Live Cuts

One reading from this index’s ledger, recomputed on every build. As of October 21, 2026. · ← All Live Cuts

FROM THE LEDGER · WHAT THE ATTACKS DID

What the attacks did

n = 380 with a known outcome

Of the 387 classified incidents, 380 have an outcome on the record — 98.2%. Each bar is that outcome’s share of those 380. An outcome is what an incident resulted in, not how it began; a separate reading from the initial-attack-type cut, and never summed with it.

data theft273

ransomware53

operational outage35

financial theft or fraud11

data extortion8

Outcomes reach the record more readily than entry points, and not only from the company: when the company says nothing, an attacker’s own leak-site post or the press often puts the outcome on the record anyway. Each incident is counted once by its primary outcome; a secondary outcome, when present, is not charted here.

A count of incidents by outcome, never a dollar figure and never summed. Share is of the 380 incidents whose outcome is on the record, a different denominator than the initial-attack-type cut.

THE FLOOR · Counted from incidents classified to date, not a census of all attacks.

← All Live Cuts · Back to the index