View source for Timeline of Internet conflicts

{{short description|None}}
{{Internet}}

The [[Internet]] has a long history of turbulent relations, major maliciously designed disruptions (such as wide scale [[computer virus]] incidents, [[Denial-of-service attack|DOS and DDOS attacks]] that cripple services, and [[Internet troll|organized attacks]] that cripple major online communities), and other conflicts. This is a list of known and documented Internet, [[Usenet]], [[virtual community]] and [[World Wide Web]] related conflicts, and of conflicts that touch on both offline and online worlds with possibly wider reaching implications.

Spawned from the original [[ARPANET]], the modern Internet, World Wide Web and other services on it, such as virtual communities ([[bulletin boards]], [[Internet forum|forums]], and [[Massively multiplayer online game]]s) have grown exponentially. Such prolific growth of population, mirroring "offline" society, contributes to the number of conflicts and problems online growing each year.  Today, billions of people in nearly all countries use various parts of the Internet.  Inevitably, as in "brick and mortar" or offline society, the virtual equivalent of major turning points, conflicts, and disruptions—the online equivalents of the falling of the [[Berlin Wall]], the creation of the [[United Nations]], spread of [[disease]], and events like the [[Gulf War|Iraqi invasion of Kuwait]] will occur. 

==Pre World Wide Web era==
{{original research|section|date=August 2008}}

===1980s===

====1980====
* [[ARPANET]] grinds to a complete halt on October 27 because of an accidentally-propagated status-message virus.<ref>{{Cite web |url=http://www.jmusheneaux.com/21bb.htm |title=jmusheneaux.com: History of the Internet |access-date=2006-07-17 |archive-date=2017-03-14 |archive-url=https://web.archive.org/web/20170314021835/http://www.jmusheneaux.com/21bb.htm |url-status=dead }}</ref><ref>[http://www.thocp.net/reference/internet/internet2.htm thocp.net: Arpanet History]</ref>

====1982====
* [[The 414s]] compromise dozens of high-profile computer systems, including those at [[Los Alamos National Laboratory]], [[Memorial Sloan-Kettering Cancer Center|Sloan-Kettering Cancer Center]], and [[Security Pacific Bank|Security Pacific National Bank]], between 1982 and 1983.<ref name=free-press27091983>{{Cite news|newspaper=[[Detroit Free Press]] |date=September 27, 1983}}</ref>

====1985====
*[[Kevin Mitnick]] was arrested by the FBI on February 15. Mitnick was convicted of wire fraud and of breaking into the computer systems of [[Fujitsu]], [[Motorola]], [[Nokia]], and [[Sun Microsystems]]. He served five years in prison. His pursuit and subsequent arrest made him one of the most famous hackers up to that time.

====1988====
* A 23-year-old graduate student at [[Cornell University]], [[Robert Tappan Morris]], released the Internet's first worm, the [[Morris (computer worm)|Morris worm]]. Morris, the son of a [[National Security Agency]] (NSA) computer security expert, wrote 99 lines of code and released them as an experiment. The program began replicating and infecting machines at a much faster rate than he had anticipated, causing machines all over the world to crash.{{citation needed|date=June 2016}}

====1990====
* In response to the US Secret Service's [[Operation Sundevil]], [[Mitch Kapor]] establishes the [[Electronic Frontier Foundation]] to provide legal representation in cases involving the civil rights of computer users.{{citation needed|date=June 2016}}

==World Wide Web era==

===1990s===
{{original research|section|date=August 2008}}

====1991====
* [[Phil Zimmermann]] creates and releases [[Pretty Good Privacy]], an encryption tool still in use. By 1993, he was the target of U.S. government investigations, charged with "munitions export without a license". The investigation ended in 1996 with no charges filed.

====1994====
* An international group, dubbed the "Phonemasters" by the [[Federal Bureau of Investigation|FBI]], hacked into the networks of a number of companies including [[MCI Inc.|MCI WorldCom]], [[Sprint Corporation|Sprint]], [[AT&T]], and [[Equifax]] credit reporters. The gang accounted for approximately $1.85 million in business losses.<ref>[https://www.pbs.org/wgbh/pages/frontline/shows/hackers/whoare/notable.html pbs.org: notable hackers]</ref>
* In late 1995, [[Vladimir Levin (hacker)|Vladimir Levin]] persuaded [[Citibank]]'s computers to transfer $10 million from its customers' accounts to his. [[Interpol]] arrested him at Heathrow Airport, and Citibank got most of the money back. He pleaded guilty in 1995, but the method he used wasn't uncovered for another ten years, and at that time was one of the largest computer crimes by dollar value.
*[[Canter & Siegel|Laurence Canter and Martha Siegel]] post the first large commercial [[newsgroup spam]], setting off an [[arms race]] between spammers and network operators.

====1995====
* [[Scientology and the Internet]]: After documents copyrighted by the [[Church of Scientology]] are posted to [[Usenet]] group [[alt.religion.scientology]], church lawyers send threats of legal action to several users and attempt to shut down the group. Lawsuits are brought against users Dennis Erlich, [[Grady Ward]], [[Arnaldo Lerma]] and [[Karin Spaink]], but these fail to stem distribution of the documents.

====1996====
*Tim Lloyd plants a software time bomb at [[Omega Engineering]], a company in New Jersey. The results of the attack are devastating: losses of US$12 million and more than 80 employees lose their jobs. Lloyd is sentenced to 41 months in jail.<ref>{{Cite web |url=http://www.networkworld.com/research/2000/0626featside4.html |title=Network World: Tim Lloyd Saga |access-date=2006-08-01 |archive-date=2006-09-07 |archive-url=https://web.archive.org/web/20060907083049/http://www.networkworld.com/research/2000/0626featside4.html |url-status=dead }}</ref>
*US President Bill Clinton signs the [[Communications Decency Act]] into US federal law as part of the [[Telecommunications Act of 1996]]. Web site operators turn their pages black in protest. The decency provisions are overturned the following year in ''[[Reno v. American Civil Liberties Union]]''.

====1998====
* The [[Digital Millennium Copyright Act]] (DMCA) becomes law in the United States.
* The [[CIH (computer virus)|CIH]] computer virus is released, written by [[Chen Ing Hau]] of [[Taiwan]]. It is considered to be one of the most harmful widely circulated viruses, overwriting critical information on infected system drives, and more importantly, in some cases corrupting the system [[BIOS]], rendering computer systems unbootable. It was found in the wild in September.
* Two [[China|Chinese]] hackers, Hao Jinglong and Hao Jingwen (twin brothers), are sentenced to death by a court in China for breaking into a bank's computer network and stealing 720,000 [[Renminbi|yuan]] ($87,000).<ref>{{Cite web |url=http://www.infosecnews.org/hypermail/9912/1872.html |title=Reuters archive: Court upholds hacker's death sentence |access-date=2007-07-14 |archive-date=2007-05-10 |archive-url=https://web.archive.org/web/20070510023830/http://www.infosecnews.org/hypermail/9912/1872.html |url-status=dead }}</ref>
* The US government allows the export of 56-bit encryption software, and stronger encryption software for highly sensitive data.
* The [[Electronic Disturbance Theater]] launches the Floodnet tool for civil disobedience, a tool to create a [[denial-of-service attack|denial-of-service attack (DOS)]]. The first DoS attacks were launched against [[the Pentagon]], the [[Frankfurt Stock Exchange]] and the Mexican government.

====1999====
* From the time the Morris worm struck the Internet until the onset of the Melissa virus, the Internet was relatively free from swift-moving, highly destructive "malware". The [[Melissa (computer virus)|Melissa virus]], however, was rapacious; damages have been estimated at nearly $400 million. It marked a turning point, being the first incident of its kind to affect the newly commercial Internet.

===2000s===
{{original research|section|date=August 2008}}

====2000====
* The U.S. government establishes a technical review process to allow the export of encryption software regardless of key length.
* Discovering a [[Demo (music)|demo]] of their song "[[I Disappear]]" on the [[Napster]] [[Peer-to-peer|P2P]] file-sharing network, heavy metal band [[Metallica]] filed legal action against Napster over it (''[[Metallica v. Napster, Inc.]]''). This was the first time a major musical act publicly went against allegedly illegal file sharing.
* In February 2000, some of the Internet's most reliable sites were rendered nearly unreachable by distributed denial-of-service ([[DDoS]]) attacks. [[Yahoo!]] took the first hit on February 7, 2000. In the next few days, [[Buy.com]], [[eBay]], [[CNN]], [[Amazon.com]], [[ZDNet|ZDNet.com]], [[E-Trade]], and [[Excite (web portal)|Excite]] were taken down by DDoS attacks. Though damage estimates vary widely, the FBI estimates that the companies suffered $1.7 billion [[USD]] in lost business and other damages.
* On May 5, 2000, the [[ILOVEYOU]] computer worm attacked tens of millions of Windows-based PCs. It started spreading as an email message with the subject line "ILOVEYOU" and the attachment "LOVE-LETTER-FOR-YOU.txt.vbs". The outbreak was estimated to have caused US$5.5–8.7 billion in damages worldwide, and estimated to cost the US$15 billion to remove the worm. The worm originated from the Philippines.<ref>[https://www.pbs.org/wgbh/pages/frontline/shows/hackers/whoare/notable.html frontline: hackers: who are hackers: notable hacks<!-- Bot generated title -->]</ref>

====2001====
* [[Dmitry Sklyarov]] is arrested by [[FBI|FBI agents]] while visiting the [[United States]] for having cracked [[encryption]] on [[Adobe Acrobat]] [[e-book]] software, in violation of the United States' [[DMCA]]. This occurred despite the fact that [[Russia]], of which he is a citizen, does not honor this law as of 2001.<ref>[https://www.wired.com/news/politics/0,1283,45298,00.html Wired.com: Russian Adobe Hacker Busted]</ref><ref>{{Cite web |url=https://www.eff.org/IP/DMCA/US_v_Elcomsoft/us_v_sklyarov_faq.html#Jurisdiction |title=eff.org: info on DMCA and Russia |access-date=2016-12-04 |archive-date=2007-09-29 |archive-url=https://web.archive.org/web/20070929111540/http://www.eff.org/IP/DMCA/US_v_Elcomsoft/us_v_sklyarov_faq.html#Jurisdiction |url-status=dead }}</ref>

====2002====
* Google receives legal notices from the [[Church of Scientology]] and removes links to [[Operation Clambake]] from its search results.
* In October, a [[2002 DNS Backbone DDoS|massive attack]] against the 13 [[DNS root zone|root domain servers]] of the Internet is launched by unidentified hackers. The aim: to stop the domain name resolution service around the net.<ref>[https://archive.today/20120711143933/http://news.cnet.com/2100-1001-963095.html news.com: Net attack flops, but threat persists]</ref>

====2003====
* [[Site Finder]], the attempt by [[VeriSign]] in 2003 to take control of all unregistered .com and .net [[domain names]] for their own purposes, is launched, and just as quickly scuttled after massive public outcry and official protest from groups such as [[ARIN]] and [[Internet Assigned Numbers Authority|IANA]].

====2004====
* In November, [[Marvel Comics]] filed a lawsuit against the developers of the ''[[City of Heroes]]'' MMO, [[Cryptic Studios]] and their publisher [[NCsoft]] alleging that the game not only allows, but actively promotes, the creation of characters whose copyrights and trademarks are owned by Marvel, and that Cryptic has intentionally failed to police these infringing characters. The suit sought unspecified damages and an injunction to force the companies to stop making use of its characters. The case is settled and rejected by United States courts in December 2005 with no changes made to the game.

====2005====

* In May, the [[Wikipedia Seigenthaler biography incident]] began.
* In October, the [[Sony BMG copy protection rootkit scandal]] began, where it was discovered that [[Sony BMG]] surreptitiously and possibly illegally distributed copy protection software that forced itself to install on computers playing their audio CDs. As a result, many Windows-based computers belonging to consumers were left vulnerable to exploits and hacking.
* In November, it was revealed that the online video game ''[[World of Warcraft]]'', with millions of subscribers, would be hackable due to the far-reaching corruption and invasiveness of Sony's copy protection scheme.<ref>[https://www.theregister.co.uk/2005/11/04/secfocus_wow_bot/ The Register: World of Warcraft hackers using Sony BMG rootkit]</ref>
* On December 20, the ''[[City of Heroes]]'' game servers were nearly all hacked by an undisclosed method. According to [[NCsoft]] representative CuppaJo, "Customer data and its security was not compromised in any way during the incident that occurred," and no additional information beyond this was publicly disclosed. As of July 2006, this is the first known hack of any MMO, of which there are millions of subscribers across numerous games.<ref>[http://boards.cityofheroes.com/showflat.php?Cat=&Board=info&Number=4361331 cityofheroes.com: official incident response]{{Dead link|date=December 2023 |bot=InternetArchiveBot |fix-attempted=yes }}</ref><ref>[http://www.kotaku.com/gaming/city-of-heroes/city-of-heroes-hacked-144399.php kotaku.com: City of Heroes Hacked]</ref><ref>[http://www.jucaushii.ro/gamespace_316_rnews_4373_City_of_Heroes_Hacked.html jucaushii.ro: City of Heroes Hacked]</ref><ref>{{Cite web |url=http://www.addict3d.org/index.php?page=viewarticle&type=news&ID=14982&title=City%20of%20Heroes%20Hacked |title=addict3d.org: City of Heroes Hacked |access-date=2006-07-17 |archive-date=2006-01-29 |archive-url=https://web.archive.org/web/20060129101718/http://www.addict3d.org/index.php?page=viewarticle&type=news&ID=14982&title=City%20of%20Heroes%20Hacked |url-status=dead }}</ref>

====2006====
* In January 2006, the [[Electronic Frontier Foundation]] lodged a [[class action]] lawsuit (''[[Hepting v. AT&T]]'') which alleged that AT&T had allowed agents of the [[National Security Agency]] to monitor phone and Internet communications of AT&T customers without warrants. In April 2006 a retired former AT&T technician, Mark Klein, lodged an affidavit supporting this allegation.<ref>[https://www.wired.com/news/technology/1,70619-0.html Wired: Whistle-Blower Outs NSA Spy Room]</ref> The [[United States Department of Justice|Department of Justice]] has stated they will intervene in this lawsuit by means of [[State Secrets Privilege]].<ref>[https://www.eff.org/news/archives/2006_04.php#004613 EFF.org: Government Moves to Intervene in AT&T Surveillance Case] {{Webarchive|url=https://web.archive.org/web/20070929123042/http://www.eff.org/news/archives/2006_04.php#004613 |date=2007-09-29 }}.</ref> The existence of this database and the NSA program that compiled it was mostly unknown to the general public until ''[[USA Today]]'' broke the story on May 10, 2006.<ref>[https://www.usatoday.com/news/washington/2006-05-10-nsa_x.htm USA Today: NSA has massive database of Americans' phone calls]</ref> It is estimated that the database contains over 1.9 trillion [[call detail record|call-detail record]]s of phone calls made after [[September 11 attacks]].<ref>{{Cite web |url=http://www.democracynow.org/article.pl?sid=06/05/12/1353225 |title=Democracy Now: Three Major Telecom Companies Help US Government Spy on Millions of Americans |website=[[Democracy Now!]] |access-date=2006-07-25 |archive-date=2006-05-16 |archive-url=https://web.archive.org/web/20060516223538/http://www.democracynow.org/article.pl?sid=06%2F05%2F12%2F1353225 |url-status=dead }}</ref>
* On May 3, a massive DDOS assault on [[Blue Frog#Spammers' backlash|Blue Security]], an anti-spam company, is redirected by Blue Security staff to their [[Movable Type]]-hosted blog. The result is that the DDOS instead knocks out all access to over 1.8 million active blogs, including all ten million plus registered [[LiveJournal]] accounts (which is owned by Movable Type's parent company).<ref>[http://news.netcraft.com/archives/2006/05/03/ddos_on_blue_security_blog_knocks_typepad_livejournal_offline.html Netcraft: DDoS on Blue Security Blog Knocks Typepad, LiveJournal Offline]</ref><ref>{{Cite web |url=http://gigaom.com/2006/05/06/the-day-ddos-brought-down-six-apart/ |title=gigaom.com: The Day DDoS Brought Down Six Apart |access-date=2006-07-17 |archive-date=2006-06-18 |archive-url=https://web.archive.org/web/20060618095219/http://gigaom.com/2006/05/06/the-day-ddos-brought-down-six-apart/ |url-status=dead }}</ref>
*The [[Motion Picture Association of America]] (MPAA) in May was accused of hiring illegal [[Hacker (computer security)|hackers]] to fight [[BitTorrent]] technology.<ref name="MPAA accused of hiring a hacker">{{cite news | author=Greg Sandoval | title=MPAA accused of hiring a hacker | date=May 24, 2006 | publisher=CNET News.com | url=http://news.cnet.com/2100-1030_3-6076665.html?part=rss&tag=6076665&subj=news | archiveurl=https://archive.today/20130119125937/http://news.cnet.com/2100-1030_3-6076665.html?part=rss&tag=6076665&subj=news | archivedate=January 19, 2013 | url-status=dead }}</ref>
* In June, [[The Pirate Bay]], a [[BitTorrent tracker]] website based in and operating from [[Sweden]], is raided by Swedish police for allegedly violating United States, Swedish, and [[European Union]] copyright law. As of November 2006, the site remains online, operating from [[Denmark]] and no legal action has been filed against it or its owners.<ref>[https://www.wired.com/news/technology/0,71089-0.html?tw=wn_index_2 Wired.com: Pirate Bay Bloodied But Unbowed]</ref> (The site is online now at  thepiratebay.org)

====2007====
* May 17: [[Estonia]] recovers from massive denial-of-service attack<ref>{{cite web|url=http://www.networkworld.com/news/2007/051707-estonia-recovers-from-massive-denial-of-service.html|title=Estonia recovers from massive denial-of-service attack|first=Jeremy|last=Kirk|date=May 17, 2007|work=Network World|access-date=March 14, 2015|url-status=dead|archive-url=https://web.archive.org/web/20131203004316/http://www.networkworld.com/news/2007/051707-estonia-recovers-from-massive-denial-of-service.html|archive-date=December 3, 2013}}</ref>
* June 13: FBI [[Operation: Bot Roast|Operation Bot Roast]] finds over 1 million botnet victims<ref>{{cite web|url=http://www.networkworld.com/community/node/16193|title=FBI: Operation Bot Roast finds over 1 million botnet victims|first=Michael|last=Cooney|date=June 13, 2007|work=Network World|access-date=March 14, 2015|archive-date=December 3, 2013|archive-url=https://web.archive.org/web/20131203013446/http://www.networkworld.com/community/node/16193|url-status=dead}}</ref>
* June 21: A [[spear phishing]] incident at the [[Office of the Secretary of Defense]] steals sensitive U.S. defense information, leading to significant changes in identity and message-source verification at OSD.<ref name="McMillan">{{cite news
 | first = Robert
 | last = McMillan
 | url = http://www.infoworld.com/article/07/06/21/Pentagon-shuts-down-systems-after-cyberattack_1.html
 | title = Pentagon shuts down systems after cyberattack
 | work = [[InfoWorld]]
 | publisher = [[International Data Group|IDG]]
 | date = June 21, 2007
| access-date = March 10, 2008
 | url-status = dead
 | archive-url = https://web.archive.org/web/20080706013512/http://www.infoworld.com/article/07/06/21/Pentagon-shuts-down-systems-after-cyberattack_1.html
 | archive-date = July 6, 2008
}}</ref><ref name="Aitoro">{{cite news
 | first = Jill R.
 | last = Aitoro
 | url = http://www.govexec.com/story_page.cfm?articleid=39456
 | archive-url = https://web.archive.org/web/20080310011808/http://www.govexec.com/story_page.cfm?articleid=39456
 | url-status = dead
 | archive-date = March 10, 2008
 | title = Defense officials still concerned about data lost in 2007 network attack
 | work = Government Executive
 | publisher = [[National Journal Group]]
 | date = March 5, 2008
 | access-date = March 10, 2008
 }}</ref>

* August 11: [[United Nations]] website hacked by Indian Hacker Pankaj Kumar Singh.<ref>{{cite web|url=http://www.internethaber.com/news_detail.php?id=99151|title=BMnin sitesi hacklendi haberi|work=Internethaber|access-date=March 14, 2015|url-status=dead|archive-url=https://web.archive.org/web/20110930111801/http://www.internethaber.com/news_detail.php?id=99151|archive-date=September 30, 2011}}</ref>
*November 14: Panda Burning Incense, which is known by several other names, including Fujacks and Radoppan.T lead to the arrest of eight people in China. Panda Burning Incense was a parasitic virus that infected executable files on a PC. When infected, the icon of the executable file changes to an image of a panda holding three sticks of incense. The arrests were the first for virus writing in China.<ref>{{Cite web|url=https://www.csoonline.com/article/2121666/eight-arrested-for-creating-panda-burning-incense-virus.html|title=Eight Arrested for Creating Panda Burning Incense Virus|last=Gradijan|first=Dave|date=February 13, 2007|website=CSO Online|language=en|access-date=July 20, 2019}}</ref>

====2008====
* January 17: [[Project Chanology]]; [[Anonymous (group)|Anonymous]] attacks Scientology website servers around the world. Private documents are stolen from Scientology computers and distributed over the Internet.
* March 7: Around 20 Chinese hackers claim to have gained access to the world's most sensitive sites, including [[the Pentagon]]. They operated from an apartment on a Chinese Island.<ref name="cnn7mar08">{{cite news | url = http://edition.cnn.com/2008/TECH/03/07/china.hackers/index.html | title = Chinese hackers: No site is safe | publisher = CNN | date = March 7, 2008 | access-date = March 7, 2008}}</ref>
* March 14: [[Trend Micro]] website successfully hacked by Turkish hacker Janizary (aka Utku).<ref>{{cite web|url=http://www.crn.com/news/security/206903880/trend-micro-victim-of-malicious-hack.htm|title=Trend Micro Victim Of Malicious Hack|first=Stefanie|last=Hoffman|work=CRN|access-date=March 14, 2015|date=March 14, 2008}}</ref>

====2009====
* April 4: [[Conficker]] worm infiltrated millions of PCs worldwide, including many government-level top-security computer networks.<ref>{{cite news |url = https://www.nytimes.com/2009/08/27/technology/27compute.html|title = Defying Experts, Rogue Computer Code Still Lurks|newspaper = New York Times|date = August 26, 2009|access-date = August 27, 2009 | first=John | last=Markoff}}</ref>

===2010s===
====2010====
* June: [[Stuxnet]] The Stuxnet worm is found by VirusBlokAda. Stuxnet was unusual in that while it spread via Windows computers, its payload targeted just one specific model and type of [[SCADA]] systems. It slowly became clear that it was a cyberattack on Iran's nuclear facilities—with most experts believing that Israel<ref name="nyt-19stuxnet">{{cite news| url=https://www.nytimes.com/2010/11/19/world/middleeast/19stuxnet.html | work=The New York Times | first1=William J. | last1=Broad | first2=David E. | last2=Sanger | title=Worm in Iran Can Wreck Nuclear Centrifuges | date=November 18, 2010}}</ref> was behind it—perhaps with US help.

====2011====
* The hacker group [[Lulz Security]] is formed.
* April 9: [[Bank of America]] website got hacked by a Turkish hacker named JeOPaRDY. An estimated 85,000 credit card numbers and accounts were reported to have been stolen due to the hack. Bank officials say no personal customer bank information is available on that web-page. Investigations are being conducted by the FBI to trace down the incriminated hacker.<ref>{{cite web|url=http://thehackernews.com/2011/03/thousands-of-bank-of-america-accounts.html|title=Thousands of Bank of America Accounts Hacked !|first=Mohit|last=Kumar|date=March 26, 2011|work=The Hacker News - Biggest Information Security Channel|access-date=March 14, 2015}}</ref>
* April 17: An "[[PlayStation Network outage|external intrusion]]" sends the [[PlayStation Network]] offline, and compromises personally identifying information (possibly including credit card details) of its 77 million accounts, in what is claimed to be one of the five largest [[data breach]]es ever.<ref>{{cite news|url=https://www.cbc.ca/news/science/playstation-data-breach-deemed-in-top-5-ever-1.1059548 |title=PlayStation data breach deemed in 'top 5 ever' - Business - CBC News |publisher=Cbc.ca |date= April 27, 2011|access-date=April 29, 2011}}</ref>
* Computer hacker sl1nk releases information of his penetration in the servers of the Department of Defense (DoD), Pentagon, NASA, NSA, US Military, Department of the Navy, Space and Naval Warfare System Command and other UK/US government websites.<ref>''[http://thehackernews.com/2011/05/exclusive-report-is-department-of.html Is Department of Defense (DoD), Pentagon, NASA, NSA secure?]'', TheHackerNews, May 14, 2011.</ref>
* September: Bangladeshi hacker TiGER-M@TE made a world record in defacement history by hacking 700,000 websites in a single shot.<ref>{{cite web|url=http://news.softpedia.com/news/700-000-InMotion-Websites-Hacked-by-TiGER-M-TE-223607.shtml|title=700,000 InMotion Websites Hacked by TiGER-M@TE|first=Eduard|last=Kovacs|date=September 26, 2011|work=softpedia|access-date=March 14, 2015}}</ref>
* October 16: The [[YouTube]] channel of ''[[Sesame Street]]'' was hacked, streaming pornographic content for about 22 minutes.<ref>{{cite magazine|url=http://www.pcworld.com/article/242009/sesame_street_hacked_porn_posted.html|title=Sesame Street Hacked, Porn Posted|magazine =[[PC World (magazine)|PC World]]|author=John P. Mello Jr.|access-date=October 26, 2011}}</ref>
* November 1: The main phone and Internet networks of the [[Palestinian territories]] sustained a hacker attack from multiple locations worldwide.<ref>{{cite web|url=http://www.imemc.org/article/62409|title=PA Telecommunications minister: Palestinian Internet Under Hacking Attacks|publisher =[[IMEMC]]|first=Alaa|last=Ashkar|date=2 November 2011 |access-date=November 2, 2011}}</ref>
* November 7: The forums for [[Valve Corporation|Valve]]'s [[Steam (service)|Steam]] service were hacked. Redirects for a hacking website, Fkn0wned, appeared on the Steam users' forums, offering "hacking tutorials and tools, porn, free giveaways and much more."<ref>{{cite web|last=Ashcraft|first=Brian|title=Steam Forums Apparently Hacked|date=7 November 2011 |url=http://kotaku.com/5856975/steam-forums-apparently-hacked|publisher=Kotaku}}</ref>
* December 14: Five members of the Norwegian hacker group, Noria, were arrested, allegedly suspected of hacking into the email account of the militant extremist [[Anders Behring Breivik]] (who perpetrated the [[2011 Norway attacks|2011 attacks]] in the country).<ref>{{cite news|url=http://www.dagbladet.no/2011/12/14/nyheter/innenriks/hackere/19420895/|title=News article about the arrests of Noria|newspaper =Dagbladet|author=Jonas Sverrisson Rasch|access-date=December 14, 2012}}</ref>

====2012====
* A hacker, Big-Smoke, published over 400,000 credit cards online,<ref>{{cite news| url=https://www.washingtonpost.com/blogs/blogpost/post/saudi-hackers-say-they-published-israeli-credit-card-information/2012/01/03/gIQAkMIMYP_blog.html | newspaper=The Washington Post | first=Elizabeth | last=Flock | title=Saudi hackers say they published Israeli credit card information | date=January 3, 2012}}</ref> and threatened [[Israel]] to release 1 million credit cards in the future. In response to that incident, an Israeli hacker published over 200 Albanian' credit cards online.<ref>[http://readwrite.com/2012/01/06/saudi_hacker_threatens_to_release_1_million_israel Kosovo Hacker Threatens to Release 1 Million Israeli Credit Card Numbers], Curt Hopkins, January 6, 2012</ref><ref>{{cite news| url=https://www.bbc.co.uk/news/world-middle-east-16526067 | work=BBC News | title=Israeli hacker retaliates to credit card hacking | date=January 12, 2012}}</ref>
*[[Gottfrid Svartholm|Gottfrid Svartholm Warg]], the co-founder of [[The Pirate Bay|Pirate Bay]], was convicted in Denmark of hacking a mainframe computer, what was then Denmark's biggest hacking case.<ref>{{Cite news|date=2014-10-31|title=Pirate Bay co-founder sentenced to 42 months in jail in Denmark|language=en|work=Reuters|url=https://www.reuters.com/article/us-piratebay-sentence-idUSKBN0IK1TL20141031|access-date=2021-08-05}}</ref>
*January 7: "Team Appunity", a group of Norwegian hackers, were arrested for breaking into Norway's largest prostitution website, then publishing the user database online.<ref>{{cite web|url=https://www.politi.no/aktuelt/nyhetsarkiv/2012_01/Nyhet_10828.xhtml|title=(Norwegian) Tre personer siktet for datainnbrudd|publisher=Kripos|author=Kripos|access-date=April 25, 2012|url-status=dead|archive-url=https://web.archive.org/web/20130728112727/https://www.politi.no/aktuelt/nyhetsarkiv/2012_01/Nyhet_10828.xhtml|archive-date=July 28, 2013}}</ref>
*February 3: [[Marriott International|Marriott]] was hacked by a [[New Age]] ideologist, Attila Nemeth, who was resisting against the [[New World Order (conspiracy theory)|New World Order]] where he said that corporations are allegedly controlling the world. As a response, Marriott reported him to the United States Secret Service.<ref>{{cite web|url=http://it.slashdot.org/story/11/11/27/0240253/hacker-tries-to-land-it-job-at-marriott-via-extortion| title=Marriott, Hack, Extortion, Arrest and important websites hacked | date=February 3, 2012}}</ref>
*February 8: [[Foxconn]] is hacked by a hacker group, "Swagg Security", releasing a massive amount of data including email and server logins, and even more alarming—bank account credentials of large companies like Apple and Microsoft. Swagg Security stages the attack just as a Foxconn protest ignites against terrible working conditions in southern China.<ref>{{cite news| url=https://www.theguardian.com/technology/2012/feb/09/apple-foxconn-hackers-factory-conditions | location=London | work=The Guardian | first=Juliette | last=Garside | title=Apple supplier Foxconn hacked in factory conditions protest | date=February 9, 2012}}</ref>
*May 4: The websites of several Turkish representative offices of international IT-companies are defaced within the same day by F0RTYS3V3N (Turkish Hacker), including the websites of [[Google]], [[Yandex]], [[Microsoft]], [[Gmail]], [[MSN]], [[Hotmail]], [[PayPal]].<ref>{{cite news| url=https://www.cnnturk.com/2012/bilim.teknoloji/teknoloji/05/05/com.trler.nasil.hacklendi/659932.0/index.html | work=CNNTurk | title=Com.tr'ler nasıl hacklendi? | date=May 4, 2012}}</ref><ref>{{cite news| url=https://www.hurriyet.com.tr/teknoloji/turk-hackerlar-com-tr-uzantili-sitelere-saldirdi-20486704 | work=Hurriyet | title=Türk hacker'lar com.tr uzantılı sitelere saldırdı | date=May 4, 2012}}</ref><ref>{{cite news| url=https://turk-internet.com/nic-tr-sistemlerine-sizilinca-tr-uzantili-siteler-baska-yerlere-yonlendirildi/ | work=Turk-Internet | title=Nic.tr Sistemlerine Sızılınca, '.tr' Uzantılı Siteler Başka Yerlere Yönlendirildi | date=May 4, 2012}}</ref><ref>{{cite news| url=http://www.zone-h.org/archive/special=1/notifier=F0RTYS3V3N | title=Google, Microsoft, Yandex, Paypal and important websites hacked Zone-H Mirror | date=May 4, 2012}}</ref>
*May 24: WHMCS is hacked by [[UGNazi]], they claim that the reason for this is because of the illegal sites that are using their software.
*May 31: [[MyBB]] is hacked by newly founded hacker group, [[UGNazi]], the website was defaced for about a day, they claim their reasoning for this was because they were upset that the forum board Hackforums.net uses their software.
*June 5: The social networking website [[LinkedIn]] has been [[2012 LinkedIn hack|hacked]] and the passwords for nearly 6.5 million user accounts are stolen by cybercriminals. As a result, a United States grand jury indicted Nikulin and three unnamed co-conspirators on charges of aggravated identity theft and computer intrusion.
*August 15: The most valuable company in the world [[Saudi Aramco]] is crippled by a cyber warfare attack for months by malware called [[Shamoon]]. Considered the biggest hack in history in terms of cost and destructiveness . Carried out by an Iranian attacker group called Cutting Sword of Justice.<ref>{{cite news|title=Jose Pagliery: The inside story of the biggest hack in history|url=https://money.cnn.com/2015/08/05/technology/aramco-hack/index.html|date=August 5, 2015|access-date=August 19, 2012}}</ref> Iranian hackers retaliated against Stuxnet by releasing Shamoon. The malware destroyed over 35,000 [[Saudi Arabia|Saudi]] Aramco computers, affecting business operations for months.
*December 17: Computer hacker sl1nk announced that he has hacked a total of 9 countries' [[SCADA]] systems. The proof includes 6 countries: France, Norway, Russia, Spain, Sweden and the United States.<ref>{{cite web |url=http://zerosecurity.org/2012/12/scada-systems-of-6-countries-breached-by-sl1nk |title=SCADA systems of 6 countries breached by Sl1nk |access-date=June 15, 2015 |url-status=dead |archive-url=https://web.archive.org/web/20160304091224/http://zerosecurity.org/2012/12/scada-systems-of-6-countries-breached-by-sl1nk |archive-date=March 4, 2016 }}</ref>

====2013====
* The social networking website [[Tumblr]] is attacked by hackers. Consequently, 65,469,298 unique emails and passwords were leaked from Tumblr. The data breach's legitimacy is confirmed by computer security researcher [[Troy Hunt]].<ref>{{cite web|url=https://www.vice.com/en/article/hackers-stole-68-million-passwords-from-tumblr-new-analysis-reveals/ |title=Hackers Stole 65 Million Passwords From Tumblr, New Analysis Reveals - Motherboard |website=Motherboard.vice.com |date=May 30, 2016 |access-date=July 1, 2017}}</ref>
* August: [[Yahoo! data breaches]] occurred. More than 1 billion users' data is being leaked.

====2014====
* February 7: The [[bitcoin]] exchange [[Mt. Gox]] filed for bankruptcy after $460{{nbsp}}million was apparently stolen by hackers due to "weaknesses in [their] system" and another $27.4{{nbsp}}million went missing from its bank accounts.<ref>{{cite magazine|url=https://www.wired.com/2014/03/bitcoin-exchange/|title=The Inside Story of Mt. Gox, Bitcoin's $460 Million Disaster - WIRED|magazine=WIRED|access-date=March 14, 2015|date=March 3, 2014}}</ref>
* August: The [[Gamergate (harassment campaign)|Gamergate]] harassment campaign erupts over the inclusion of women in [[video game industry]].
* October: The White House computer system was hacked.<ref>{{cite news|url=https://www.bbc.com/news/technology-29817644|title=White House computer network 'hacked' - BBC|work=BBC|access-date=November 6, 2015|date=October 29, 2014}}</ref> It was said that the FBI, the Secret Service, and other U.S. intelligence agencies categorized the attacks "among the most sophisticated attacks ever launched against U.S. government systems."<ref>{{cite news|last1=Evan Perez|last2=Shimon Prokupecz|title=How the U.S. thinks Russians hacked the White House|url=https://edition.cnn.com/2015/04/07/politics/how-russians-hacked-the-wh/index.html|access-date=December 17, 2016|work=CNN|date=April 8, 2015|quote=Russian hackers behind the damaging cyber intrusion of the State Department in recent months used that perch to penetrate sensitive parts of the White House computer system, according to U.S. officials briefed on the investigation.}}</ref>
* November 24: In response to the release of the film ''[[The Interview]]'', the servers of [[Sony Pictures]] are [[Sony Pictures hack|hacked]] by a hacker group calling itself "Guardian of Peace".
* November 28: The website of the Philippine telecommunications company [[Globe Telecom]] was hacked in response to the poor internet service they are distributing.<ref>{{cite web|url=http://www.coorms.com/2014/11/globe-website-was-hacked-by-bloodsec-hackers.html|title=Globe Website was Hacked by Blood Sec Hackers|author=Michael Angelo Santos|work=Coorms}}</ref>

====2015====
* June: the records of 21.5 million people, including social security numbers, dates of birth, addresses, fingerprints, and security clearance-related information, are [[Office of Personnel Management data breach|stolen from the United States Office of Personnel Management]] (OPM).<ref name="reuters20150709">{{cite web | url=https://www.reuters.com/article/us-cybersecurity-usa-idUSKCN0PJ2M420150709 | title=Estimate of Americans hit by government personnel data hack skyrockets | work=[[Reuters]] | first1=Patricia | last1=Zengerle | first2=Megan | last2=Cassella | date=July 9, 2015 | access-date=July 9, 2015}}</ref> Most of the victims are employees of the United States government and unsuccessful applicants to it. ''[[The Wall Street Journal]]'' and ''[[The Washington Post]]'' report that government sources believe the hacker is the government of China.<ref name=wsj>{{cite web | url=https://www.wsj.com/articles/u-s-suspects-hackers-in-china-behind-government-data-breach-sources-say-1433451888 | title=U.S. Suspects Hackers in China Breached About four (4) Million People's Records, Officials Say | work=Wall Street Journal | date=June 5, 2015 | access-date=June 5, 2015 | author=Barrett, Devlin}}</ref><ref name=npr>{{cite web | url=https://www.npr.org/sections/thetwo-way/2015/06/04/412086068/massive-data-breach-puts-4-million-federal-employees-records-at-risk | title=Massive Data Breach Puts 4 Million Federal Employees' Records At Risk | work=NPR | date=June 4, 2015 | access-date=June 5, 2015 | author=Sanders, Sam}}</ref>
*July: The servers of extramarital affairs website [[Ashley Madison data breach|Ashley Madison]] were [[Ashley Madison data breach|breached]].

====2016====
* February: The 2016 [[Bangladesh Bank heist]] attempted to steal US$951 million from a [[Bangladesh Bank]], and succeeded in getting $101 million—although some of this was later recovered.
* July 22: [[WikiLeaks]] published the documents from the [[2016 Democratic National Committee email leak]].
* July 29: a group suspected coming from China launched hacker [[Vietnamese airports hackings|attacks on the website of Vietnam Airlines]].
* August 13: The Shadow Brokers (TSB) started publishing several leaks containing hacking tools from the [[National Security Agency]] (NSA), including several [[Zero-day (computing)|zero-day exploits]]. Ongoing leaks until April 2017 ([[The Shadow Brokers]])
* September: Hacker Ardit Ferizi is sentenced to 20 years in prison after being arrested for hacking U.S. servers and passing the leaked information to members of [[ISIL]] terrorist group back in 2015.<ref>{{cite web|url=https://www.justice.gov/opa/pr/isil-linked-kosovo-hacker-sentenced-20-years-prison|title=ISIL-Linked Kosovo Hacker Sentenced to 20 Years in Prison |publisher=Justice Department of the United States|date=September 23, 2016 }}</ref>
* October: The [[2016 Dyn cyberattack]] is being conducted with a botnet consisting of IOTs infected with [[Mirai (malware)|Mirai]] by the hacktivist groups SpainSquad, Anonymous, and New World Hackers, reportedly in retaliation for [[Ecuador]]'s rescinding Internet access to [[WikiLeaks]] founder [[Julian Assange]] at their [[Embassy of Ecuador, London|embassy in London]], where he has been granted [[right of asylum|asylum]].<ref name="politico1">{{cite web|last1=Romm|first1=Tony|last2=Geller|first2=Eric|title=WikiLeaks supporters claim credit for massive U.S. cyberattack, but researchers skeptical|url=https://www.politico.com/story/2016/10/websites-down-possible-cyber-attack-230145|website=POLITICO|access-date=October 22, 2016}}</ref>
*Late 2016: Hackers steal international personal user data from the company [[Uber]], including phone numbers, email addresses, and names, of 57 million people and 600,000 driver's license numbers of drivers for the company. Uber's [[GitHub]] account was accessed through [[Amazon Web Services|Amazon's cloud]]-based service. Uber paid the hackers $100,000 for assurances the data was destroyed.<ref>{{Cite web|url=https://money.cnn.com/2017/11/22/technology/uber-hack-consequences-cover-up/index.html|title=Uber's massive hack: What we know|last=Larson|first=Selena|date=November 22, 2017|website=CNNMoney|access-date=June 20, 2019}}</ref>
* December 2016: [[Yahoo! data breaches]] reported and affected more than 1 billion users.  The data leakage includes user names, email addresses, telephone numbers, encrypted or unencrypted security questions and answers, dates of birth, and hashed passwords

====2017====
* April: A hacker group calling itself "The Dark Overlord" posted unreleased episodes of ''[[Orange Is the New Black]]'' TV series online after failing to extort the online entertainment company [[Netflix]].<ref>{{cite web|last=Mussa |first=Matthew |url=http://heavy.com/news/2017/04/netflix-hacker-thedarkoverlord-dark-overlord-hack-memes-orange-is-the-new-black/ |title='The Dark Overlord', Netflix Hacker: 5 Fast Facts You Need to Know |website=Heavy.com |date=April 30, 2017 |access-date=July 1, 2017}}</ref>
* May: [[WannaCry ransomware attack]] started on Friday, May 12, 2017,<ref>{{cite web|url=https://nakedsecurity.sophos.com/2017/05/17/wannacry-the-ransomware-worm-that-didnt-arrive-on-a-phishing-hook/|title=WannaCry: the ransomware worm that didn't arrive on a phishing hook|last=Brenner|first=Bill|date=May 16, 2017|website=Naked Security|access-date=May 18, 2017}}</ref> and has been described as unprecedented in scale, infecting more than 230,000 computers in over 150 countries.<ref>{{Cite news|url=https://www.bbc.com/news/world-europe-39907965|title=Cyber-attack: Europol says it was unprecedented in scale|date=May 13, 2017|work=BBC News|access-date=May 18, 2017|language=en-GB}}</ref> A hacked unreleased Disney film is held for ransom, to be paid in Bitcoin.{{citation needed|date=December 2020}}
* May: 25,000 digital photos and ID scans relating to patients of the Grozio Chirurgija [[cosmetic surgery]] clinic in [[Lithuania]] were obtained and published without consent by an unknown group demanding ransoms.<ref name="guardian-20170531">{{cite news|first=Alex|last=Hern |url=https://www.theguardian.com/technology/2017/may/31/hackers-publish-private-photos-cosmetic-surgery-clinic-bitcoin-ransom-payments |title=Hackers publish private photos from cosmetic surgery clinic &#124; Technology |newspaper=[[The Guardian]] |access-date=May 31, 2017}}</ref><ref>{{cite news|url=http://www.seattletimes.com/nation-world/plastic-surgery-clinics-hacked-25000-photos-data-online/ |title=Plastic surgery clinics hacked; 25,000 photos, data online |newspaper=[[The Seattle Times]] |access-date=May 31, 2017}}</ref><ref>{{cite web|url=https://abcnews.go.com/Technology/wireStory/plastic-surgery-clinics-hacked-25000-photos-data-online-47728631|title=Plastic surgery clinics hacked; 25,000 photos, data online|website=Abcnews.go.com|access-date=May 31, 2017|url-status=dead|archive-url=https://web.archive.org/web/20170531124102/https://abcnews.go.com/Technology/wireStory/plastic-surgery-clinics-hacked-25000-photos-data-online-47728631|archive-date=May 31, 2017}}</ref> Thousands of clients from more than 60 countries were affected.<ref name="guardian-20170531"/> The breach brought attention to weaknesses in Lithuania's information security.<ref name="guardian-20170531"/>
*June: [[2017 Petya cyberattack]].<ref>{{Cite news|url=https://www.bbc.com/news/technology-40416611|title=Global ransomware attack causes chaos|date=June 27, 2017|work=BBC News|access-date=June 27, 2017|language=en-GB}}</ref>
*June: TRITON (TRISIS), a malware framework designed to reprogram [[Triconex]] [[safety instrumented system]]s (SIS) of [[industrial control system]]s (ICS), discovered in Saudi Arabian Petrochemical plant.<ref>{{Cite web|url=https://www.csoonline.com/article/3388228/group-behind-triton-industrial-sabotage-malware-made-more-victims.html|title=Group behind TRITON industrial sabotage malware made more victims|last=Constantin|first=Lucian|date=April 10, 2019|website=CSO Online|language=en|access-date=July 17, 2019}}</ref>
*August: Hackers demand $7.5 million in [[Bitcoin]] to stop pre-releasing [[HBO]] shows and scripts, including ''[[Ballers]]'', ''[[Room 104]]'' and ''[[Game of Thrones]]''.<ref>{{Cite journal|url=https://slate.com/technology/2017/08/hbo-hackers-want-7-5-million-to-stop-leaking-game-of-thrones.html|title=The HBO Hackers Are Demanding $7.5 Million to Stop Leaking Game of Thrones|journal=Slate |date=8 August 2017|last1=Glaser |first1=April }}</ref>
* May–July 2017: [[Equifax#May.E2.80.93July 2017 security breach|The Equifax breach]].<ref name=":0">{{Cite web|url=https://www.cnbc.com/2017/09/07/credit-reporting-firm-equifax-says-cybersecurity-incident-could-potentially-affect-143-million-us-consumers.html|title=Credit reporting firm Equifax says data breach could potentially affect 143 million US consumers|last=Haselton|first=Todd|date=September 7, 2017|website=cnbc.com|access-date=October 16, 2017}}</ref> 
* September 2017: [[Deloitte#E-mail hack|Deloitte breach]].<ref name="guardsep2017">{{cite web|url=https://www.theguardian.com/business/2017/sep/25/deloitte-hit-by-cyber-attack-revealing-clients-secret-emails|title=Deloitte hit by cyber-attack revealing clients' secret emails|first=Nick|last=Hopkins|date=September 25, 2017|access-date=October 16, 2017|website=Theguardian.com}}</ref>
*December: [[Mecklenburg County, North Carolina|Mecklenburg County]], North Carolina computer systems were hacked. They did not pay the ransom.<ref>{{Cite news|url=https://www.nytimes.com/2017/12/06/us/mecklenburg-county-hackers.html|title=North Carolina County Refuses to Pay $23,000 Ransom to Hackers|last=Stack|first=Liam|date=December 6, 2017|work=The New York Times|access-date=June 20, 2019|language=en-US|issn=0362-4331}}</ref>

==== 2018 ====
* March: Computer systems in the city of [[Atlanta]], in the U.S. state of Georgia, are seized by hackers with [[ransomware]]. They did not pay the ransom,<ref>{{Cite news|url=https://www.wsj.com/articles/atlanta-hit-with-cyberattack-1521823062|title=Atlanta Hit With Cyberattack|last=McWhirter|first=Joseph De Avila and Cameron|newspaper=Wall Street Journal|date=23 March 2018|language=en-US|access-date=June 20, 2019}}</ref> and two Iranians were indicted by the [[FBI]] on cyber crime charges for the breach.<ref>{{Cite news|url=https://www.wsj.com/articles/two-iranians-indicted-in-atlanta-on-cyber-crime-charges-1544044025|title=Two Iranians Indicted in Atlanta on Cyber Crime Charges|agency=Associated Press|newspaper=Wall Street Journal|date=5 December 2018|language=en-US|access-date=June 20, 2019}}</ref>
* The town of [[Wasaga Beach]] in Ontario, Canada computer systems are seized by hackers with ransomware.<ref>{{Cite web|url=https://www.simcoe.com/news-story/8586806-wasaga-beach-town-hall-computers-seized-by-hackers/|title=Wasaga Beach town hall computers seized by hackers|last=Adams|first=Ian|date=May 1, 2018|website=Simcoe.com|language=en-CA|access-date=June 20, 2019}}</ref>
*September: [[Facebook]] was hacked, exposing to hackers the personal information of an estimated 30 million Facebook users (initially estimated at 50 million) when the hackers "stole" the "access tokens" of 400,000 Facebook users. The information accessible to the hackers included users' email addresses, phone numbers, their lists of friends, Groups they are members of, users' search information, posts on their timelines, and names of recent Messenger conversations.<ref name="facebook_hacked_2018_09_28_nytimes_com">[https://www.nytimes.com/2018/09/28/business/facebook-was-hacked-here-are-3-things-you-should-do.html "Facebook Was Hacked. 3 Things You Should Do After the Breach. The social networking giant said attackers had exploited a weakness that enabled them to hijack the accounts of nearly 50 million users. Here are some tips for securing your account,"] September 28, 2018, [[New York Times]], retrieved April 15, 2021</ref><ref name="facebook_says_2018_10_12_foxnews_com">[https://www.foxnews.com/tech/facebook-says-hackers-accessed-phone-numbers-email-addresses-as-part-of-latest-breach "Facebook says hackers accessed phone numbers, email addresses as part of latest breach,"] October 12, 2018, [[Fox News]], retrieved April 15, 2021</ref>
*October: [[West Haven, Connecticut|West Haven, Connecticut USA]] computer systems are seized by hackers with ransomware, they paid $2,000 in ransom.<ref>{{Cite web|url=https://www.courant.com/breaking-news/hc-br-west-haven-cyber-attack-ransomware20181019-story.html|title=Hackers Target Connecticut City, Force Officials To Pay $2,000 Ransom|last=Rondinone|first=Nicholas|website=courant.com|date=19 October 2018 |access-date=June 20, 2019}}</ref>
*November: 
**The first U.S. indictment of individual people for [[ransomware]] attacks occurs. The [[U.S. Justice Department]] indicted two men Faramarz Shahi Savandi and Mohammad Mehdi Shah Mansouri who allegedly used the SamSam ransomware for extortion, netting them more than $6 million in ransom payments. The companies infected with the [[ransomware]] included [[Allscripts]], [[MedStar Health|Medstar Health]], and [[Hollywood Presbyterian Medical Center]]. Altogether, the attacks caused victims to lose more than $30 million, in addition to the ransom payments.<ref>{{Cite web|url=https://www.modernhealthcare.com/article/20181129/NEWS/181129923/feds-indict-ransomware-hackers-of-allscripts-others|title=Feds indict ransomware hackers of Allscripts, others|date=November 29, 2018|website=Modern Healthcare|language=en|access-date=June 20, 2019}}</ref>
**Marriott disclosed that its Starwood Hotel brand had been [[Marriott International#Marriott_International|subject to a security breach]].

==== 2019 ====
*March: [[Jackson County, Georgia|Jackson County]] computer systems in the U.S. state of Georgia are seized by hackers with [[ransomware]], they paid $400,000 in ransom.<ref>{{Cite web|url=https://www.zdnet.com/article/georgia-county-pays-a-whopping-400000-to-get-rid-of-a-ransomware-infection/ |archive-url=https://web.archive.org/web/20190311202818/https://www.zdnet.com/article/georgia-county-pays-a-whopping-400000-to-get-rid-of-a-ransomware-infection/ |archive-date=March 11, 2019 |title=Georgia county pays a whopping $400,000 to get rid of a ransomware infection|last=Cimpanu|first=Catalin|website=ZDNet|language=en|access-date=June 20, 2019}}</ref> The city of [[Albany, New York|Albany]] in the U.S. state of New York experiences a ransomware cyber attack.<ref>{{Cite web|url=http://cbs6albany.com/news/local/city-of-albany-experiences-cyber-attack|title=City of Albany experiences cyber attack|date=March 30, 2019|website=WRGB|access-date=June 20, 2019}}</ref><ref>{{Cite news|url=https://www.timesunion.com/news/article/Albany-police-can-t-access-scheduling-system-13730578.php|title=Albany cyber attack affecting records, police|last=Moench|first=Mallory|date=March 31, 2019|website=Times Union|access-date=June 20, 2019}}</ref>
*April: Computer systems in the city of [[Augusta, Maine|Augusta]], in the U.S. state of Maine, are seized by hackers using ransomware.<ref>{{Cite news|url=https://www.newscentermaine.com/article/news/local/augusta-city-offices-hit-by-computer-virus/97-2e380b61-5e75-4627-b8a1-b3b3af6e23e2|title=Augusta city offices hit by computer virus|newspaper=Newscentermaine.com|date=20 April 2019|access-date=June 20, 2019}}</ref><ref>{{Cite web|url=https://bangordailynews.com/2019/04/29/news/augusta/hacker-wanted-more-than-100k-to-restore-maine-citys-computers/|title=Hacker wanted more than $100K to restore Maine city's computers|website=Bangor Daily News|date=29 April 2019|language=en-US|access-date=June 20, 2019}}</ref> The [[Greenville, North Carolina|City of Greenville]] (North Carolina)'s computer systems are seized by hackers using ransomware known as RobbinHood.<ref>{{Cite web|url=https://www.witn.com/content/news/Greenville-city-computers-shut-down-after-virus-attack-508373251.html|title=FBI now investigating "RobinHood" ransomware attack on Greenville computers|website=www.witn.com|date=10 April 2019 |language=en|access-date=June 20, 2019}}</ref><ref name=bleeping>{{Cite web|url=https://www.bleepingcomputer.com/news/security/a-closer-look-at-the-robbinhood-ransomware/|title=A Closer Look at the RobbinHood Ransomware|website=BleepingComputer}}</ref> [[Imperial County, California|Imperial County]], in the U.S. state of California, computer systems are seized by hackers using Ryuk ransomware.<ref>{{Cite web|url=https://www.latimes.com/local/lanow/la-me-imperial-county-website-down-20190418-story.html|title=Ryuk malware hacked a county government website. It's been down for 6 days|last=Shalby|first=Colleen|website=[[Los Angeles Times]]|access-date=June 20, 2019|date=April 18, 2019}}</ref>
* May: computer systems belonging to the [[Baltimore, Maryland|City of Baltimore]] are seized by hackers using ransomware known as RobbinHood that encrypts files with a "file-locking" virus, as well as the tool [[EternalBlue]].<ref>{{Cite news|url=https://www.nytimes.com/2019/05/22/us/baltimore-ransomware.html|title=Hackers Are Holding Baltimore Hostage: How They Struck and What's Next|last=Chokshi|first=Niraj|date=May 22, 2019|work=The New York Times|access-date=June 20, 2019|language=en-US|issn=0362-4331}}</ref><ref>{{Cite web|url=https://www.baltimoresun.com/politics/bs-md-ci-it-outage-20190507-story.html|title=Baltimore city government computer network hit by ransomware attack|last1=Campbell|first2=Ian |last2=Duncan |first1=Colin|website=baltimoresun.com|date=7 May 2019 |language=en-US|access-date=June 20, 2019}}</ref><ref>{{Cite news|url=https://www.baltimoresun.com/politics/bs-md-ci-ransomware-attack-20190517-story.html|title=Analysis of ransomware used in Baltimore attack indicates hackers needed 'unfettered access' to city computers|last1=Zhang|first2=Ian |last2=Duncan |first1=Christine|website=baltimoresun.com|language=en-US|access-date=June 20, 2019}}</ref><ref>{{Cite news|url=https://www.wsj.com/articles/u-s-cities-strain-to-fight-hackers-11559899800|title=Hackers Won't Let Up in Their Attack on U.S. Cities|last=Kamp|first=Scott Calvert and Jon|newspaper=Wall Street Journal|date=7 June 2019|language=en-US|access-date=June 20, 2019}}</ref>
*June: The city of [[Riviera Beach, Florida]] paid roughly $600,000 ransom in [[Bitcoin]] to hackers who seized their computers using ransomware.<ref>{{Cite web|url=https://www.cnn.com/2019/06/20/us/riviera-beach-to-pay-hacker/index.html|title=Florida city to pay $600K ransom to hacker who seized computer systems weeks ago|first=Faith|last=Karimi|website=CNN|date=20 June 2019|access-date=June 20, 2019}}</ref> Hackers stole 18 hours of unreleased music from the band [[Radiohead]] demanding $150,000 ransom. Radiohead released the music to the public anyway and did not pay the ransom.<ref>{{Cite web|url=https://nakedsecurity.sophos.com/2019/06/12/radiohead-releases-ok-computer-sessions-that-hacker-tried-to-ransom/|title=Radiohead releases 'OK Computer' sessions that hacker tried to ransom|date=June 12, 2019|website=Naked Security|language=en|access-date=June 20, 2019}}</ref>
*November: The [[Anonymous (group)|Anonymous]] hacktivist collective announced that they have hacked into four Chinese computer databases and donated those to data breach indexing/notification service vigilante.pw. The hack was conducted in order to support the [[2019 Hong Kong protests]], amidst the Hong Kong police's siege of the city's [[Hong Kong Polytechnic University|Polytechnic University]]. They also brought up a possible peace plan first proposed by a professor at [[Inha University]] in hopes of having the [[Korean reunification]] and the five key demands of the Hong Kong protest being fulfilled at once.<ref>{{cite web |title=Anonymous Hacks China As Chinese Military Moves On Hong Kong, Students Trapped at Polytechnic University |url=https://www.activistpost.com/2019/11/anonymous-hacks-china-as-chinese-military-moves-on-hong-kong-students-trapped-at-polytechnic-university.html |website=Activist Post |access-date=August 25, 2020 |date=November 19, 2019}}</ref>

===2020s===
====2020====
* May: Anonymous declared a large hack on May 28, three days after the [[murder of George Floyd]]. An individual claiming to represent Anonymous stated that "We are Legion. We do not forgive. We do not forget. Expect us." in a now-deleted video. Anonymous addressed police brutality and said they "will be exposing [their] many crimes to the world". It was suspected that Anonymous were the cause for the downtime and public suspension of the [[Minneapolis Police Department]] website and its parent site, the website of the [[City of Minneapolis]].<ref>{{Cite web | url=https://variety.com/2020/digital/news/anonymous-hackers-minneapolis-police-department-website-george-floyd. | title=Variety}}</ref>
* May: Indian national Shubham Upadhyay posed as Superintendent of Police and, using [[social engineering (security)|social engineering]], used a free caller identification app to call up the in-charge of the Kotwali police station, K. K. Gupta, in order to threaten him to get his phone repaired amidst the [[COVID-19 pandemic lockdown in India|COVID-19 lockdown]]. The attempt was foiled and Upadhyay was arrested.<ref>{{cite web |last1=Jaiswal |first1=Priya |title=UP: 23-year-old man poses as police official to get mobile phone repaired, lands in lockup |url=https://www.indiatvnews.com/news/india/uttar-pradesh-azamgarh-23-year-old-man-poses-police-official-mobile-phone-repair-614583 |website=www.indiatvnews.com |access-date=August 14, 2020 |language=en |date=May 6, 2020}}</ref>
* June: Anonymous claimed responsibility for stealing and leaking a trove of documents, collectively nicknamed '[[BlueLeaks]]'. The 269-gigabytes collection was published by a leak-focused activist group known as [[Distributed Denial of Secrets]]. Furthermore, the collective took down [[Atlanta Police Department]]'s website via [[DDoS]], and defaced websites such as a [[Philippines|Filipino]] governmental webpage and that of [[Brookhaven National Labs]]. They expressed support for [[Julian Assange]] and press freedom, while briefly "taking a swing" against [[Facebook]], [[Reddit]] and [[Wikipedia]] for having 'engaged in shady practices behind our prying eyes'. In the case of Reddit, they posted a link to a court document describing the possible involvement of a moderator of a large traffic subreddit (/r/news) in an online harassment-related case.<ref>{{cite magazine |title=Anonymous Stole and Leaked a Megatrove of Police Documents |url=https://www.wired.com/story/blueleaks-anonymous-law-enforcement-hack/ |magazine=Wired |access-date=June 26, 2020 |language=en-us}}</ref><ref>{{cite web |title=An Interview With Anonymous - George Floyd Protests, Hacks, And Press Freedom |url=https://www.activistpost.com/2020/06/an-interview-with-anonymous-george-floyd-protests-hacks-and-press-freedom.html |website=Activist Post |access-date=June 26, 2020 |date=June 23, 2020}}</ref>
* June: The [[Buffalo, New York|Buffalo, NY]] police department's website was supposedly hacked by Anonymous.<ref>{{Cite news|title=Anonymous Strike Back At Buffalo PD After Shoving Incident|url=https://www.hotnewhiphop.com/anonymous-strike-back-at-buffalo-pd-after-shoving-incident-news.111974.html|access-date=June 6, 2020|website=HotNewHipHop|date=6 June 2020|language=en}}</ref> While the website was up and running after a few minutes, Anonymous tweeted again on Twitter urging that it be taken down.<ref>{{Cite web|title=@GroupAnon: "#TangoDown again. Those lasers are firing hot."|url=https://twitter.com/groupanon/status/1269351212043902976|access-date=June 6, 2020|website=Twitter|language=en}}</ref> A few minutes later, the Buffalo, NY website was brought down again. They also hacked [[Chicago]] police radios to play [[N.W.A]]'s "[[Fuck tha Police]]".<ref>{{cite web |title=Anonymous hack Chicago police radios to play NWA's 'Fuck Tha Police'|url=https://www.nme.com/news/music/anonymous-hack-chicago-police-radios-to-play-nwas-fuck-tha-police-2680017 |website=NME Music News, Reviews, Videos, Galleries, Tickets and Blogs {{!}} NME.COM |access-date=June 26, 2020 |date=June 1, 2020}}</ref>
* June: Over 1,000 accounts on the multiplayer online game [[Roblox]] were hacked to display that they supported U.S. President [[Donald Trump]].<ref>{{cite web |title=Roblox accounts hacked to support Donald Trump |url=https://www.bbc.com/news/technology-53236050 |website=BBC News |access-date=August 13, 2020 |date=June 30, 2020}}</ref>
* July: The [[2020 Twitter bitcoin scam]] occurred.
* July: User credentials of writing website [[Wattpad]] were stolen and leaked on a hacker forum. The database contained over 200 million records.<ref>{{cite web |title=Wattpad data breach exposes account info for millions of users |url=https://www.bleepingcomputer.com/news/security/wattpad-data-breach-exposes-account-info-for-millions-of-users/ |website=BleepingComputer |access-date=August 14, 2020 |language=en-us}}</ref>
* August: A large number of sub[[reddit]]s were hacked to post materials endorsing [[Donald Trump]]. The affected subreddits included r/BlackPeopleTwitter, r/3amJokes, r/NFL, r/PhotoshopBattles. An entity with the name of "calvin goh and Melvern" had purportedly claimed responsibility for the massive defacement, and also made violent threats against a [[List of diplomatic missions of China|Chinese embassy]].<ref>{{cite web |title=Everything We Know About the Reddit Hack, Including Who Is Claiming Responsibility |url=https://www.newsweek.com/everything-we-know-about-reddit-hack-1523704 |website=Newsweek |date=7 August 2020 |access-date=August 11, 2020}}</ref>
* August: The US Air Force's Hack-A-Sat event was hosted at DEF CON's virtual conference where groups such as Poland Can Into Space, FluxRepeatRocket, AddVulcan, Samurai, Solar Wine, PFS, 15 Fitty Tree, and 1064CBread competed in order to control a satellite in space. The Poland Can Into Space team stood out for having successfully manipulated a satellite to take a picture of the [[Moon]].<ref>{{cite web |title=Einmal zum Mond und wieder zurück – Hacker der Hochschule Bonn-Rhein erfolgreich beim Hack-A-Sat |url=https://idw-online.de/de/news752398 |website=idw-online.de |access-date=August 16, 2020 |language=de}}</ref><ref>{{cite news |title=The Race to Hack a Satellite at DEF CON |url=https://www.darkreading.com/application-security/the-race-to-hack-a-satellite-at-def-con/d/d-id/1338657 |website=Dark Reading |date=13 August 2020 |access-date=August 16, 2020 |language=en}}</ref>
* August: The website of Belarusian company "BrestTorgTeknika" was defaced by a hacker nicknaming herself "[[Queen Elsa]]", in order to support the [[2020–21 Belarusian protests]]. In it, the page hacker exclaimed "Get Iced Iced already" and "Free Belarus, revolution of our times" with the latter alluding to the famous slogan used by [[2019 Hong Kong protests]]. The results of the hack were then announced on Reddit's /r/Belarus subreddit by a poster under the username "Socookre".<ref>{{cite web |title=Гостевая книга (Actual archive of defaced page) |url=http://www.bresttorg.by/guestbook/guestbook.php |access-date=August 25, 2020 |date=August 18, 2020|archive-url=https://web.archive.org/web/20200818162750/http://www.bresttorg.by/guestbook/guestbook.php |archive-date=2020-08-18 }}</ref><ref>{{cite web |author1=Socookre |title=Queen Elsa hacks Belarus website and teases Lukashenko (SIC) |date=18 August 2020 |url=https://old.reddit.com/r/belarus/comments/ibzjxm/queen_elsa_hacks_belarus_website_and_teases/ |archive-url=https://web.archive.org/web/20200825184811/https://old.reddit.com/r/belarus/comments/ibzjxm/queen_elsa_hacks_belarus_website_and_teases/ |access-date=August 25, 2020 |archive-date=2020-08-25 |language=en}}</ref>
* August: Multiple DDoS attacks forced [[New Zealand]]'s stock market to temporarily shut down.<ref>{{cite web |last1=Farrer |first1=Martin |title=New Zealand stock exchange hit by cyber attack for second day |url=https://www.theguardian.com/technology/2020/aug/26/new-zealand-stock-exchange-hit-by-cyber-attack-for-second-day |website=The Guardian |access-date=11 September 2020 |date=26 August 2020}}</ref>
* September: The first suspected death from a cyberattack was reported after cybercriminals hit a hospital in [[Düsseldorf]], [[Germany]] with [[ransomware]].<ref>{{cite web |last1=Eddy |first1=Melissa |last2=Perlroth |first2=Nicole |title=Cyber Attack Suspected in German Woman's Death |url=https://www.nytimes.com/2020/09/18/world/europe/cyber-attack-germany-ransomeware-death.html |website=The New York Times |access-date=19 September 2020 |date=18 September 2020}}</ref>
* October: A wave of [[botnet]]-coordinated [[ransomware]] [[Cyberattack#Hospitals|attacks against hospital infrastructure]] occurred in the United States, identified as {{ill|Internet in Russia|lt=associated with Russia|ru|Интернет в России|preserve=1}}.<ref name="NYT20201028">{{Cite news|url=https://www.nytimes.com/2020/10/28/us/hospitals-cyberattacks-coronavirus.html|title=Officials Warn of Cyberattacks on Hospitals as Virus Cases Spike: Government officials warned that hackers were seeking to hold American hospitals' data hostage in exchange for ransom payments.|department=The Coronavirus Outbreak|surname=Perlroth|given=Nicole|date=2020-10-28|newspaper=[[The New York Times]]|archive-url=https://web.archive.org/web/20201103005351/https://www.nytimes.com/2020/10/28/us/hospitals-cyberattacks-coronavirus.html|archive-date=2020-11-03|url-status=live}}</ref>  State security officials and American corporate security officers were concerned that these attacks might be a prelude to [[Election security|hacking of election infrastructure]] during the [[2020 United States elections|elections of the subsequent month]], like similar incidents during the [[Russian interference in the 2016 United States elections#Intrusions into state election systems|2016 United States elections]] and [[Cyberwarfare by Russia|other attacks]];<ref name="NYT20201012">{{Cite news|url=https://www.nytimes.com/2020/10/12/us/politics/election-hacking-microsoft.html|title=Microsoft Takes Down a Risk to the Election, and Finds the U.S. Doing the Same: Fearing Russian ransomware attacks on the election, the company and U.S. Cyber Command mounted similar pre-emptive strikes. It is not clear how long they may work.|department=US Politics|surname=Sanger|given=David E.|author-link=David E. Sanger|surname2=Perlroth|given2=Nicole|date=2020-10-12|edition=October 21, 2020|newspaper=[[The New York Times]]|archive-url=https://web.archive.org/web/20201104020855/https://www.nytimes.com/2020/10/12/us/politics/election-hacking-microsoft.html|archive-date=2020-11-04|url-status=live}}</ref> there was, however, no evidence that they performed attacks on election infrastructure in 2020.<ref name="60Min20201129">{{cite episode|surname=Krebs|given=Christopher Cox|subject-link=Chris Krebs|editor-surname=Pelley|editor-given=Scott Cameron|editor-link=Scott Pelley|id=Securing the Election, The Last Slave Ship, James Corden|season=53|number=13|title=Fired director of U.S. cyber agency Chris Krebs explains why President Trump's claims of election interference are false|url=https://www.cbsnews.com/news/election-results-security-chris-krebs-60-minutes-2020-11-29/|series=60 Minutes|series-link=60 Minutes|network=[[CBS]]|time=11:30|date=2020-11-29|archive-url=https://web.archive.org/web/20201202060053/https://www.cbsnews.com/news/election-results-security-chris-krebs-60-minutes-2020-11-29/|archive-date=2020-12-02|url-status=live|quote=It was quiet. There was no indication or evidence that there was any sort of hacking or compromise of election systems on, before, or after November third.}}</ref>
* December: A [[supply chain attack]] targeting upstream dependencies from Texas IT service provider "SolarWinds" results in serious, wide-ranging security breaches at the [[U.S. Treasury]] and [[United States Commerce Department|Commerce]] departments. White House officials did not immediately publicly identify a culprit; [[Reuters]], citing sources "familiar with the investigation", pointed toward the Russian government.<ref>{{cite news|url=https://www.reuters.com/article/us-usa-cyber-amazon-com-exclsuive/u-s-treasury-breached-by-hackers-backed-by-foreign-government-sources-idUSKBN28N0PG|title=Suspected Russian hackers spied on U.S. Treasury emails - sources|first=Christopher|last=Bing|newspaper=Reuters|date=13 December 2020}}</ref> An official statement shared by Senate Finance Committee ranking member, [[Ron Wyden]] said: "Hackers broke into systems in the Departmental Offices division of Treasury, home to the department’s highest-ranking officials."<ref>{{Cite web|last=ArcTitan|date=2021-02-21|title=U.S. Treasury Hit by Email Hacks|url=https://www.arctitan.com/blog/u-s-treasury-hit-by-email-hacks/|access-date=2021-03-16|website=ArcTitan|language=en-US}}</ref>

====2021====
* January: [[2021 Microsoft Exchange Server data breach|Microsoft Exchange Server data breach]]
* February: Anonymous announced cyber-attacks of at least five [[Malaysia]]n websites. As a result, eleven individuals were nabbed as suspects.<ref>{{cite web |title='Anonymous Malaysia' hackers say they defaced five government websites {{!}} Coconuts KL |url=https://coconuts.co/kl/news/anonymous-malaysia-hackers-say-they-defaced-five-government-websites/ |website=Coconuts |access-date=19 February 2021 |date=1 February 2021}}</ref><ref>{{cite web |last1=Ar |first1=Zurairi |title=Hacktivist group Anonymous Malaysia resurfaces, vows cyber-attack against govt over data breaches {{!}} Malay Mail |url=https://www.malaymail.com/news/malaysia/2021/01/25/hacktivist-group-anonymous-malaysia-resurfaces-vows-cyber-attack-against-go/1943943 |website=www.malaymail.com |date=25 January 2021 |access-date=19 February 2021 |language=en}}</ref><ref>{{cite news |last1=Cimpanu |first1=Catalin |title=Malaysia arrests 11 suspects for hacking government sites |url=https://www.zdnet.com/article/malaysia-arrests-11-suspects-for-hacking-government-sites/ |archive-url=https://web.archive.org/web/20210223054030/https://www.zdnet.com/article/malaysia-arrests-11-suspects-for-hacking-government-sites/ |archive-date=February 23, 2021 |website=ZDNet |access-date=19 February 2021 |language=en}}</ref><ref>{{cite web |title=11 suspects of 'Anonymous Malaysia' hacker group nabbed {{!}} The Star |url=https://www.thestar.com.my/news/nation/2021/02/18/11-suspects-of-039anonymous-malaysia039-hacker-group-nabbed |website=www.thestar.com.my |access-date=19 February 2021}}</ref>
* February: The group "Myanmar Hackers" attacked several websites belonging to [[Myanmar]] government agencies, such as the [[Central Bank of Myanmar]] and the military-run ''[[Tatmadaw]] True News Information Team''. The group also targeted the Directorate of Investment and Company Administration, Trade Department, Customs Department, Ministry of Commerce, Myawady TV and state-owned broadcaster Myanmar Radio and Television and some private media outlets. A computer technician in Yangon found that the hacks were denial-of-service attacks, while the group's motive is to protest the [[2021 Myanmar coup]].<ref>{{cite web |title=Myanmar Hackers Take Down Military-Run Websites |url=https://www.irrawaddy.com/news/burma/myanmar-hackers-take-military-run-websites.html |website=The Irrawaddy |access-date=19 February 2021 |date=17 February 2021}}</ref>
* April: Over 500 million [[Facebook]] users' personal info—including info on 32 million in the United States—was discovered posted on a hackers' website, though Facebook claimed that the information was from a 2019 hack, and that the company had already taken mitigation measures; however, the company declined to say whether it had notified the affected users of the breach.<ref name="facebook_hacked_2021_04_05_ktnv_com">[https://www.ktnv.com/news/national/cybersecurity-millions-of-facebook-accounts-hacked "Cybersecurity:  Millions of Facebook accounts hacked,"] April 5, 2021, [[KTNV-TV]], [[Las Vegas, Nevada]], retrieved April 15, 2021</ref><ref name="facebook_users_2021_04_05_fox5sandiego_com">[https://fox5sandiego.com/news/tech/533-million-facebook-users-were-hacked-how-to-find-out-if-you-were-one-of-them/ "Facebook hack How to find out if you were one of the 533 million Facebook users hacked,"], Fox5 TV, [[San Diego, California]], retrieved April 15, 2021</ref><ref name="facebook_data_breach_2021_04_13_timesofindia_com">[https://timesofindia.indiatimes.com/videos/news/facebook-data-breach-explained-how-the-worlds-largest-social-media-platform-got-hacked/videoshow/82029617.cms "2021-04-13 Facebook data breach explained: How the world’s largest social media platform got hacked,"] April 13, 2021, ''[[Times of India]],'' retrieved April 15, 2021</ref>{{better source needed|date=April 2021}}
* April: The [[Ivanti Pulse Connect Secure data breach]] of unauthorized access to the networks of high-value targets since at least June 2020 via {{CVE|2021-22893}} across the U.S. and some E.U. nations{{additional citation needed|date=May 2021}} due to their use of [[Vulnerability (computing)|vulnerable]], [[Proprietary software|proprietary]] software was reported.<ref>{{cite news |last1=Goodin |first1=Dan |title=More US agencies potentially hacked, this time with Pulse Secure exploits |url=https://arstechnica.com/gadgets/2021/04/more-us-agencies-potentially-hacked-this-time-with-pulse-secure-exploits/ |access-date=9 May 2021 |work=Ars Technica |date=30 April 2021 |language=en-us}}</ref><ref>{{cite web |title=Check Your Pulse: Suspected APT Actors Leverage Authentication Bypass Techniques and Pulse Secure Zero-Day |url=https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html |website=FireEye |access-date=9 May 2021 |language=en}}</ref>
* May: Operation of the U.S. [[Colonial Pipeline cyber attack|Colonial Pipeline is interrupted]] by a [[ransomware]] cyber operation.<ref>{{cite news |title=Cyber attack shuts down U.S. fuel pipeline 'jugular,' Biden briefed |url=https://www.reuters.com/technology/colonial-pipeline-halts-all-pipeline-operations-after-cybersecurity-attack-2021-05-08/ |access-date=13 June 2021 |work=Reuters |date=2021-05-08}}</ref>
* May: On 21 May 2021 [[Air India]] was subjected to a [[2021 Air India cyberattack|cyberattack wherein the personal details of about 4.5 million customers around the world were compromised]] including passport, credit card details, birthdates, names and ticket information.<ref>{{Cite web|date=2021-05-22|title=Explained: What is the data breach that has hit Air India customers?|url=https://indianexpress.com/article/explained/air-india-sita-data-breach-explained-7325501/|access-date=2021-05-23|website=The Indian Express|language=en}}</ref><ref>{{Cite news|title=Air India cyberattack: Personal data of over 4.5 million passengers leaked|url=https://www.irishtimes.com/news/world/asia-pacific/air-india-cyberattack-personal-data-of-over-4-5-million-passengers-leaked-1.4572596|access-date=2021-05-23|newspaper=The Irish Times|language=en}}</ref>
* July: On 22 July 2021 [[Saudi Aramco]] data were leaked by a third-party contractor and demanded $50 million ransom from Saudi Aramco. Saudi Aramco confirmed the incident after a hacker claimed on the dark web that he had stolen 1 terabyte of data about the location of oil refineries and employees data in a post that was posted on June 23.<ref>{{Cite web|date=2021-07-22|title=Saudi Aramco confirms data leak after $50 million cyber ransom demand|url=https://arstechnica.com/information-technology/2021/07/saudi-aramco-confirms-data-leak-after-50-million-cyber-ransom-demand/|access-date=2021-07-22|website=ARS Technica|language=en}}</ref><ref>{{Cite web|date=2021-07-22|title=Hackers reportedly demand $50m from Saudi Aramco over data leak|url=https://www.bbc.com/news/business-57924355|website=BBC|language=en}}</ref><ref>{{Cite web|date=2021-07-22|title=Saudi Aramco Confirms Data Leak After Reported Cyber Ransom|url=https://www.bloomberg.com/news/articles/2021-07-21/saudi-aramco-confirms-data-leak-after-reported-cyber-extortion|website=bloomberg|language=en}}</ref>
* August: T-Mobile reported that data files with information from about 40 million former or prospective T-Mobile customers, including first and last names, date of birth, SSN, and driver's license/ID information, were compromised.<ref>
* {{cite web |title=T‑Mobile Shares Updated Information Regarding Ongoing Investigation into Cyberattack {{!}} T‑Mobile Newsroom |url=https://www.t-mobile.com/news/network/additional-information-regarding-2021-cyberattack-investigation |website=T-Mobile Newsroom}}
* {{cite web |last1=Krebs |first1=Brian |title=T-Mobile: Breach Exposed SSN/DOB of 40M+ People – Krebs on Security |date=27 August 2021 |url=https://krebsonsecurity.com/2021/08/t-mobile-breach-exposed-ssn-dob-of-40m-people/}}
* {{cite news |last1=Vaas |first1=Lisa |title=T-Mobile: >40 Million Customers' Data Stolen |url=https://threatpost.com/t-mobile-40-million-customers-data-stolen/168778/ |work=threatpost.com}}
* {{cite news |last1=Hill |first1=Michael |title=The T-Mobile data breach: A timeline |url=https://www.csoonline.com/article/3630093/the-t-mobile-data-breach-a-timeline.html |work=CSO Online |date=27 August 2021}}
</ref>
*September and October: [[2021 Epik data breach]]. Anonymous obtained and released over 400{{Nbsp}}gigabytes of data from the domain registrar and web hosting company [[Epik]]. The data was shared in three releases between September 13 and October 4. The first release included domain purchase and transfer details, account credentials and logins, payment history, employee emails, and unidentified private keys.<ref name=":3">{{Cite web|last=Goforth|first=Claire|date=September 14, 2021|title=Anonymous to release massive data set of the far-right's preferred web hosting company|url=https://www.dailydot.com/debug/anonymous-hack-far-right-web-host-epik/|access-date=September 14, 2021|website=[[The Daily Dot]]|language=en-US}}</ref> The hackers claimed they had obtained "a decade's worth of data", including all customer data and records for all domains ever hosted or registered through the company, and which included poorly encrypted passwords and other sensitive data stored in [[plaintext]].<ref name=":3" /><ref name=":6">{{Cite web|last=Cimpanu|first=Catalin|date=September 15, 2021|title=Anonymous hacks and leaks data from domain registrar Epik|url=https://therecord.media/anonymous-hacks-and-leaks-data-from-domain-registrar-epik/|access-date=September 16, 2021|website=[[The Record by Recorded Future]]|language=en}}</ref> The second release consisted of bootable disk images and API keys for third-party services used by Epik;<ref name=":2">{{Cite web|last=Thalen|first=Mikael|date=September 29, 2021|title=New leak of Epik data exposes company's entire server|url=https://www.dailydot.com/debug/anonymous-new-epik-leak/|access-date=September 29, 2021|website=[[The Daily Dot]]|language=en-US}}</ref> the third contained additional disk images and an archive of data belonging to the [[Republican Party of Texas]], who are an Epik customer.<ref name=":4">{{Cite web|last=Thalen|first=Mikael|date=October 4, 2021|title=Anonymous releases data on Texas GOP in latest Epik hack dump|url=https://www.dailydot.com/debug/anonymous-texas-gop-epik/|access-date=October 4, 2021|website=[[The Daily Dot]]|language=en-US}}</ref>
*October: On October 6, 2021, an anonymous 4chan user reportedly hacked and leaked the source code of [[Twitch (service)|Twitch]], as well as information on how much the streaming service paid almost 2.4 million streamers since August 2019.<ref>{{Cite web|last=Warren|first=Tom|date=2021-10-06|title=Twitch source code and creator payouts part of massive leak|url=https://www.theverge.com/2021/10/6/22712250/twitch-hack-leak-data-streamer-revenue-steam-competitor|access-date=2021-10-07|website=The Verge|language=en}}</ref> Source code from almost 6,000 GitHub repositories was leaked, and the 4chan user said it was "part one" of a much larger release.<ref>{{Cite news|last=Browning|first=Kellen|date=2021-10-06|title=A 'potentially disastrous' data breach hits Twitch, the livestreaming site.|language=en-US|work=The New York Times|url=https://www.nytimes.com/2021/10/06/technology/twitch-data-breach.html|access-date=2021-10-07|issn=0362-4331}}</ref>

====2022====
* February: The German [[Chaos Computer Club]] has reported more than fifty data leaks. Government institutions and companies from various business sectors were affected. In total, the researchers had access to over 6.4 million personal data records, as well as terabytes of log data and source code.<ref>{{Cite news|author=tweakers|date=2022-02-14|title=Hackersclub CCC vindt 6,4 miljoen persoonsgegevens via vijftigtal datalekken|newspaper=Tweakers |url=https://tweakers.net/nieuws/193238/hackersclub-ccc-vindt-6-komma-4-miljoen-persoonsgegevens-via-vijftigtal-datalekken.html|access-date=2022-02-17|language=nl}}</ref><ref>{{Cite web|author=Chaos Computer Club|date=2022-02-14|title=Chaos Computer Club meldet 6,4 Millionen Datensätze in über 50 Leaks|url=https://www.ccc.de/de/updates/2022/web-patrouille-ccc|access-date=2022-02-17|language=de}}</ref>
* March: As a response to the [[2022 Russian invasion of Ukraine]], [[Anonymous (hacker group)|Anonymous]] [[Anonymous and the 2022 Russian invasion of Ukraine|performed many attacks]] against computer systems in [[Russia]]. Most notably, Anonymous committed a cyberattack against [[Roskomnadzor]].<ref>{{cite web |title=Anonymous hacks Russian federal agency, releases 360,000 documents |url=https://www.jpost.com/breaking-news/article-700940 |website=The Jerusalem Post {{!}} JPost.com |date=10 March 2022 |access-date=6 April 2022}}</ref>
* April: Anonymous hacked Russian companies Aerogas, Forest, and Petrovsky Fort. From there they leaked around 437,500 emails which they donated to non-profit whistleblower organization [[Distributed Denial of Secrets]]. Furthermore, they leaked 446 GB of data from [[Russian Ministry of Culture]].<ref>{{cite web |title=Anonymous Hits 3 Russian Entities, Leaks 400 GB Worth of Emails |url=https://www.hackread.com/anonymous-hits-russian-entities-leaks-400-gb-emails/ |access-date=12 April 2022 |date=12 April 2022}}</ref><ref>{{cite web |title=Anonymous Hits Russian Ministry of Culture- Leaks 446GB of Data |url=https://www.hackread.com/anonymous-hits-russian-ministry-of-culture-leaks-446gb-of-data/ |access-date=13 April 2022 |date=12 April 2022}}</ref>
* April: On April 19, Gijón City Council (Spain) was attacked by the GERVASIA computer virus and suffered data hijacking.<ref>{{cite web |title=Gijón City Council (Spain) was attacked by GERVASIA |url=https://www.elcomercio.es/gijon/hackean-red-informatica-ayuntamiento-gijon-20220419103023-nt.html/ |access-date=19 April 2022 |date=19 April 2022}}</ref>
* May: Network Battalion 65 (NB65), a hacktivist group affiliated with Anonymous, has reportedly hacked Russian payment processor [[Qiwi]]. A total of 10.5 [[terabytes]] of data including transaction records and customers' credit cards had been exfiltrated. They further infected Qiwi with [[ransomware]]s and threatened to release more customer records.<ref>{{cite web |title=Anonymous NB65 Claims Hack on Russian Payment Processor Qiwi |url=https://www.hackread.com/anonymous-nb65-hacki-russia-payment-processor-qiwi/ |access-date=9 May 2022 |date=9 May 2022}}</ref>
* May: During the [[Victory Day (9 May)|Victory Day in Russia]], anti-war messages were inserted into Russian TV schedules including that of [[Russia-1]], Channel 1, and [[NTV-Plus]]. One of the messages were "On your hands is the blood of thousands of Ukrainians and their hundreds of murdered children. TV and the authorities are lying. No to war."<ref>{{cite web |last1=Jankowicz |first1=Mia |title=Hackers replaced Russian TV schedules during Putin's 'Victory Day' parade with anti-war messages, saying the blood of Ukrainians is on Russians' hands |url=https://www.businessinsider.com/russia-victory-day-tv-broadcasts-hacked-anti-war-messages-2022-5 |website=Business Insider |access-date=9 May 2022}}</ref>

====2023====

* June: Ransomware gang BlackCat took responsibility for the hack of social media website [[Reddit]] in which they demanded the payment of $4.5 million as ransom and reverses API price increases. The initial change of API pricing has elicited backlashes by users against the company, resulting in actions such as the blackouts of around 8,000 subreddits.<ref>{{cite web |title=Reddit hackers demand $4.5 million and API changes in threat to leak 80GB of data |url=https://engadget.com/reddit-hackers-demand-45-million-and-api-changes-in-threat-to-leak-80gb-of-data-114041164.html |website=Engadget |access-date=26 September 2023 |date=20 June 2023}}</ref>

* September: The [[International Criminal Court]] was affected by a hacking incident.<ref>{{cite web |title=ICC war crimes tribunal hobbled by hacking incident -sources |url=https://www.straitstimes.com/asia/icc-war-crimes-tribunal-hobbled-by-hacking-incident-sources |website=The Straits Times |access-date=26 September 2023 |language=en |date=21 September 2023}}</ref>

* October: Pro-Russian hacker group [[Killnet]] launched cyberattacks against Israel government's websites.<ref>{{cite web |last1=Smart |first1=Jason Jay |title=Killnet: Kremlin-Linked Hacker Group Launches Cyber-Attack Against Israel |url=https://www.kyivpost.com/post/22491 |website=Get the Latest Ukraine News Today - KyivPost |date=9 October 2023 |access-date=9 October 2023 |language=en}}</ref>

====2024====
* February: The website of Burger Singh which is a food chain, was hacked by [[Pakistan|Pakistani]] hacker group "Team Insane PK". On the defaced website, the group warned Indian hackers to cease attacking Pakistani websites while uploading a YouTube video depicting the [[Pakistani Air Force]].<ref>{{cite web |title=Pakistani hackers deface Burger Singh website; read hackers' message and the company's response |url=https://timesofindia.indiatimes.com/gadgets-news/pakistani-hackers-deface-burger-singh-website-read-hackers-message-and-companys-response/articleshow/108068183.cms |website=The Times of India |access-date=21 March 2024 |date=29 February 2024}}</ref>

* May: The [[Internet Archive]] suffered a series of [[distributed denial of service]] (DDoS) attacks that made its services unavailable intermittently, sometimes for hours at a time, over a period of several days.<ref>{{Cite web |last=Irwin |first=Kate |date=2024-05-28 |title=Internet Archive Hit With DDoS Attacks |url=https://www.pcmag.com/news/internet-archive-hit-with-ddos-attack |access-date=2024-05-29 |website=[[PCMag]] |language=en}}</ref><ref>{{Cite web |last=Baran |first=Guru |date=2024-05-28 |title=Internet Archive is Under DDoS Attack For Several Hours |url=https://cybersecuritynews.com/internet-archive-under-ddos-attack/ |access-date=2024-05-29 |website=Cyber Security News |language=en-US}}</ref><ref>{{Cite web |last=Moon |first=Mariella |date=2024-05-29 |title=The Internet Archive has been fending off DDoS attacks for days |url=https://www.engadget.com/the-internet-archive-has-been-fending-off-ddos-attacks-for-days-035950028.html |access-date=2024-05-29 |website=[[Engadget]] |language=en-US}}</ref>

* October: The [[Internet Archive]] suffered another series of hacks and DDoS attacks, shutting down the website for over a day and compromising over 31 million passwords. <ref>{{Cite web |last=Winder |first=David |date=2024-10-10 |title=Internet History Hacked, Wayback Machine Down - 31 Million Passwords Stolen |url=https://www.forbes.com/sites/daveywinder/2024/10/10/internet-hacked-wayback-machine-down-31-million-passwords-stolen/ |access-date=2024-10-10 |website=[[Forbes]] |language=en}}</ref>

==See also==
{{portal|Internet}}
{{commons|Internet}}

* [[Computer and network surveillance]]
* [[Email fraud]]
* [[History of the Internet]]
* [[Identity theft]]
* [[Internet censorship]]
* [[Internet privacy]]
* [[List of security hacking incidents]]
* [[Net neutrality]]
* [[Spamming]]
* [[Timeline of computer viruses and worms]]

==References==
{{reflist|2}}

{{Timelines of computing}}

{{DEFAULTSORT:Timeline Of Internet Conflicts}}
[[Category:Computing timelines|Internet conflicts]]
[[Category:History of the Internet|Internet conflicts]]