All Categories
Incident Response
How organizations detected, contained, and recovered from real-world security incidents.
12 case studies
Incident Response
2024critical
CrowdStrike: A Faulty Update Crashes 8.5 Million Windows Machines Worldwide
2 min readIncident Response
2023high
Meta GDPR Fine: €1.2 Billion for Transferring European Data to the US
2 min readIncident Response
2022critical
LastPass Changing Story: How a Breach Disclosure Evolved Over Three Months
2 min readIncident Response
2021high
Facebook 533 Million Records: Published in 2021, Breached in 2019, "Old Data"
2 min readIncident Response
2020critical
SolarWinds CISA Emergency Directive: US Government's Response to a Months-Long Intrusion
2 min readIncident Response
2019high
British Airways GDPR Fine: The First Major Enforcement Sets the Tone
2 min readIncident Response
2017critical
NotPetya Recovery: Maersk Rebuilds its Entire Global IT in 10 Days
2 min readIncident Response
2017critical
Equifax Breach Response: 78 Days to Patch, 40 Days to Disclose, $700M in Fines
2 min readIncident Response
2017high
GitLab Production Database Deletion: 5 Failed Backups and a Live Stream
2 min readIncident Response
2016critical
Dyn DDoS Response: When a Third Party's Outage Takes Down Half the Internet
2 min readIncident Response
2016critical
Uber 2016 Cover-Up: Paying Hackers $100,000 via Bug Bounty to Hide a Breach
2 min readIncident Response
2013critical
Target Breach IR Failure: Security Team Saw the Alerts and Did Nothing
2 min readIncident Response
Defend against incident response
Practical guides drawn directly from these incidents.