--- title: Research | Anatomy of a Breach (5) description: "Anatomy of a Breach | The average device connected to the internet is hit by 17 automated attacks a day, 365 days a year.\n\nThe majority of hacked servers, networks and workstations go undetected for months or more. \nAntivirus software and firewalls cannot protect you from a targeted attack. (5)" --- [![Reflare home](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=421&height=150&name=reflare%20logo.png "Reflare home")](https://reflare.com) [![logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/logo.png?width=262&height=82&name=logo.png "logo")](https://reflare.com/act3) [![reflare logo](https://reflare.com/hs-fs/hubfs/Reflare%20website%20images/Reflare%20Logos/reflare%20logo.png?width=168&height=60&name=reflare%20logo.png "reflare logo")](https://reflare.com/act3) - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Login](https://reflare.com/login) [Buy Now](https://www.hubspot.com/) [Login](https://www.hubspot.com/)Login to your Reflare account - [Galena](https://reflare.com/galena) - [Galena Overview](https://reflare.com/galena) - [Galena for Tech Teams](https://reflare.com/technical-teams) - [Galena for L&D Teams](https://reflare.com/learning-development) - [Galena Security and Deployment](https://reflare.com/security-deployment) - Training - [Capture the Flag](https://reflare.com/rctf-reflare-capture-the-flag) - [Developers](https://reflare.com/rcsd) - [Administrators](https://reflare.com/rcsa) - [PCI DSS](https://reflare.com/rcsd) - Audit - [PCI DSS](https://reflare.com/pcidss) - [PCI 3DS](https://reflare.com/pci3ds) - [PCI PIN](https://reflare.com/pcipin) - [PCI DSS ASV](https://reflare.com/pcidssasv) - [Penetration Testing](https://reflare.com/penetration) - [Vulnerability Scanning](https://reflare.com/vulnerability) - [Advisory and Management](https://reflare.com/advisory) - [Research](https://reflare.com/research) - [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) - [High Tech](https://reflare.com/research/tag/high-tech) - [Infosec Culture](https://reflare.com/research/tag/infosec-culture) - [Infrastructure](https://reflare.com/research/tag/infrastructure) - [Normal People and Infosec](https://reflare.com/research/tag/normal-people-and-infosec) - [WTFWIB](https://whythefuckwasibreached.com/) - [About](https://reflare.com/about) - [Contact](https://reflare.com/contact) - [Company](https://reflare.com/about) - [Careers](https://reflare.com/careers) - [Service Status](https://statuspage.reflare.com/) - [日本語](https://jp.reflare.com/) [Buy Now](https://www.hubspot.com/) # Research / Anatomy of a Breach (5) ## [Delta, Sears and 3rd Party Risks](https://reflare.com/research/delta-sears-and-3rd-party-risks) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Apr 6, 2018, 2:07:00 PM [![Delta, Sears and 3rd Party Risks](https://reflare.com/hubfs/Blog%20image%20in%20post/Delta%2c%20Sears%20and%203rd%20Party%20Risks.png)](https://reflare.com/research/delta-sears-and-3rd-party-risks) The attack allowed hackers to access thousands of customer support chat transcripts, internal documents and support system configuration files, as well as logs of their external communications. First Published 6th April 2018 "All your data are belong to us." 4 min read | Reflare Resea … [Read Story](https://reflare.com/research/delta-sears-and-3rd-party-risks) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [How Small Issues Escalate - An Update on the German Governmental Hack](https://reflare.com/research/how-small-issues-escalate-an-update-on-the-german-governmental-hack) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Mar 9, 2018, 1:59:00 PM [![How Small Issues Escalate - An Update on the German Governmental Hack](https://reflare.com/hubfs/Blog%20image%20in%20post/How%20Small%20Issues%20Escalate%20-%20An%20Update%20on%20the%20German%20Governmental%20Hack%20.png)](https://reflare.com/research/how-small-issues-escalate-an-update-on-the-german-governmental-hack) A cached version of the installation of the ILIAS e-learning system might have allowed hackers access to sensitive information and allowed them to impersonate staff members and perform actions on their behalf. First Published 9th March 2018 From little things, big things wachsen. 4 mi … [Read Story](https://reflare.com/research/how-small-issues-escalate-an-update-on-the-german-governmental-hack) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [Cyber-Attacks hit German Governmental Network](https://reflare.com/research/cyber-attacks-hit-german-governmental-network) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Mar 2, 2018, 1:57:00 PM [![Cyber-Attacks hit German Governmental Network](https://reflare.com/hubfs/Blog%20image%20in%20post/Cyber-Attacks%20hit%20German%20Governmental%20Network.png)](https://reflare.com/research/cyber-attacks-hit-german-governmental-network) German officials have confirmed a major security breach at a government network, but they are not revealing any additional information or the nature of the attack, even though different media agencies are reporting wildly different versions of what happened. First Published 2nd March … [Read Story](https://reflare.com/research/cyber-attacks-hit-german-governmental-network) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [Attackers are Humans Too - On Stealing $24](https://reflare.com/research/attackers-are-humans-too-on-stealing-24) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Feb 16, 2018, 1:55:00 PM [![](https://reflare.com/hubfs/Blog%20image%20in%20post/Attackers%20are%20Humans%20Too%20-%20On%20Stealing%20$24.png)](https://reflare.com/research/attackers-are-humans-too-on-stealing-24) What do you do when you successfully attack a service designed to help the vision impaired interact with over 5,000 websites? Mine $24 worth of Monero, of course (duh!) First Published 16th February 2018 "Now that I've finally managed to break in, I'll just take this." 4 min read | Re … [Read Story](https://reflare.com/research/attackers-are-humans-too-on-stealing-24) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [NiceHash Hack](https://reflare.com/research/nicehash-hack) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Dec 8, 2017, 7:02:00 PM [![](https://reflare.com/hubfs/Blog%20image%20in%20post/NiceHash%20Hack.png)](https://reflare.com/research/nicehash-hack) NiceHash, a Slovenian company that allows users to mine virtual currencies for themselves or for others suffered a hack which led to tens of millions of dollars worth of Bitcoin being stolen. First Published 8th December 2017 While demand continues to grow, crypto platforms are strugg … [Read Story](https://reflare.com/research/nicehash-hack) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [Malaysian Data Breach](https://reflare.com/research/malaysian-data-breach) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Nov 2, 2017, 6:53:00 PM [![Malaysian Data Breach](https://reflare.com/hubfs/Blog%20image%20in%20post/Malaysian%20Data%20Breach.png)](https://reflare.com/research/malaysian-data-breach) With a current population of roughly 32 million people, this means that the private data of virtually every Malaysian citizen has been compromised - an alarming amount of personal information now vulnerable to identity fraud. First Published 2nd November 2017 Everything you ever wante … [Read Story](https://reflare.com/research/malaysian-data-breach) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [Deloitte Breach](https://reflare.com/research/deloitte-breach) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Sep 29, 2017, 6:46:00 PM [![](https://reflare.com/hubfs/Blog%20image%20in%20post/Deloitte%20Breach.png)](https://reflare.com/research/deloitte-breach) The hacking attack on Deloitte is the latest in a disturbing trend of hacking attacks against large organisations whose email services use Microsoft’s Office 365 system. First Published 29th September 2017 Maybe they could bring in some consultants? 4 min read | Reflare Research Team … [Read Story](https://reflare.com/research/deloitte-breach) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [Equifax and Apache Struts](https://reflare.com/research/equifax-and-apache-struts) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Sep 27, 2017, 6:42:00 PM [![Equifax and Apache Struts](https://reflare.com/hubfs/Blog%20image%20in%20post/Equifax%20and%20Apache%20Struts.png)](https://reflare.com/research/equifax-and-apache-struts) The vulnerability allows anyone who knows it exists to remotely execute arbitrary commands on servers using default installations of Apache Struts and Java, leaving sensitive data exposed without authentication. First Published 15th September 2017 | Latest Refresh 27th September 2017 … [Read Story](https://reflare.com/research/equifax-and-apache-struts) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [SEC Breach](https://reflare.com/research/sec-breach) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Sep 22, 2017, 6:45:00 PM [![](https://reflare.com/hubfs/Blog%20image%20in%20post/SEC%20Breach.png)](https://reflare.com/research/sec-breach) “The EDGAR system was taken offline while the intrusion was being investigated and immediate steps were taken to enhance cybersecurity monitoring,” the agency said... a year later. First Published 22nd September 2017 The Insecurities and Exchange Commission. 3 min read | Reflare Resea … [Read Story](https://reflare.com/research/sec-breach) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) ## [Pacemakers Recalled Over Hacking Concerns](https://reflare.com/research/pacemakers-recalled-over-hacking-concerns) by [**Reflare Research Team**](https://reflare.com/research/author/reflare-research-team) on Sep 11, 2017, 6:38:00 PM [![Pacemakers Recalled Over Hacking Concerns](https://reflare.com/hubfs/Blog%20image%20in%20post/Pacemakers%20Recalled%20Over%20Hacking%20Concerns.png)](https://reflare.com/research/pacemakers-recalled-over-hacking-concerns) We have traditionally been good at patching software when vulnerabilities are discovered – but this becomes harder for embedded devices such as pacemakers because they cannot be independently updated. First Published 1st September 2017 At some point in every person's life, an assisted … [Read Story](https://reflare.com/research/pacemakers-recalled-over-hacking-concerns) Topics: [Anatomy of a Breach](https://reflare.com/research/tag/anatomy-of-a-breach) [2](https://reflare.com/research/tag/anatomy-of-a-breach/page/2) [3](https://reflare.com/research/tag/anatomy-of-a-breach/page/3) [4](https://reflare.com/research/tag/anatomy-of-a-breach/page/4) [5](https://reflare.com/research/tag/anatomy-of-a-breach/page/5) [6](https://reflare.com/research/tag/anatomy-of-a-breach/page/6) - Recent - Topics - Archive Recent Topics - [Infosec Culture (113)](https://reflare.com/research/tag/infosec-culture) - [Anatomy of a Breach (60)](https://reflare.com/research/tag/anatomy-of-a-breach) - [Normal People and Infosec (42)](https://reflare.com/research/tag/normal-people-and-infosec) - [High Tech (33)](https://reflare.com/research/tag/high-tech) - [Infrastructure (21)](https://reflare.com/research/tag/infrastructure) - [Capture the Flag (8)](https://reflare.com/research/tag/capture-the-flag) See all Archive - [September 2026 (1)](https://reflare.com/research/archive/2026/09) - [August 2026 (1)](https://reflare.com/research/archive/2026/08) - [June 2026 (1)](https://reflare.com/research/archive/2026/06) - [May 2026 (1)](https://reflare.com/research/archive/2026/05) - [April 2026 (1)](https://reflare.com/research/archive/2026/04) - [March 2026 (1)](https://reflare.com/research/archive/2026/03) - [February 2026 (1)](https://reflare.com/research/archive/2026/02) - [January 2026 (1)](https://reflare.com/research/archive/2026/01) - [December 2025 (1)](https://reflare.com/research/archive/2025/12) - [November 2025 (1)](https://reflare.com/research/archive/2025/11) - [October 2025 (1)](https://reflare.com/research/archive/2025/10) - [September 2025 (1)](https://reflare.com/research/archive/2025/09) - [August 2025 (1)](https://reflare.com/research/archive/2025/08) - [July 2025 (1)](https://reflare.com/research/archive/2025/07) - [June 2025 (1)](https://reflare.com/research/archive/2025/06) - [May 2025 (1)](https://reflare.com/research/archive/2025/05) - [April 2025 (1)](https://reflare.com/research/archive/2025/04) - [March 2025 (1)](https://reflare.com/research/archive/2025/03) - [February 2025 (1)](https://reflare.com/research/archive/2025/02) - [January 2025 (1)](https://reflare.com/research/archive/2025/01) - [December 2024 (1)](https://reflare.com/research/archive/2024/12) - [November 2024 (1)](https://reflare.com/research/archive/2024/11) - [October 2024 (1)](https://reflare.com/research/archive/2024/10) - [September 2024 (1)](https://reflare.com/research/archive/2024/09) - [August 2024 (1)](https://reflare.com/research/archive/2024/08) - [July 2024 (1)](https://reflare.com/research/archive/2024/07) - [June 2024 (1)](https://reflare.com/research/archive/2024/06) - [April 2024 (2)](https://reflare.com/research/archive/2024/04) - [February 2024 (1)](https://reflare.com/research/archive/2024/02) - [January 2024 (1)](https://reflare.com/research/archive/2024/01) - [December 2023 (1)](https://reflare.com/research/archive/2023/12) - [November 2023 (1)](https://reflare.com/research/archive/2023/11) - [October 2023 (1)](https://reflare.com/research/archive/2023/10) - [September 2023 (1)](https://reflare.com/research/archive/2023/09) - [August 2023 (1)](https://reflare.com/research/archive/2023/08) - [July 2023 (1)](https://reflare.com/research/archive/2023/07) - [June 2023 (2)](https://reflare.com/research/archive/2023/06) - [May 2023 (2)](https://reflare.com/research/archive/2023/05) - [April 2023 (3)](https://reflare.com/research/archive/2023/04) - [March 2023 (4)](https://reflare.com/research/archive/2023/03) - [February 2023 (3)](https://reflare.com/research/archive/2023/02) - [January 2023 (5)](https://reflare.com/research/archive/2023/01) - [December 2022 (1)](https://reflare.com/research/archive/2022/12) - [November 2022 (2)](https://reflare.com/research/archive/2022/11) - [October 2022 (1)](https://reflare.com/research/archive/2022/10) - [September 2022 (11)](https://reflare.com/research/archive/2022/09) - [August 2022 (5)](https://reflare.com/research/archive/2022/08) - [July 2022 (1)](https://reflare.com/research/archive/2022/07) - [May 2022 (3)](https://reflare.com/research/archive/2022/05) - [April 2022 (1)](https://reflare.com/research/archive/2022/04) - [February 2022 (4)](https://reflare.com/research/archive/2022/02) - [January 2022 (3)](https://reflare.com/research/archive/2022/01) - [December 2021 (2)](https://reflare.com/research/archive/2021/12) - [November 2021 (3)](https://reflare.com/research/archive/2021/11) - [October 2021 (2)](https://reflare.com/research/archive/2021/10) - [September 2021 (1)](https://reflare.com/research/archive/2021/09) - [August 2021 (1)](https://reflare.com/research/archive/2021/08) - [June 2021 (1)](https://reflare.com/research/archive/2021/06) - [May 2021 (14)](https://reflare.com/research/archive/2021/05) - [February 2021 (1)](https://reflare.com/research/archive/2021/02) - [October 2020 (1)](https://reflare.com/research/archive/2020/10) - [September 2020 (1)](https://reflare.com/research/archive/2020/09) - [July 2020 (1)](https://reflare.com/research/archive/2020/07) - [June 2020 (1)](https://reflare.com/research/archive/2020/06) - [May 2020 (1)](https://reflare.com/research/archive/2020/05) - [April 2020 (2)](https://reflare.com/research/archive/2020/04) - [March 2020 (1)](https://reflare.com/research/archive/2020/03) - [February 2020 (1)](https://reflare.com/research/archive/2020/02) - [January 2020 (3)](https://reflare.com/research/archive/2020/01) - [December 2019 (1)](https://reflare.com/research/archive/2019/12) - [November 2019 (2)](https://reflare.com/research/archive/2019/11) - [October 2019 (3)](https://reflare.com/research/archive/2019/10) - [September 2019 (5)](https://reflare.com/research/archive/2019/09) - [August 2019 (2)](https://reflare.com/research/archive/2019/08) - [July 2019 (3)](https://reflare.com/research/archive/2019/07) - [June 2019 (3)](https://reflare.com/research/archive/2019/06) - [May 2019 (2)](https://reflare.com/research/archive/2019/05) - [April 2019 (3)](https://reflare.com/research/archive/2019/04) - [March 2019 (2)](https://reflare.com/research/archive/2019/03) - [February 2019 (3)](https://reflare.com/research/archive/2019/02) - [January 2019 (1)](https://reflare.com/research/archive/2019/01) - [December 2018 (3)](https://reflare.com/research/archive/2018/12) - [November 2018 (5)](https://reflare.com/research/archive/2018/11) - [October 2018 (4)](https://reflare.com/research/archive/2018/10) - [September 2018 (3)](https://reflare.com/research/archive/2018/09) - [August 2018 (3)](https://reflare.com/research/archive/2018/08) - [July 2018 (4)](https://reflare.com/research/archive/2018/07) - [June 2018 (4)](https://reflare.com/research/archive/2018/06) - [May 2018 (2)](https://reflare.com/research/archive/2018/05) - [April 2018 (4)](https://reflare.com/research/archive/2018/04) - [March 2018 (5)](https://reflare.com/research/archive/2018/03) - [February 2018 (3)](https://reflare.com/research/archive/2018/02) - [January 2018 (3)](https://reflare.com/research/archive/2018/01) - [December 2017 (2)](https://reflare.com/research/archive/2017/12) - [November 2017 (4)](https://reflare.com/research/archive/2017/11) - [October 2017 (3)](https://reflare.com/research/archive/2017/10) - [September 2017 (5)](https://reflare.com/research/archive/2017/09) - [August 2017 (3)](https://reflare.com/research/archive/2017/08) - [July 2017 (3)](https://reflare.com/research/archive/2017/07) - [June 2017 (4)](https://reflare.com/research/archive/2017/06) - [May 2017 (4)](https://reflare.com/research/archive/2017/05) - [April 2017 (2)](https://reflare.com/research/archive/2017/04) - [March 2017 (4)](https://reflare.com/research/archive/2017/03) - [February 2017 (2)](https://reflare.com/research/archive/2017/02) - [January 2017 (1)](https://reflare.com/research/archive/2017/01) - [December 2016 (1)](https://reflare.com/research/archive/2016/12) - [November 2016 (4)](https://reflare.com/research/archive/2016/11) - [October 2016 (2)](https://reflare.com/research/archive/2016/10) - [September 2016 (4)](https://reflare.com/research/archive/2016/09) - [August 2016 (5)](https://reflare.com/research/archive/2016/08) - [July 2016 (3)](https://reflare.com/research/archive/2016/07) - [June 2016 (5)](https://reflare.com/research/archive/2016/06) - [May 2016 (3)](https://reflare.com/research/archive/2016/05) - [April 2016 (4)](https://reflare.com/research/archive/2016/04) - [March 2016 (5)](https://reflare.com/research/archive/2016/03) - [February 2016 (4)](https://reflare.com/research/archive/2016/02) See all ### Subscribe by email #### About Reflare We help customers increase cyber resilience with the #1 hands-on IT security training platform. Our developer, administrator, and non-technical user training programs enhance user skills, fulfil your compliance needs, and contribute to developing more secure technologies. Legal - [Terms of Service](https://reflare.com/terms) - [Privacy Statement](https://reflare.com/privacy) - [Cookie Info](https://reflare.com/cookies) - [Copyright and Citation Enquiries](https://reflare.com/citation) - [Contact](https://reflare.com/contact) © 2026 Reflare Ltd, and/or its affiliates.   /   In business since 2009.