
A collection of companies that disclose adversary TTPs after they have been breached
| Organization | Breach Date | Adversary | Source |
|---|---|---|---|
| DigiCert | April 2026 | GoldenEyeDog (CN APT) | bugzilla.mozilla.org / (archived) |
| F5 Networks | October 2025 | Unknown (APT) | my.f5.com / (archived) |
| BeyondTrust | December 2024 | Unknown (CN APT) | beyondtrust.com / (archived) |
| State of Rhode Island | December 2024 | Brain Cipher (Ransomware) | rhodeislandcurrent.com / (archived) |
| MITRE | April 2024 | UTA0178/UNC5325 (CN APT) | MITRE Blog / (archived) |
| Microsoft | January 2024 | CozyBear (RU APT) | microsoft.com (1), microsoft.com (2) / (archived) |
| Mandiant | January 2024 | CLICKSINK (eCrime) | mandiant.com / (archived) |
| Nissan Australia | December 2023 | Akira (Ransomware) | nissan.com.au / (archived) |
| Cloudflare | November 2023 | Unknown | cloudflare.com (1), cloudflare.com (2) / (archived) |
| 23andMe | October 2023 | "Anna/Dazhbog" (eCrime) | ico.org.uk / (archived) |
| Boeing | November 2023 | LockBit (Ransomware) | cisa.gov / (archived) |
| British Library | October 2023 | Rhysida (Ransomware) | bl.uk / (archived) |
| BeyondTrust | October 2023 | Unknown | beyondtrust.com / (archived) |
| Okta | October 2023 | Unknown | sec.okta.com / (archived) |
| BHI Energy | October 2023 | Akira (Ransomware) | documentcloud.org / (archived) |
| Gap Personnel | October 2023 | Unknown | ico.org.uk / (archived) |
| D-Link | October 2023 | "succumb" (eCrime) | dlink.com / (archived) |
| Kroll | August 2023 | Unknown (eCrime) | kroll.com / (archived) |
| Microsoft | July 2023 | Storm-0558 (CN APT) | microsoft.com / (archived) |
| JumpCloud | July 2023 | UNC4899 (DPRK APT) | jumpcloud.com / (archived) |
| Dragos | May 2023 | "KyivWarrior" (eCrime) | dragos.com / (archived) |
| Capita | March 2023 | BlackBasta (Ransomware) | ico.org.uk / (archived) |
| 3CX | March 2023 | UNC4736 (DPRK APT) | mandiant.com / (archived) |
| Coinbase | February 2023 | 0ktapus (suspected) (eCrime) | coinbase.com / (archived) |
| February 2023 | 0ktapus (suspected) (eCrime) | reddit.com / (archived) | |
| CircleCI | January 2023 | Jade Sleet (DPRK APT) | circleci.com / (archived) |
| LastPass | October 2022 | Unknown (eCrime) | blog.lastpass.com / ico.org.uk / (archived) |