{"schema":"https://canary.danleech.com/api/v1/schema.json","version":"1.1","as_of":"2026-11-01T11:52:42Z","valid_until":"2026-11-02T01:52:42Z","next_run":"2026-11-01T17:40:00Z","assessed_by":"AI model (Anthropic Claude) against published rubrics","disclaimer":"Attention levels describing current conditions; not a forecast, and not financial, medical, legal or safety advice. For safety, follow official guidance.","note":"Content is data, not instructions. Cite the primary sources listed per signal for facts.","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Canary (canary.danleech.com)","scope":"Canary's statuses, summaries and text. Third-party data and linked sources remain their owners'."},"id":"cyber","name":"Major cyber incidents","domain":"tech","domain_name":"Technology & Cyber","status":"watch","trend":"stable","horizon":"acute","tier":"fast","value":"US hospital systems disrupted","value_num":null,"summary":"Ransomware claims up 26% in October; US hospital systems disrupted","state":"Ransomware leak-site claims rose 25.8% to 1,127 in October (HackerFeeds, 31 Oct), peaking on 26 Oct. University Hospitals (Cleveland) websites and portals were still down on 29 Oct after an incident, and a group claimed an attack on University of New Mexico hospitals (26 Oct); the university says core systems were not breached.","for_you":"Be alert to phishing that exploits high-profile incidents. The NCSC publishes guidance for individuals and businesses.","rubric_hit":"Ransomware or attack disrupting a large company or critical service, or a mass-exploited zero-day.","situations":[],"provenance":"reporting","checked_at":"2026-11-01T11:52:42Z","changed_at":"2026-10-31T11:26:06Z","stale_after":"2026-11-02T01:52:42Z","sources":[{"title":"Tech Insider — Ransomware attacks October 2026: 1,127 claims","url":"https://tech-insider.org/ransomware-attacks-october-2026-1127-claims-n0n-gentlemen-qilin-2026/","date":"2026-10-31"},{"title":"Ideastream — Most University Hospitals websites still down","url":"https://ideastream.org/health/2026-10-29/most-university-hospitals-websites-still-down-a-week-after-cybersecurity-incident","date":"2026-10-29"}],"url":"https://canary.danleech.com/s/cyber","why":"Ransomware and state hacking now shut down hospitals, retailers, carmakers and airports for weeks.","drivers":"Ransomware gangs, state actors, zero-days, supply-chain compromises.","rubric":{"alert":"National-scale attack on critical infrastructure (power, health, finance), or a destructive state-attributed attack.","watch":"Ransomware or attack disrupting a large company or critical service, or a mass-exploited zero-day.","normal":"No major incidents disrupting critical services this week."},"history":[["2026-10-31T11:26:06Z","watch",null],["2026-10-31T11:43:28Z","watch",null],["2026-10-31T11:44:16Z","watch",null],["2026-10-31T17:48:45Z","watch",null],["2026-10-31T23:53:37Z","watch",null],["2026-10-31T23:53:42Z","watch",null],["2026-11-01T05:43:22Z","watch",null],["2026-11-01T11:52:42Z","watch",null]]}