Cybersecurity Incidents and NIST Functions

Front

The Twitter Bitcoin Scam (2020)

Back

Attackers gained control of high-profile Twitter accounts to post a cryptocurrency scam, exploiting phishing to access internal tools.

Front

The Equifax Data Breach (2017)

Back

A breach exposed personal data of 147 million Americans due to a known vulnerability in Apache Struts.

Front

The Colonial Pipeline Ransomware Attack (2021)

Back

A ransomware attack disrupted fuel supplies, exploiting a compromised VPN password without multi-factor authentication.

Front

SolarWinds Supply Chain Attack (2020)

Back

Attackers injected malware into SolarWinds updates, compromising U.S. government and Fortune 500 networks.

Front

Uber Data Breach (2022)

Back

A hacker tricked an employee into approving MFA requests, accessing internal systems and leaking data.

Front

The Target POS Breach (2013)

Back

Attackers compromised an HVAC vendor to install malware on POS terminals, stealing 40 million credit card numbers.

Front

The Yahoo Data Breach (2013-2016)

Back

Yahoo suffered multiple breaches affecting 3 billion accounts, leading to fines and reputational damage.

Front

Marriott Hotel Data Breach (2018)

Back

A long-running breach in Starwood’s system led to the exfiltration of guest data before Marriott realized.

Front

NotPetya Cyber Attack (2017)

Back

NotPetya malware wiped data from thousands of businesses, causing billions in damages due to weak backup strategies.