The verified record of OT cyber incidents.
What actually happened when cyberattacks reached water systems, pipelines, factories, power grids, food producers and ports. What is verified, what is only reported, and what is still unknown.
01 Anniversaries
The record remembers.
The most recent anniversary and the next one coming up, counted from today's date. Each is dated from the file's own Discovered field.
02 The record in numbers
Fifty incidents. Every line sourced.
Hackopedia grades every claim as verified, reported or undisclosed, cites its sources, and lists the widely repeated claims the record does not support, including errors in our own first volume.
Verified
Traced to a court record, regulator filing, sworn testimony or the operator's own dated statement.
Reported
Said by a named publication or researcher, and labelled as theirs, not as fact.
Undisclosed
Not on any public record. We print the gap instead of filling it.
03 Six editions
Start with your sector.
Each edition lists its incidents, the claims the headlines got wrong, and BlastWave's analysis of the pattern. The red bars mark incidents per year, 2012 to 2026.
04 2012 → 2026
Fourteen years of attacks on physical operations.
05 The full index
All 50 files.
The status column says how far the public record goes, not how serious the incident was. Click a column to sort.
Method
Where the record says less than the headlines, we print the record.
Every figure, date and quotation traces to a primary or named source. Pages are re-verified when new filings, rulings or official statements appear, and every change is logged.
Why Hackopedia exists