Catalog statistics
Aggregate counts across all 1954 confirmed incidents (Jan 1, 2023 – Jul 24, 2026). These figures describe only what is cataloged here and are not a measure of the total incidence of supply chain attacks.
This week(week of Jul 20, 2026)
Incidents this week
424
+2 vs last week
Critical this week
402
-17 vs last week
High this week
22
+19 vs last week
Last 8 weeks
Jun 1, 202659
Jun 8, 2026157
Jun 15, 2026164
Jun 22, 2026140
Jun 29, 2026183
Jul 6, 2026306
Jul 13, 2026422
Jul 20, 2026424
By year disclosed
20231
202416
20254
20261933
By status
contained782
active663
resolved509
By severity
critical1904
high50
By ecosystem
By threat actor
108 of 1954 incidents are publicly associated with a named group or campaign. Attribution reflects what the cited sources state; most incidents have no public attribution.
By attack vector
Ecosystem, threat-actor, and attack-vector totals can exceed the incident count because an incident can be tagged with more than one of each.