Live Cuts
One reading from this index’s ledger, recomputed on every build. As of October 21, 2026. · ← All Live Cuts
FROM THE LEDGER · HOW THE BREACH HAPPENED
Most incidents never say how the attacker got in
n = 387 classifiedOf the 387 incidents classified so far, 150 disclosed the initial attack type — 38.8% — while 237 left it undisclosed. This card is about how they got in; what the attacks did is a separate cut. Counted from the ledger, never summed.
61.2%of classified incidents never disclosed the initial attack type
How they got in :
The national picture agrees: ITRC records that only about a quarter of breach notices name how the attacker got in, the lowest on record. See the ITRC context card above.
Initial attack type graded confirmed (the source states it) or inferred (circumstantial); undisclosed is the honest majority. A count of incidents by attack type, never a dollar figure and never summed.
THE FLOOR · Counted from incidents classified to date, not a census of all attacks.