Top Cyber Attacks of May 2022

**Executive summary:** A May 2022 roundup documents a series of phishing-driven incidents and one attempted ransomware event that disrupted operations and exposed personal and vendor data — notable cases include an attempted ransomware disruption at SpiceJet, phishing breaches affecting a Canadian school district and Elgin County employees, a DoD vendor payment diversion that resulted in over $23M in fraud, and a Spirit Super phishing incident impacting ~50,000 pension members; the write-up focuses on impact, records exposed, and organizational responses rather than in-depth technical indicators.