Attacks on US firms have moved from stealing data to stopping production

Reuters’ 2026 breach tally shows U.S. firms increasingly targeted by social-engineering attacks on third-party suppliers, with groups like ShinyHunters compromising platforms such as Instructure’s Canvas and exposing millions of records. The threat has shifted from data theft to operational disruption, as Iranian-linked actors halted Stryker’s manufacturing, West Pharmaceutical’s systems, Hasbro’s fulfillment and Coca-Cola’s Fairlife production, driving higher ransom demands.