Anna has worked as a school accountant for nearly three years, watching it shift gradually from paper to digital—checks first sent by post, then a growing web of centralized systems expected to keep running. When the cyberattack hit, it didn’t just take away her ability to log in and do her work for weeks. It erased a year of records entirely.

Sunday is the worst day for a cyberattack to hit—government channels are dark, support is thin, and a company’s operations can grind to a halt with almost no one watching. For one food processing firm in Latvia, that quiet was the beginning of a crisis that would take months, and hundreds of encrypted machines, to unwind.

A ransom note appeared on a screen during an exam. For one meteorology student, mid-final at Mississippi State, the first instinct wasn’t fear of hackers—it was panic over 2,900 words they hoped hadn’t just vanished. Behind the popup: a breach of Instructure’s Canvas platform that would ripple across nearly 9,000 institutions.

The order was for two tons of ice, every day, for nine days—a windfall for a small family business. But when the truck reached the delivery address, there was nothing there: no event, no tents, just bare land and a pin dropped on Google Maps by someone who’d never set foot nearby.

On July 22, 2021, the container terminals at Durban, Cape Town, and Ngqura went silent. A ransomware attack had frozen the operational technology behind South Africa’s containerised trade, forcing staff back to pen and paper. Then it unraveled: refrigerated goods racing against spoilage, and a hard lesson in what happens when a cyberattack and a physical crisis collide at once.

A phone call from the general counsel, and a sentence no CISO wants to hear: the CEO had just learned that malicious code was being actively exploited, and the news would break by morning. The nation-state supply chain attack would consume Tim Brown’s life for years—through a media storm, a class-action lawsuit, and a heart attack.

A data breach at her hospital employer sat undetected for years—until Leslie logged in to file her taxes and found someone else’s bank details on her account. What came next: benefits frozen through the pandemic, a fraud charge for children she’d never had, and a small-town police force telling her that identity theft was out of their jurisdiction.

A colleague called to say the computers weren’t working. It seemed like an inconvenience, until the chairman of Jelgavas tipogrāfija pulled into the office and found all printers displaying the same message. By lunchtime, everything was dark: email, accounting, the software running the business itself.

Her first surgery had gone wrong, leaving a life-threatening condition untreated and her heart failing. The follow-up procedure was postponed when a ransomware attack took the hospital’s systems down. As weeks stretched into months, her congestive heart failure worsened.