Major cyberattacks in 2026 target governments, companies, and critical infrastructure
8 reported3 unconfirmed
According to a TechCrunch report, 2026 has seen a series of significant cyberattacks affecting governments, companies, and critical infrastructure. The article details breaches including the alleged exposure of Social Security data by operatives with the Department of Government Efficiency (DOGE), a destructive hack on medical tech company Stryker by Iranian hackers, and a mass data breach at market research provider Klue affecting nearly 200 companies. Other incidents include attacks on education tech firm Instructure by the ShinyHunters group, a breach of the FBI’s surveillance system, and thousands of Instagram account hijackings via Meta’s AI chatbot. The report notes that hackers are increasingly targeting water systems and energy grids in Europe, with some attacks attributed to Russia. The article also describes ongoing attacks on open source developers that have compromised major security tools and Big Tech companies.
What’s reported
DOGE operatives allegedly uploaded a live copy of the Social Security database to an unsecured third-party server, potentially exposing Social Security numbers of most living Americans.
Two top House Democrats said the exposure “could very well be the largest data breach in our nation’s history.”
Iranian hackers struck Stryker in March, wiping tens of thousands of employee devices and disrupting operations for several days.
Klue’s data breach affected close to 200 companies, including cybersecurity firms Jamf, HackerOne, and LastPass.
The ShinyHunters breached Instructure’s Canvas system, stealing data of over 30 million students and staff, and later defaced login screens during school finals.
The FBI declared a “major cyber incident” in April after one of its surveillance systems was compromised, potentially exposing phone numbers of surveillance targets.
Thousands of Instagram accounts were hijacked by abusing Meta’s AI chatbot to reset passwords.
Hackers targeted Poland’s energy grid and water treatment plants, a Swedish thermal plant, and a Norwegian dam.
Open questions
What happened with the Social Security database after it was allegedly uploaded to an unsecured server.
Whether Klue paid the ransom to the Icarus hacking group.
The full extent of the FBI surveillance system breach.
Key figures
Elon Musk (leader of DOGE)
President Trump (mentioned in relation to voter fraud claims)
Two top House Democrats (not named)
ShinyHunters (hacking group)
Icarus (extortion gang)
Sources: TechCrunch
