Sources and method
A map of incidents is only worth something if it does not spread rumours. Every point links to its sources. Anything reported by a single source is marked unconfirmed, and we never present a rumour as a fact.
Statuses
The incident is still happening, or an authority's alert is still active.
Service is back or the incident is over, according to the sources.
Only one source so far, or a claim made by the attackers themselves (ransomware leak sites, crypto hack trackers before confirmation). Drawn hollow on the map.
Feeds
Incidents we checked by hand against at least two independent sources (press agencies, national CERTs, operators, researchers). Attribution is quoted with who made it.
Incidents reported by the community with at least two sources from two different websites, then checked by hand before they reach the map.
Power cuts spotted automatically in news headlines in 8 languages, placed on the city or country named in the headline. One outlet = unconfirmed; several independent outlets = reported. We have not checked them yet: when we do, they move to the verified list. City names from GeoNames (CC BY 4.0).
Country-level drops in internet connectivity measured by Georgia Tech (BGP, active probing, network telescope). A measurement, not a cause: an outage can be a cut cable, a blackout or a shutdown.
Victims posted by ransomware groups on their leak sites. These are claims by criminals, often exaggerated or false: always shown as unconfirmed, and can be hidden on the map.
Vulnerabilities the US CISA says are actively exploited, added in the last 30 days. Shown in the worldwide list.
Security alerts from CERT-FR, the French national CERT (ANSSI).
Crypto hacks listed by DefiLlama with the amount lost. Shown as unconfirmed until the project or an investigator confirms.
Open data
Everything on the map is available as JSON at /api/incidents, refreshed every few minutes, with a source link on every item. Free to reuse; please keep the sources.
Something wrong?
If an incident is wrong, outdated or missing, tell us with a source and we will correct it. Corrections are welcome, especially when they make an incident less scary than it looked.