Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Where cyber incidents meet private capital

Evidence register as of 2026-11-02 21:25 UTC
Verified incidents
38
Confirmed or corroborated only
Still open
23
Containment or operations not restored
Borrowers in BDC books
4
17 BDC fund positions
Disclosed BDC debt
$411.3M
Fair value, latest filing before the incident

Where capital is exposed

Companies with a verified incident whose debt sits in business development company portfolios, from those lenders' SEC schedules. The marks below were taken before the incident, so they show the position at risk, not a loss.

CompanyIncidentBDC fundsFair valueMarkNext maturityAccrual
ConnectWise, LLCConfirmed operational disruption14$187.2M92.0%2028-09-01Accruing
Marathon Health, LLCConfirmed compromise1$184.8M99.5%2029-02-01Accruing
Chainalysis, IncConfirmed compromise1$38.7M101.9%2029-06-01Accruing
Del Monte Foods Corp II IncConfirmed compromise1$680K14.2%2026-09-30Non-accrual before the incident

BDC holdings only, as of each lender's latest filing period (2026-06-30). Banks, CLOs and private funds that do not file schedules are not included, so these totals are a lower bound. What changed since each lender's last valuation, and what to ask

Open now (23)

  • Binance
    crypto exchange · Global (ADGM-licensed group; users worldwide)
    ConfirmedOperations recoveringContainment not confirmed
    Confirmed financial consequence
    1 owner or investor links
  • Mercado Bitcoin
    crypto exchange · Brazil
    CorroboratedOperations disruptedContainment not confirmed
    Confirmed financial consequence
  • Spandana Sphoorty
    non-bank lender / microfinance · India
    ConfirmedOperations degradedContainment not confirmed
    Confirmed financial consequence
  • Air Alert app (Ukraine)
    emergency alerting (third-party/official alert application) · Ukraine
    CorroboratedOperations recoveringContainment not confirmed
    Confirmed operational disruption
  • BTCPay Server
    crypto payments (merchant processor software) · Global (self-hosted; hosting providers including LunaNode)
    ConfirmedOperations degradedContainment not confirmed
    Confirmed operational disruption
  • City of Columbia
    municipal government · South Carolina, United States
    ConfirmedOperations degradedContainment not confirmed
    Confirmed operational disruption
  • ConnectWise
    MSP tooling / Microsoft 365 backup · U.S. provider (FL); tenants multinational, mostly unnamed
    ConfirmedOperations recoveringContainment not confirmed
    Confirmed operational disruption
    14 BDC funds hold its debt
  • European supermarket refrigeration
    food retail; refrigeration and cold storage · Belgium, Luxembourg, Sweden, Ireland, Estonia, Netherlands, Finland
    CorroboratedOperations recoveringContainment not confirmed
    Confirmed operational disruption
  • Floin AG
    crypto platform (MiCA CASP) · Liechtenstein
    ConfirmedOperations disrupted
    Confirmed operational disruption
  • French supermarket refrigeration
    food retail; refrigeration · France
    CorroboratedOperations recoveringContainment not confirmed
    Confirmed operational disruption
  • GMO Internet
    hosting / retail FX brokerage · Japan
    ConfirmedOperations disrupted
    Confirmed operational disruption
    1 owner or investor links
  • MChS warning app (Russia)
    emergency alerting (official alert application) · Russia
    CorroboratedOperations disruptedContainment not confirmed
    Confirmed operational disruption
  • Northflank
    cloud PaaS / developer infrastructure · United Kingdom provider; customers include U.S. (none named)
    ConfirmedOperations degraded
    Confirmed operational disruption
  • Richmond Public Schools
    K-12 education · Virginia, United States
    CorroboratedOperations degradedContainment not confirmed
    Confirmed operational disruption
  • Seminole County Clerk
    local government / courts · Florida, United States
    ConfirmedOperations disruptedContainment not confirmed
    Confirmed operational disruption
  • University Hospitals (Cleveland)
    healthcare · Ohio, United States
    ConfirmedOperations degradedContainment not confirmed
    Confirmed operational disruption
  • Chainalysis
    blockchain analytics · United States
    ConfirmedContainment not confirmed
    Confirmed compromise
    1 BDC fund holds its debt
    4 owner or investor links
  • Community Medical Center, Falls City
    healthcare (rural hospital) · Nebraska, United States
    CorroboratedContainment not confirmed
    Confirmed compromise
  • Finzly
    bank payments vendor · U.S. (NC)
    ConfirmedContainment not confirmed
    Confirmed compromise
    1 owner or investor links
  • Green Clinic, Ruston
    healthcare (clinic) · Louisiana, United States
    CorroboratedContainment not confirmed
    Confirmed compromise
  • Korean banks (loan portals)
    banking · South Korea
    CorroboratedContainment not confirmed
    Confirmed compromise
  • UNM Health
    healthcare · New Mexico, United States
    ConfirmedContainment not confirmed
    Confirmed compromise
  • Abrigo
    financial services technology (vendor to community banks and credit unions) · United States (customer base nationwide)
    ConfirmedCyber cause not establishedOperations recoveringContainment not confirmed
    Suspected security incident
    2 owner or investor links

Is anything in your portfolio on this list, or exposed to it?

Send us your holdings or a single company. We return the verified incidents, the lenders and owners around each one, and what remains unknown, with every source.

Request an exposure check

Contained or restored (15)

  • Polymarket (DebugBear script)
    prediction market / web supply chain · Global (U.S.-linked platform)
    Confirmed
    Confirmed financial consequence
    3 owner or investor links
  • WCAPL via ICICI payout APIs
    NBFC / payments · India
    Confirmed
    Confirmed financial consequence
  • Allium
    crypto data provider · United States
    ConfirmedOperations recovering
    Confirmed operational disruption
  • Railway
    cloud PaaS / developer infrastructure · U.S. (CA); customers global
    ConfirmedOperations recovering
    Confirmed operational disruption
  • TAKKT North American Foodservices
    foodservice supply distribution · United States
    ConfirmedOperations recovering
    Confirmed operational disruption
  • TruStage
    insurance and retirement services for credit unions · U.S. (WI)
    ConfirmedOperations recovering
    Confirmed operational disruption
  • Baanx US
    financial services (crypto card program) · United States (Dover, DE entity; notices to CA and other states' residents)
    Confirmed
    Confirmed compromise
  • Blossom Health
    healthcare (behavioral health) · United States (CA and TX notices; 2,014 Texans per a claims-site summary)
    Confirmed
    Confirmed compromise
    1 owner or investor links
  • Cursor extension marketplace
    developer tools · Global
    Corroborated
    Confirmed compromise
  • Del Monte Foods
    food manufacturing · US
    Confirmed
    Confirmed compromise
    1 BDC fund holds its debt
    1 owner or investor links
  • El Camino Health
    healthcare (hospital system) · California
    Confirmed
    Confirmed compromise
  • HCA Healthcare
    healthcare (hospital system) · United States (Nashville, TN headquarters; HCA-affiliated facilities and physician offices; at least 15,096 Texans per a claims-site summary of the Texas filing)
    Confirmed
    Confirmed compromise
  • Marathon Health
    healthcare · United States (Texas 234,534; Massachusetts 29,075; Vermont 8,858 per secondary summaries of state filings)
    Confirmed
    Confirmed compromise
    1 BDC fund holds its debt
    2 owner or investor links
  • Park Dental Partners
    dental services · US
    Confirmed
    Confirmed compromise
  • Small U.S. water utilities
    water · United States
    Corroborated
    Confirmed compromise