Finance
Factbox-Cyber threats disrupt global firms in US, UK and EU
Published by Global Banking & Finance Review®
Posted on May 21, 2025
5 min readLast updated: January 23, 2026
Global Banking & Finance Review®
Company
Published by Global Banking & Finance Review®
Posted on May 21, 2025
5 min readLast updated: January 23, 2026
Cyber threats are disrupting global firms in the US, UK, and EU, affecting sectors like healthcare and finance with sophisticated attacks.
(Reuters) -Global companies are grappling with a surge in cyber and ransomware attacks, with increasingly sophisticated threat actors disrupting operations and compromising sensitive data across diverse sectors — from healthcare and financial services to retail and regulatory bodies.
Here is a list of companies and regulators across the U.S., UK, and European Union that have been affected by or reported cyber incidents this year.
Impact
Company Month
Region
Smiths Group January UK Cybersecurity incident
involved unauthorised
access to its systems.
Big Cheese January Poland An incident at the Polish
Studio game developer led to
hackers gaining access to
the company's game code
systems and personal data
of its employees. Hackers
demanded a ransom of
100,000 zlotys in crypto
currencies.
MGM Resorts January USA Court approved a $45
International million settlement in a
class-action lawsuit over
two data breaches at MGM
in 2019 and 2023,
affecting millions of
customers.
Clorox February USA A Clorox executive said
the bleach maker has
fully restored
distribution that was
lost during a cyber
attack in 2023.
Eckert & February Germany Suffered a cyber attack
Ziegler on parts of its IT
systems but said its
production was largely
unaffected
Marks & April UK Online orders halted for
Spencer more than 3 weeks leading
to the British retailer
flagging a 300 million
pound hit to profit.
Hertz April USA Rental car firm reported
some of its user data was
stolen in a breach
involving one of its
vendors.
DaVita April USA Dialysis firm was hit by
ransomware attack that
encrypted certain
elements of its network,
with some of its
operations disrupted
despite interim measures.
U.S. office April USA The U.S. Treasury
of the Department's Office of
Comptroller the Comptroller of the
of the Currency said that emails
Currency of executives and other
(OCC) employees of the agency
were hacked, blaming
longstanding
vulnerabilities for the
breach.
Emera Inc & April USA The energy providers said
its unit Nova they were addressing a
Scotia power cybersecurity incident
involving unauthorized
access to parts of their
Canadian network and
servers, while customer
data was accessed &
stolen.
National April USA A whistleblower complaint
Labor says that billionaire
Relations Elon Musk's team of
Board (NLRB) technologists (DOGE) may
have been responsible for
a "significant
cybersecurity breach,"
likely of sensitive case
files, at America's
federal labor watchdog.
LVHM's May France Hit by a cyber attack,
Christian with hackers obtaining
Dior Couture some of its customers'
data, Bloomberg News
reported.
Co-op Group May UK Grocery chain reported
that hackers had accessed
and extracted customer
data from one of its
systems.
Harrods May UK Department store said
hackers had attempted to
break into its systems.
UK's Legal May UK A "significant" amount of
Aid Agency personal data, including
criminal records, of
applicants who had
applied for legal aid
since 2010 was accessed &
stolen.
Adidas May Germany Sportswear
maker
said
an
unauthorised external
party had obtained
certain consumer data
through a third-party
customer service
provider, albeit not
passwords or credit card
data.
Victoria's May USA Clothing and
Secret lingerie retailer
suspended
most of the
functionality of its
website and some in-store
services for a few days
to contain and prevent
unauthorized network
access.
Telefonica June Spain
Telecommunications
company
said
it was
looking into a potential
cyberattack after data
allegedly belonging to
one million customers in
Peru was released on an
internet forum.
June Switzer Cartier, the
Richemont land luxury jewelry company
owned by Richemont, had
its website
hacked
and some
client data stolen, it
told customers.
Salesforce June USA Hackers are
tricking employees at
companies in Europe and
the Americas into
installing a modified
version of Salesforce's
Data Loader app, Google
said
.
June UK HMRC's
Britain's tax security systems
office (HMRC) detected
unauthorised
access to some customers'
online accounts in an
attempt to claim money.
June USA Whole Foods
United supplier
Natural Foods said
it took
certain systems offline
after finding
unauthorized activity on
internal networks.
Philadelphia June USA The insurer's
Insurance staff remained
Companies offline
for at least
three days after a
"major" ransomware event.
June USA The company, which
Erie manages Erie Insurance,
Indemnity identified unusual
Company network activity after
facing system outages and
disruptions.
June USA The newspaper
Washington said it is
Post investigating
a
cyberattack on email
accounts of some of its
journalists, according to
a source familiar with
the matter and an
internal memo reviewed by
Reuters.
UBS and June Switzer The Swiss banks said they
Pictet land had suffered a data leak
that did not compromise
client information,
although a newspaper
report said thousands of
UBS workers' data was
affected.
June USA The health
Aflac and life insurer
disclosed
a
cybersecurity incident in
which personal
information of its
customers may have been
compromised.
(SOURCE: Reuters' stories, company announcements, other news media outlets)
(Reporting by DhanushVignesh Babu, Ankita Bora and Puyaan Singh in Bengaluru; Editing by Tasim Zahid and Sahal Muhammed)
Global companies across various sectors, including retail, telecommunications, and finance, have reported cyber incidents this year.
MGM Resorts faced a $45 million settlement in a class-action lawsuit due to data breaches affecting millions of customers.
Clorox reported that it fully restored distribution that was disrupted during a cyber attack in 2023.
Companies are addressing cybersecurity incidents by restoring access to systems, enhancing security measures, and investigating breaches.
Adidas reported that an unauthorized external party obtained certain consumer data, but passwords and credit card information were not compromised.
Explore more articles in the Finance category
