Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Cloud, identity and critical software · AR (headquarters)
Analyst-reviewed records. The grade states how well the cause is established; event, first public observation and acknowledgement are separate dates.
PRE-WINDOW shared-vendor event, re-verified. CUSI took customer payment portals offline 2026-10-10; at least six small water utilities in TX, CO, CA, IL told customers to pay by mail, drop box, cash or check.
Other explanations considered: Penrose relayed CUSI saying the problem was 'how payment information moves between their systems' (could be integration fault).
Collected from the organisation's own public status page. These are its words; DFX adds only the wording classification.
No status posts collected for this organisation.
Organisations publicly documented as relying on this provider. A relationship is not an impact.