A ransomware attack on a US hospital network took weeks to recover.

Medical staff recalled the situation inside their ward:

“It’s putting patients’ lives in danger. People have too many patients for what is safe. Nurses are taking on five or six patients, dealing with all of this paper charting. It’s frightening how many safety guardrails have been out of service without any computers.”

Everything you do, hour by hour, depends on critical services.

Hacking into systems begins by compromising technology but ultimately harms people.

The fallout ripples through everyday life: canceled surgeries, power outages, water and fuel shortages, food supply disruptions, broken communications, and transport chaos.

As the number of victims rises, one question cannot be ignored: what does a cyberattack really cost society?

What we do

Critical Cyber is a global initiative documenting the human toll of cyber threats.

We amplify the voices of people who have lived through and defended against cyberattacks. Their firsthand accounts reveal the real-world harm inflicted on individuals, organizations, and communities, and identify routes to improved resilience.

Our work draws on testimony, research, and collaboration with experts to:

  • with clear insights into the human cost of cyber incidents, making the stakes visible and understood.

  • through their recovery, building psychological resilience and helping others prepare, respond, and adapt.

  • through evidence-to-policy design, translating frontline experience into policy and accountability reform.

Healthcare

81.4% of Americans had their medical data leaked in 2024, slowing down emergency care in hospitals and exposing patient information.

Energy

Ransomware attacks on energy companies worldwide jumped by 80% in 2024.

Water

Operator incident nearly poisoned drinking water supplies in Florida.

Food

Ransomware attacks against the US agriculture sector soared by 27% in 2024, threatening tightly linked food supply chains.

Communication

A cyber espionage campaign targeted several major US telecommunications companies.

Transportation

Cyberattacks disrupted major European airports, causing flight delays and cancellations for thousands of passengers.

Industry

A data breach halted a car manufacturer’s assembly lines, affecting workers through reassignment, reduced hours, and pay disruptions.

Education

Data breaches regularly shut down schools, impacting education for millions of pupils and putting children’s personal information at risk.

Government

The summer of 2025 saw a historic surge in ransomware attacks on municipalities that disrupted public services for residents.

Finance

65% of financial organizations worldwide reported experiencing a ransomware attack in 2024.