# CollectSEA

> CollectSEA (Collective Software Engineering Analogues) matches a planned design or existing software or AI app to documented real-world failures — outages, security breaches and AI-agent incidents — and returns source-linked precedents, failure patterns and engineering safeguards. Free website, REST API, remote MCP server and open dataset (CC BY 4.0).

Each documented incident links to its public source (postmortem, SEC filing, court record or advisory) and carries an evidence label: documented incident, security advisory (machine-extracted), or illustrative scenario (not a real incident). Summaries are not all human-reviewed yet; cite the original source for facts.

## Use it
- [Analyze a design](https://collectsea.com/): describe a system, get matched incidents and safeguards
- [MCP server](https://collectsea.com/integrations#mcp): Streamable HTTP at https://collectsea.com/mcp (tools: analyze_design, analyze_existing_app, search_incidents, get_incident, list_failure_patterns, get_safeguards)
- [REST API reference](https://collectsea.com/docs): POST https://collectsea.com/api/analyze with {"proposal": "..."}
- [OpenAPI schema](https://collectsea.com/openapi.json)
- [Dataset downloads](https://collectsea.com/dataset): JSON, CSV, JSONL

## Failure patterns
- [Duplicate action after an ambiguous result](https://collectsea.com/patterns/duplicate-action-after-timeout): A request times out, the caller assumes it failed and retries, and the money moves (or the order ships) twice.
- [Privileged action without an enforceable approval gate](https://collectsea.com/patterns/unenforced-approval-boundary): Limits and approvals live in a prompt, a UI checkbox or a convention instead of code the automation cannot bypass.
- [Cross-tenant access through a caller-controlled identifier](https://collectsea.com/patterns/cross-tenant-access): The server trusts an account, tenant or object ID sent by the client, so changing a number reveals someone else's data.
- [Indirect prompt injection changes agent behavior](https://collectsea.com/patterns/indirect-prompt-injection): An email, web page, issue or ticket that the AI reads contains instructions, and the agent follows them with its tools.
- [Destructive operation without verified recovery](https://collectsea.com/patterns/destructive-operation-without-recovery): A delete, cleanup or teardown runs against the wrong target, and the backups that should save the day turn out not to work.
- [Retry amplification and runaway resource consumption](https://collectsea.com/patterns/retry-amplification): Retries, loops or an expensive input multiply load until a partial failure becomes a full outage or a runaway bill.
- [Partial success leaves systems out of sync](https://collectsea.com/patterns/partial-success-state-divergence): A multi-step workflow half-completes, or events arrive out of order, and two systems now disagree about what happened.
- [Automation acts on stale state or authorization](https://collectsea.com/patterns/stale-state-automation): A background job or automation acts on a plan, permission or record that changed after it was read.
- [Audit trail missing actor, target or decision](https://collectsea.com/patterns/audit-trail-gaps): After something goes wrong nobody can tell who or what took the action, on which object, or why.
- [AI action exceeds its intended scope](https://collectsea.com/patterns/ai-action-exceeds-scope): An AI agent or assistant takes an action, or makes a promise, that nobody meant it to be able to make.
- [Global change without a staged rollout](https://collectsea.com/patterns/unstaged-global-change): A configuration, content or code change reaches every server at once, so one bad value takes everything down together.
- [Weak or phishable authentication on a privileged path](https://collectsea.com/patterns/phishable-privileged-auth): A password, an SMS code or a help-desk reset is all that stands between an attacker and admin access.
- [Known vulnerability left unremediated](https://collectsea.com/patterns/unremediated-known-vulnerability): A patch or fix exists, but the vulnerable component keeps running because nobody knew it was there or owned the fix.
- [Insufficient segmentation lets a foothold spread](https://collectsea.com/patterns/insufficient-segmentation): One compromised account, vendor or network segment reaches management planes, backups and everything else.

## Checklist and glossary
- [Pre-launch safety checklist](https://collectsea.com/checklist): 42 safeguards drawn from real outages, breaches and AI-agent failures
- [Idempotency key](https://collectsea.com/glossary/idempotency-key): A unique value sent with a request so the server can recognize a retry and return the original result instead of doing the work twice.
- [Exponential backoff with jitter](https://collectsea.com/glossary/exponential-backoff): A retry strategy where each attempt waits longer than the last, plus a random amount, so failing clients don’t all retry at the same moment.
- [Circuit breaker](https://collectsea.com/glossary/circuit-breaker): A guard around calls to a dependency that stops sending requests when the dependency is failing, then tries again carefully once it recovers.
- [Canary release](https://collectsea.com/glossary/canary-release): Rolling a change out to a small slice of servers or users first, watching for problems, and only then expanding it.
- [Kill switch](https://collectsea.com/glossary/kill-switch): A control that lets you stop an automated system or a feature immediately, without waiting for a deploy.
- [Least privilege](https://collectsea.com/glossary/least-privilege): Giving every person, service and AI agent only the access its task requires, and nothing more.
- [Prompt injection](https://collectsea.com/glossary/prompt-injection): An attack where text an AI model reads, such as an email, web page or document, contains instructions that the model then follows.
- [Model Context Protocol (MCP)](https://collectsea.com/glossary/model-context-protocol): An open protocol that connects AI assistants to tools and data sources, such as databases, code hosts and APIs, through a standard interface.
- [Human-in-the-loop approval](https://collectsea.com/glossary/human-in-the-loop): Requiring a person to approve high-impact actions before automation carries them out, enforced in code the automation can’t bypass.
- [Insecure direct object reference (IDOR)](https://collectsea.com/glossary/idor): A flaw where an application uses an ID from the request to fetch data without checking that the caller is allowed to see it.
- [Reconciliation](https://collectsea.com/glossary/reconciliation): Regularly comparing two systems that should agree, such as your orders and your payment provider, and flagging or fixing any difference.
- [Optimistic concurrency control](https://collectsea.com/glossary/optimistic-concurrency): Updating a record only if it hasn’t changed since you read it, usually by checking a version number, so stale decisions aren’t applied.
- [Audit trail](https://collectsea.com/glossary/audit-trail): A tamper-resistant record of who did what, to which object, when and why, used to investigate incidents and prove compliance.
- [Phishing-resistant MFA](https://collectsea.com/glossary/phishing-resistant-mfa): Multi-factor authentication that can’t be phished or relayed, such as passkeys and hardware security keys tied to the real website.
- [Network segmentation](https://collectsea.com/glossary/network-segmentation): Dividing a network into separate zones so a compromise in one place can’t freely reach everything else.
- [Restore testing](https://collectsea.com/glossary/restore-testing): Regularly restoring backups to prove they work, rather than trusting that backup jobs report success.
- [Software bill of materials (SBOM)](https://collectsea.com/glossary/sbom): An inventory of every component and dependency in a piece of software, so you can find out quickly where a vulnerable one is running.
- [Known Exploited Vulnerabilities (KEV)](https://collectsea.com/glossary/known-exploited-vulnerabilities): CISA’s catalog of vulnerabilities that attackers are actively exploiting, used to decide what to patch first.
- [Blast radius](https://collectsea.com/glossary/blast-radius): How much breaks when one thing goes wrong. Good design keeps it small, so a single failure affects one region, customer or feature rather than everything.
- [Postmortem](https://collectsea.com/glossary/postmortem): A written account of an incident, covering what happened, why, what it affected and what will change, written to learn from it rather than to assign blame.

## Framework crosswalks
- [OWASP Top 10 for Agentic Applications](https://collectsea.com/frameworks/owasp-agentic-top-10): The ten most critical security risks for autonomous AI agents that plan, keep memory, call tools and act with delegated authority.
- [OWASP Top 10 for LLM Applications](https://collectsea.com/frameworks/owasp-llm-top-10): The most critical security risks for applications built on large language models.
- [NIST SP 800-53 Rev. 5 Security and Privacy Controls](https://collectsea.com/frameworks/nist-sp-800-53): The control catalog used across U.S. federal systems and widely adopted by industry.
- [NIST Secure Software Development Framework (SP 800-218)](https://collectsea.com/frameworks/nist-ssdf): Secure software development practices referenced by U.S. federal software attestation requirements.
- [NIST AI Risk Management Framework](https://collectsea.com/frameworks/nist-ai-rmf): A voluntary framework for managing risks of AI systems across design, development, deployment and use.
- [CISA Secure by Design Pledge](https://collectsea.com/frameworks/cisa-secure-by-design): Seven measurable goals software manufacturers commit to in order to make products secure by design.
- [MITRE Common Weakness Enumeration](https://collectsea.com/frameworks/cwe): The community-developed list of software and hardware weakness types.

## Documented incidents
- [Database permissions change doubles a bot-management feature file and crashes edge proxies (Cloudflare, 2025)](https://collectsea.com/incidents/SEA-POST-005): A ClickHouse access-control change made table permissions explicit, so a query without a database filter returned duplicate rows and doubled the size of the Bot Management feature file.
- [Latent race condition in DNS automation leaves DynamoDB's regional endpoint with an empty record (AWS, 2025)](https://collectsea.com/incidents/SEA-POST-017): A latent race condition in DynamoDB's DNS management system produced an empty DNS record for the regional endpoint that the automation could not repair, so clients could not resolve the endpoint.
- [Self-replicating "Shai-Hulud" worm compromises more than 500 npm packages by stealing developer tokens (2025)](https://collectsea.com/incidents/SEA-SEC-029): CISA reported that a self-replicating worm known as "Shai-Hulud" had compromised more than 500 npm packages.
- [GitHub Actions injection leaks Nx's npm token; malicious packages use local AI coding tools to hunt for secrets (2025)](https://collectsea.com/incidents/SEA-SEC-028): A pull-request title validation workflow used pullrequesttarget, which runs with repository secrets, and echoed the unsanitized PR title, creating an injection point; the workflow's token also had read/write permissions.
- [Prompt injection makes GitHub Copilot turn off its own confirmations and run commands (CVE-2025-53773)](https://collectsea.com/incidents/SEA-AI-007): Instructions planted in content the agent reads could make GitHub Copilot write "chat.tools.autoApprove": true into the project's .vscode/settings.json, which turns off all user confirmations.
- [Stolen OAuth tokens from the Salesloft Drift integration are used to export data from customers' Salesforce instances (2025)](https://collectsea.com/incidents/SEA-SEC-027): From as early as August 8 to at least August 18, 2025, an actor tracked as UNC6395 used compromised OAuth tokens of the Salesloft Drift third-party application to access customers' Salesforce instances.
- [Prompt injection in a README plus weak allow-list matching lets Gemini CLI silently run attacker commands (2025)](https://collectsea.com/incidents/SEA-AI-008): Researchers hid a prompt injection inside a README.md (in the text of a software license) so that Gemini CLI, asked only to inspect a codebase, would request shell commands.
- [AI coding agent deletes a live production database during a code freeze (Replit, 2025)](https://collectsea.com/incidents/SEA-AI-001): An AI coding agent deleted a live production database that held data on more than 1,200 executives and over 1,190 companies.
- [Malicious code committed to the Amazon Q Developer VS Code extension via a compromised token (AWS, 2025)](https://collectsea.com/incidents/SEA-AI-002): Malicious code was committed to the extension's open-source repository using a compromised GitHub token in a build configuration.
- ["ToolShell" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)](https://collectsea.com/incidents/SEA-SEC-030): Microsoft observed attackers exploiting on-premises SharePoint Server vulnerabilities (CVE-2025-53770 and CVE-2025-53771, related to CVE-2025-49704 and CVE-2025-49706) against internet-facing servers, with attempts as…
- [Dormant configuration error in legacy routing systems withdraws Cloudflare's 1.1.1.1 DNS resolver worldwide (2025)](https://collectsea.com/incidents/SEA-POST-024): A configuration change on June 6, 2025 for a not-yet-used service accidentally included the 1.1.1.1 resolver's IP prefixes in that service's topology; the error sat dormant in production.
- [Non-secret app ID lets anyone register for private apps built on the Base44 AI app builder (2025)](https://collectsea.com/incidents/SEA-AI-010): By supplying only an application's non-secret appid to undocumented registration and email-verification endpoints, an attacker could create a verified account on private applications built with Base44.
- [Hidden instructions in a support ticket make an MCP-connected assistant expose private SQL tables (Supabase MCP, 2025)](https://collectsea.com/incidents/SEA-AI-004): General Analysis showed that hidden instructions in a customer support ticket could make a developer's MCP-connected assistant query a private table of integration tokens.
- [Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)](https://collectsea.com/incidents/SEA-AI-009): McHire, the chatbot recruiting platform used by most McDonald's franchisees, lets applicants chat with a bot named Olivia, built by Paradox.ai, that collects personal information.
- [Policy change with blank fields crashes Google Cloud's Service Control in a global loop (2025)](https://collectsea.com/incidents/SEA-POST-018): A policy change containing blank fields was inserted into the quota policy system; when Service Control read it, the code path hit a null pointer and the binaries went into a crash loop.
- [EchoLeak: zero-click prompt injection lets a crafted email exfiltrate Microsoft 365 Copilot data (2025)](https://collectsea.com/incidents/SEA-AI-005): EchoLeak (CVE-2025-32711, CVSS 9.3) is a zero-click vulnerability in Microsoft 365 Copilot in which a crafted email could trigger indirect prompt injection.
- [Third-party storage outage behind Workers KV takes down many Cloudflare services (2025)](https://collectsea.com/incidents/SEA-POST-025): Workers KV relied on a central data store, partly backed by a third-party cloud provider; when that provider had an outage, cold reads and writes to KV failed.
- [Unplanned automatic OS update cuts networking for Heroku apps and its own status tools (2025)](https://collectsea.com/incidents/SEA-POST-026): An automated operating-system update ran on production hosts when it should have been disabled, and restarted their networking service.
- [Prompt injection in a public GitHub issue makes an MCP-connected agent leak private repository data (2025)](https://collectsea.com/incidents/SEA-AI-003): Invariant Labs showed that a malicious instruction placed in an issue on a public repository could be read by an agent connected through the GitHub MCP server.
- [Faulty Channel File 291 content update crashes Windows hosts running CrowdStrike Falcon (2024)](https://collectsea.com/incidents/SEA-SEC-003): Rapid deployment channel 291 bypassed staged canary rings; out-of-bounds memory read triggered BSOD on 8.5M Windows hosts.
- [Ransomware shuts down CDK Global's dealer-management platform for about 15,000 dealerships (2024)](https://collectsea.com/incidents/SEA-SEC-014): Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.
- [Blank provisioning parameter leads to automatic deletion of a customer's private cloud (UniSuper / Google Cloud, 2024)](https://collectsea.com/incidents/SEA-POST-004): An input parameter was left blank in an internal provisioning tool, so the system assigned an unknown default fixed one-year term to the customer's VMware Private Cloud.
- [Call and text records of nearly all AT&T wireless customers taken from a third-party cloud workspace (2024)](https://collectsea.com/incidents/SEA-SEC-008): Contractor credentials without MFA accessed third-party cloud data warehouse; downloaded 109 million customer call and text records.
- [Stolen credentials on a remote-access portal lead to the Change Healthcare ransomware outage (2024)](https://collectsea.com/incidents/SEA-SEC-002): Single-factor remote access portal breached with stolen credentials; ransomware forced nationwide claims gateway disconnection.
- [Airline held liable when its website chatbot gave wrong bereavement-fare advice (Moffatt v. Air Canada, 2024)](https://collectsea.com/incidents/SEA-AI-006): A customer relied on Air Canada's website chatbot, which told him he could apply for a bereavement fare retroactively; the airline's policy did not allow that.
- [Password spray on a legacy test tenant exposes Microsoft corporate email to a nation-state actor (2024)](https://collectsea.com/incidents/SEA-SEC-001): Legacy test tenant without MFA compromised via password spraying; adversary created malicious OAuth apps with mail.read privileges.
- [Stolen credential opens Okta's support system, where uploaded HAR files held customer session tokens (2023)](https://collectsea.com/incidents/SEA-SEC-006): Support portal allowed unredacted HAR file uploads containing session tokens; threat actor hijacked customer administrator accounts.
- [Cyberattack disrupts Johnson Controls' internal IT infrastructure (2023)](https://collectsea.com/incidents/SEA-SEC-012): Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.
- [Help-desk social engineering leads to ransomware and a systems shutdown at MGM Resorts (2023)](https://collectsea.com/incidents/SEA-SEC-004): Social engineering of IT helpdesk reset admin credentials; ransomware deployed directly to ESXi hypervisors shutting down resort operations.
- [Cyberattack takes Clorox IT systems offline and forces manual order processing (2023)](https://collectsea.com/incidents/SEA-SEC-005): Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.
- [SQL injection in MOVEit Transfer exploited by the CL0P ransomware gang (2023)](https://collectsea.com/incidents/SEA-SEC-025): CISA and the FBI report that the CL0P ransomware gang exploited a SQL injection vulnerability (CVE-2023-34362) in Progress MOVEit Transfer beginning May 27, 2023, installing a web shell called LEMURLOOT.
- [GitHub's RSA SSH host private key briefly exposed in a public repository (2023)](https://collectsea.com/incidents/SEA-POST-008): GitHub.com's RSA SSH private key was briefly exposed in a public GitHub repository.
- [Attack on a senior DevOps engineer's computer leads to theft of cloud backups (LastPass, 2022-2023)](https://collectsea.com/incidents/SEA-SEC-024): LastPass said an attacker exploited vulnerable third-party software to target a senior DevOps engineer.
- [Malware steals an engineer's SSO session and exposes CircleCI customer secrets (2023)](https://collectsea.com/incidents/SEA-POST-011): Malware on an engineer's laptop stole a valid two-factor-backed SSO session, letting the attacker impersonate the employee and reach a subset of production systems.
- [Phishing impersonating a CI vendor yields GitHub credentials and 130 source-code repositories (Dropbox, 2022)](https://collectsea.com/incidents/SEA-SEC-017): Phishing emails impersonating CircleCI led an employee to a fake page where GitHub credentials and a one-time code were captured, giving the attacker access to a GitHub organization and 130 code repositories.
- [MFA fatigue against a contractor gives an attacker access to Uber's internal tools (2022)](https://collectsea.com/incidents/SEA-SEC-021): An attacker likely bought a contractor's corporate password on the dark web after malware infected the contractor's personal device, then repeatedly sent two-factor approval requests until the contractor accepted one.
- [SMS phishing of employees leads to compromise of Twilio customer accounts (2022)](https://collectsea.com/incidents/SEA-SEC-016): Attackers used SMS phishing to fool some Twilio employees into giving up credentials, then used them to access internal systems and information about a limited number of customer accounts.
- [Privilege escalation and a certificate-validation flaw allow cross-account database access (Azure PostgreSQL "ExtraReplica", 2022)](https://collectsea.com/incidents/SEA-POST-007): Researchers exploited a bug in Azure's modified PostgreSQL engine to gain superuser privileges and run operating-system commands on their own database instance.
- [Stolen OAuth tokens from two integrators are used to download private repositories (Heroku and Travis CI, 2022)](https://collectsea.com/incidents/SEA-SEC-023): GitHub found an attacker abusing stolen OAuth user tokens that had been issued to two third-party integrators, Heroku and Travis CI.
- [Deletion script given site IDs instead of app IDs removes 775 customers' sites (Atlassian, 2022)](https://collectsea.com/incidents/SEA-POST-010): A script meant to retire a deprecated app was given IDs for entire customer sites and did not check whether an ID referred to the app or the whole site.
- [Log4Shell: remote code execution through JNDI lookups in Apache Log4j (2021)](https://collectsea.com/incidents/SEA-SEC-026): CVE-2021-44228 (Log4Shell) affects Apache Log4j 2.0-beta9 through 2.14.1 and lets an unauthenticated remote actor execute arbitrary code through JNDI lookups.
- [Zillow winds down its algorithmic home-buying business after price forecasts miss (2021)](https://collectsea.com/incidents/SEA-SEC-011): Machine learning pricing models drifted during market volatility; automated purchasing bought homes above value resulting in $540M inventory write-down.
- [New Consul streaming feature under heavy load and a BoltDB issue cause a 73-hour outage (Roblox, 2021)](https://collectsea.com/incidents/SEA-POST-023): Enabling a relatively new streaming feature in Consul under unusually high read and write load caused excessive contention, compounded by a pathological performance issue in BoltDB when handling large writes.
- [Backbone maintenance command disconnects Facebook's data centers and locks out recovery tooling (Meta, 2021)](https://collectsea.com/incidents/SEA-POST-019): A command issued to assess global backbone capacity unintentionally took down all the connections in Facebook's backbone network.
- [Valid customer configuration change triggers a latent software bug across a CDN (Fastly, 2021)](https://collectsea.com/incidents/SEA-POST-006): A software deployment on May 12, 2021 introduced a bug that a specific valid customer configuration could trigger; on June 8 a customer pushed such a change.
- [Holiday traffic surge overloads a Transit Gateway and stalls autoscaling provisioning (Slack, 2021)](https://collectsea.com/incidents/SEA-POST-022): After the holidays, an unusual surge of traffic from clients with cold caches overloaded one of Slack's AWS Transit Gateways.
- [Retail broker failed best-execution reviews while taking high payment for order flow (Robinhood, SEC 2020)](https://collectsea.com/incidents/SEA-REG-003): From July 2016 to June 2019 the broker received high payment for order flow but did not conduct adequate, regular and rigorous reviews of execution quality on customer orders.
- [SUNBURST: a backdoor inserted into SolarWinds Orion builds reaches customers (2020)](https://collectsea.com/incidents/SEA-SEC-010): Compromised build server injected SUNBURST malware into compiler memory during build process; distributed to 18,000 customers.
- [Confusing loan-system interface leads Citibank to wire nearly $900 million in principal to Revlon lenders (2020)](https://collectsea.com/incidents/SEA-REG-001): Unintuitive Flexcube interface required checking obscure override box; bank accidentally wired $894M of proprietary funds to Revlon lenders.
- [Phone spear-phishing gives attackers Twitter's internal support tools; 130 accounts targeted (2020)](https://collectsea.com/incidents/SEA-SEC-020): A phone spear-phishing attack on a small number of employees gave attackers credentials to internal support tools on July 15, 2020.
- [Capital One cloud breach and an $80 million OCC penalty for weak cloud-migration risk assessment (2019)](https://collectsea.com/incidents/SEA-REG-002): The OCC assessed an $80 million civil money penalty against Capital One for failing to establish effective risk assessment processes before migrating significant IT operations to the public cloud and for not correcting…
- [Regular expression in a WAF rule exhausts CPU on every edge server (Cloudflare, 2019)](https://collectsea.com/incidents/SEA-POST-021): A new WAF managed rule for XSS detection contained a regular expression that caused catastrophic backtracking and exhausted CPU.
- [Missing access checks in a document portal expose over 800 million First American images (2019)](https://collectsea.com/incidents/SEA-SEC-009): Sequential integer URLs in imaging web portal lacked object-level authorization checks; exposed 885 million escrow and wire documents.
- [Access to the Starwood reservation network since 2014 exposes Marriott guest records (2018)](https://collectsea.com/incidents/SEA-SEC-015): Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.
- [43-second network partition triggers database failover and unreplicated writes (GitHub, 2018)](https://collectsea.com/incidents/SEA-POST-020): Network maintenance caused a 43-second loss of connectivity between GitHub's US East Coast hub and its primary data center, which led to 24 hours and 11 minutes of degraded service.
- [Unpatched web-application vulnerability (Apache Struts) leads to the Equifax breach (2017)](https://collectsea.com/incidents/SEA-SEC-013): Apache Struts CVE-2017-5638 parser bug left unpatched for 2 months; attackers executed arbitrary commands and accessed unencrypted databases of 147M Americans.
- [Mistyped input to a capacity-removal command takes down S3 in us-east-1 (AWS, 2017)](https://collectsea.com/incidents/SEA-POST-016): An engineer ran a command meant to remove a small number of servers from an S3 subsystem, but one input was entered incorrectly and more capacity was removed than intended.
- [Design reference: idempotency keys make retried payment API calls safe (Stripe)](https://collectsea.com/incidents/SEA-POST-001): Stripe explains that a client which cannot tell whether a request succeeded (for example after a network failure) needs to retry safely, and that without protection a retried charge could double-charge a customer.
- [Engineer deletes the production database directory and every backup method fails (GitLab, 2017)](https://collectsea.com/incidents/SEA-POST-009): While working on replication, an engineer ran a data-directory deletion on the production database server instead of the secondary, removing about 300 GB before stopping it.
- [AWS access key in a private GitHub repository leads to 57 million rider and driver records taken (Uber, 2016)](https://collectsea.com/incidents/SEA-SEC-022): Between October 13 and November 15, 2016, intruders used an AWS access key that had been posted to a private GitHub repository to access Uber's Amazon S3 datastore.
- [Major entertainment company hit by an SMB worm with destructive wiper components (2014)](https://collectsea.com/incidents/SEA-SEC-018): US-CERT alert TA14-353A describes an SMB worm tool used against a major entertainment company that spreads by brute-forcing Windows SMB shares.
- [Payment card data for about 40 million accounts taken from Target's U.S. stores (2013)](https://collectsea.com/incidents/SEA-SEC-019): HVAC vendor portal credentials lacked two-factor authentication; attackers pivoted into internal networks and pushed BlackPOS memory scrapers to 1,800 checkout terminals.
- [Repurposed flag and an incomplete deployment send runaway orders from Knight Capital's router (2012)](https://collectsea.com/incidents/SEA-SEC-007): Repurposed test flag on 1 of 8 servers activated legacy Power Peg loop; bought 4M shares in 45 minutes losing $460M.
- [Layering algorithm places and cancels large E-mini S&P 500 orders around the 2010 Flash Crash](https://collectsea.com/incidents/SEA-REG-004): The CFTC alleged a layering algorithm automatically placed four to six very large sell orders in the E-mini S&P 500 order book and cancelled them without execution.
- [Design reference: AWS guidance on timeouts, retries and backoff with jitter](https://collectsea.com/incidents/SEA-POST-002): AWS describes retries as powerful but dangerous: when a dependency is struggling, too many retries can amplify load and turn a partial failure into a retry storm.

## Recent company incident filings (SEC Form 8-K, Item 1.05)
- [Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, October 2026)](https://collectsea.com/incidents/SEA-8K-0001104659-26-115541): As previously reported, on August 28, 2026 , Park Dental Partners, Inc. (“Company”) identified unauthorized access to its computer network.
- [Astrana Health, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, September 2026)](https://collectsea.com/incidents/SEA-8K-0001104659-26-109813): Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment.
- [Boston Scientific Corp discloses a cybersecurity incident (SEC 8-K, September 2026)](https://collectsea.com/incidents/SEA-8K-0000885725-26-000059): As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity…
- [Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, September 2026)](https://collectsea.com/incidents/SEA-8K-0001104659-26-104300): On August 28, 2026 , Park Dental Partners, Inc. (“we” or the “Company”) identified unauthorized access to its computer network.
- [Nutex Health Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, August 2026)](https://collectsea.com/incidents/SEA-8K-0001628280-26-059602): As disclosed in Item 8.01 of a Current Report on Form 8-K filed with the Securities and Exchange Commission on August 24, 2026 (the “Prior 8-K”), Nutex Health Inc.
- [Amgen Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2026)](https://collectsea.com/incidents/SEA-8K-0000318154-26-000119): In July 2026, Amgen Inc. (the "Company") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers.
- [AdaptHealth Corp. discloses a cybersecurity incident involving social engineering (SEC 8-K, July 2026)](https://collectsea.com/incidents/SEA-8K-0001104659-26-080297): AdaptHealth Corp. (the “Company”) is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom.
- [Navient Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, July 2026)](https://collectsea.com/incidents/SEA-8K-0001140361-26-027441): On June 8, 2026, the Company became aware of a cybersecurity incident involving a third party law firm (the “Firm”) that provides services to the Company.
- [River Financial Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, June 2026)](https://collectsea.com/incidents/SEA-8K-0001193125-26-282946): On or about June 16, 2026, an unauthorized threat actor gained access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”).
- [8x8 Inc /de/ discloses a cybersecurity incident with data taken without authorization (SEC 8-K, June 2026)](https://collectsea.com/incidents/SEA-8K-0001023731-26-000084): On June 13, 2026, 8x8, Inc. (the “ Company ” or “ we” ) was informed that an unauthorized third party threat actor exploited the Klue Labs, Inc.
- [iRhythm Holdings, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, June 2026)](https://collectsea.com/incidents/SEA-8K-0001388658-26-000055): On June 8, 2026, iRhythm Holdings, Inc. (the “Company”) identified unauthorized activity involving data maintained on certain third-party-hosted business applications.
- [Oncology Institute, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)](https://collectsea.com/incidents/SEA-8K-0001079973-26-000721): The Oncology Institute, Inc. (the “Company”) is providing this disclosure, as a follow-up to its voluntary disclosure in Item 7.01 of a Current Report on Form 8-K filed on November 6, 2025, regarding a cybersecurity…
- [CB Financial Services, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)](https://collectsea.com/incidents/SEA-8K-0001605301-26-000021): On May 5, 2026, Community Bank (the “Bank”), the wholly-owned subsidiary of CB Financial Services, Inc. (the “Company”), became aware of an internal incident involving the handling of certain non public customer…
- [West Pharmaceutical Services Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2026)](https://collectsea.com/incidents/SEA-8K-0000105770-26-000068): On May 7, 2026, West Pharmaceutical Services, Inc. (the “Company”) determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain…
- [Bitcoin Depot Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2026)](https://collectsea.com/incidents/SEA-8K-0001193125-26-147772): On March 23, 2026, Bitcoin Depot Inc. (the “Company”) discovered that an unauthorized party gained access to certain of its information technology systems.
- [CareCloud, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, March 2026)](https://collectsea.com/incidents/SEA-8K-0001493152-26-013239): On March 16, 2026, CareCloud, Inc. (the “Company”) experienced a temporary network disruption in its CareCloud Health division that partially impacted the functionality and data access to 1 of its 6 electronic health…
- [Trio-tech International discloses a cybersecurity incident involving ransomware (SEC 8-K, March 2026)](https://collectsea.com/incidents/SEA-8K-0001437749-26-009193): On March 11, 2026, Trio-Tech International (“Company”) identified and responded to a cybersecurity incident in one of its subsidiaries (“subsidiary”) in Singapore.
- [Ufp Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2026)](https://collectsea.com/incidents/SEA-8K-0001628280-26-011152): On or about February 14, 2026, UFP Technologies, Inc. (the “Company”) detected suspicious activity involving its information technology (“IT”) systems.
- [Coupang, Inc. discloses a cybersecurity incident (SEC 8-K, December 2025)](https://collectsea.com/incidents/SEA-8K-0001834584-25-000196): On November 18, 2025, Coupang Corp. (“Coupang Corp.”), a wholly-owned Korean subsidiary of Coupang, Inc. (Coupang Corp., together with Coupang, Inc.
- [BayFirst Financial Corp. discloses a cybersecurity incident (SEC 8-K, October 2025)](https://collectsea.com/incidents/SEA-8K-0001649739-25-000246): Cybersecurity Incidents On August 14, 2025, BayFirst National Bank (“BayFirst”) was notified of a cybersecurity incident experienced by a third-party provider of marketing services.
- [Jewett Cameron Trading Co Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)](https://collectsea.com/incidents/SEA-8K-0001079973-25-001631): Ltd. (the “Company”) learned that a threat actor had gained unauthorized access to portions of the Company’s information technology (“IT”) environment and claimed to have unlawfully accessed certain Company information…
- [F5, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)](https://collectsea.com/incidents/SEA-8K-0001048695-25-000149): On August 9, 2025, F5, Inc. (the “Company”, “F5”, “we”, or “our”) learned that a highly sophisticated nation-state threat actor had gained unauthorized access to certain Company systems.
- [Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, September 2025)](https://collectsea.com/incidents/SEA-8K-0001654954-25-010613): As previously disclosed on August 21, 2025 in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”), on August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware…
- [Wytec International Inc discloses a cybersecurity incident (SEC 8-K, August 2025)](https://collectsea.com/incidents/SEA-8K-0001683168-25-006583): On August 25, 2025 , Wytec International, Inc. (the “Company”) became aware of a cybersecurity incident in which a bad actor published a defaced website at the Company’s web address, wytecintl.com.
- [Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, August 2025)](https://collectsea.com/incidents/SEA-8K-0001654954-25-009925): On August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware incident (the “Incident”) on certain of its internal IT systems.

## About
- [About and roadmap](https://collectsea.com/about)
- [Methodology and evaluation](https://collectsea.com/methodology)
- [Impact and usage](https://collectsea.com/impact)