2026 Cyberattacks Target Critical Infrastructure and Data Breaches

In 2026 threat actors shifted from data theft to operational disruption: Russian-linked attacks targeted energy and water systems across Poland, Sweden, and Norway, Iranian-linked actors caused device-wipe disruption at Stryker, and cybercriminals (ShinyHunters) exfiltrated data from the Canvas platform while a major U.S. Social Security data exposure occurred via an unprotected third-party server; the report warns of supply-chain backdoors and vishing and recommends urgent audits, cloud/third-party security hardening, patching, and enhanced infrastructure defenses.