U.S. Social Security data leak, Russian‑linked attacks on European power and water infrastructure, and Iranian hacks of U.S. water utilities and medical‑tech firm Stryker.
Sources
aliciaguo.com · capital.gr · kfgo.com · kurir.rs · mazebolt.com · mosaico-cem.it · realitykings.com · revistabamag.com.ar · sigmalive.com · unstore.com.np · vijesti.me