Case files on real security incidents
Real incidents, taken apart.
Each episode dissects one real breach, ransomware attack or account takeover: what happened, how the attackers got in, what it cost, and what would have stopped it.
Every claim on screen carries an exhibit tag. The number in brackets points to the source listed under the episode, and the status shows how certain it is — confirmed, reported by an outlet, unconfirmed, or claimed by the attackers themselves.
Cases
The first cases are being prepared. Each one will appear here with its full list of sources.