State-sponsored cyberattacks targeted U.S. critical infrastructure and federal agencies during the first half of 2026. Iran-affiliated groups disrupted industrial controllers in the water and energy sectors starting in March. These campaigns represent a significant escalation in attacks on operational technology.
The FBI confirmed a major breach of its surveillance data network in April. Hackers linked to the Chinese government gained access through a third-party vendor. The incident exposed sensitive information, including the phone numbers of surveillance targets.
Medical technology company Stryker suffered a destructive wiper attack in March.
A whistleblower alleged in March that a former Department of Government Efficiency (DOGE) employee exfiltrated Social Security Administration data. The former staffer reportedly used a thumb drive to conduct the massive government data breach.