A ransomware attack on a US hospital network took weeks to recover.

Medical staff recalled the situation inside their ward:

“It’s putting patients’ lives in danger. People have too many patients for what is safe. Nurses are taking on five or six patients, dealing with all of this paper charting…It’s frightening how many safety guardrails [have been] out of service without any computers.”

Everything you do, hour by hour, depends on critical services.

Hacking into systems begins by compromising technology but ultimately harms people.

The fallout ripples through everyday life, from cancelled surgeries and power outages to no water, fuel and food shortages, broken communications and transport chaos.

As the number of victims rises, one question cannot be ignored: what does a cyber-attack really cost society?

What we do

Critical Cyber is an impact-driven initiative founded on a simple, radical idea: in a digitally connected world, resilience requires strong links between technology, systems and people.

At the heart of this approach are the voices of those who have lived through and those who have defended against cyber-attacks. Their first-hand accounts expose the harm caused to individuals, organisations and communities, and show where urgent change is needed.

Our work builds on testimonies, research and collaboration to:

  • with clear insights into the impacts of cyber-attacks through first-person accounts, making the stakes relatable for everyone.

  • with recovery journeys, building capacity that extends to psychological endurance and adaptation.

  • through an evidence-to-policy design process, transforming frontline experience into expert-vetted proposals.

Healthcare

81.4% of Americans had their medical data leaked in 2024, slowing down hospitals and delaying treatments.

Energy

Ransomware attacks on energy companies worldwide jumped by 80% in just one year.

Water

Hackers have come close to poisoning public water supplies in Florida.

Food

Ransomware attacks against the US food and agriculture soared by 27% in 2024, threatening tightly linked supply chains.

Communication

Cyber espionage campaign targeted at least three major US telecommunications companies.

Transportation

A cyber-attack disrupted major European airports, causing flight delays and cancellations to thousands of passengers.

Industry

A data breach halted a car manufacturer’s assembly lines, affecting workers through reassignment, reduced hours and pay disruptions.

Education

Cyber operations shut down schools in the US and UK, impacting millions of students’ learning and putting children’s data at risk.

Government

The summer of 2025 saw a historic surge in ransomware attacks on US municipalities, disrupting services for residents.

Finance

In 2024, 65% of financial organisations worldwide reported experiencing a ransomware attack.