Verizon’s 2026 DBIR Highlights Manufacturing as a Prime Cyberattack Target Verizon Business has published the 2026 edition of its Data Breach Investigations Report (DBIR), marking its 19th year as a leading analysis of the cybersecurity threat landscape. This year’s findings underscore manufacturing as a sector facing relentless attacks, with operational disruptions, intellectual property (IP) exposure, and ransomware recovery costs becoming routine challenges. The report identifies three attack patterns responsible for 91% of manufacturing breaches: System Intrusion, Social Engineering, and Basic Web Application Attacks. Malware remains pervasive, with ransomware driving 61% of incidents a significant concern for industries where uptime is critical. Overall, malware was present in 75% of manufacturing breaches, amplifying recovery disruptions. Internal data emerged as the top target, appearing in 80% of reported breaches. Credential compromise accounted for 26% of incidents, while 17% involved the theft of personally identifiable information (PII). A notable trend is the 240% increase in the misuse of Remote Monitoring and Management (RMM) tools widely used in manufacturing over the past year. Attackers exploit these tools to gain persistent, legitimate-looking access, further complicating detection and response.

FBI Investigates Sophisticated Breach of Surveillance System Holding Sensitive Law Enforcement Data The FBI, alongside agencies including CISA and the NSA, is probing a cyber intrusion into the Digital Collection System Network (DCSNet), an unclassified but highly sensitive surveillance platform used to store law enforcement data. The breach was first detected on February 17, with the FBI notifying Congress this week after identifying unusual activity linked to the system. DCSNet contains legal process returns such as pen register and trap-and-trace data along with personally identifiable information (PII) on subjects of FBI investigations. Pen registers, which log dialed phone numbers, were among the compromised records. The attacker employed advanced techniques, including leveraging a commercial ISP’s infrastructure, to bypass security controls, a tactic increasingly used by nation-state threat actors. While the FBI has not disclosed the attacker’s identity, the incident aligns with recent campaigns by Chinese and Russian hacking groups, which have targeted U.S. government and telecom networks via ISP compromises. Notably, China-linked group Salt Typhoon breached major telecom providers including Verizon, AT&T, and Lumen Technologies in 2024, raising concerns about supply-chain infiltration. The breach occurs amid heightened cyber tensions, including Iran-backed hacking activity following U.S.-Israeli airstrikes on February 28. However, most Iranian cyber operations have focused on Middle Eastern and European targets rather than the U.S. The investigation also unfolds against a backdrop of staffing cuts at key cybersecurity agencies, with the FBI dismissing nearly two dozen employees many in cyber and counterintelligence roles just days before the Iran strikes. Security experts warn the breach underscores the risks of institutional knowledge loss. Damon Small of Xcape described the incident as a "catastrophic vulnerability window" created by the departure of experienced defenders, leaving critical systems exposed. The FBI has not released further details, but the involvement of the White House, NSA, and Justice Department signals the severity of the compromise.

Verizon Enterprise Solutions, a B2B unit of the telecommunications giant suffered a data breach incident after a third party offered a database containing the contact information on some 1.5 million customers for sale. The attackers offered the entire package at $100,000, and also the information about security vulnerabilities in Verizon’s Web site that permitted them to steal customer contact information, . Verizon identified and remediated the security vulnerability and also informed the affected individuals.