Technology
21 columns
120 rows
8 formats

IoT Device Security Incident Logs

This dataset provides detailed logs of security incidents affecting smart IoT devices across distributed networks, including device information, incident types, severity, response actions, and compliance status. It enables cybersecurity teams to identify vulnerabilities, optimize incident response, and benchmark security posture for edge environments. The dataset is ideal for compliance monitoring, real-time event triage, and operational risk analysis.

last updated 27 Dec 2025
by GoMask

The brief that made it

Vulnerability identification and remediation tracking

Sample rows

preview · 8 of 120 rows · all 21 columns

incident_idstring	incident_severitystring	compliance_violationboolean	device_vendorstring	device_idstring	device_typestring	device_firmware_versionstring	network_segmentstring	incident_datetimedatetime	incident_typestring	incident_statusstring	reported_bystring	assigned_teamstring	response_actionstring	vulnerability_idstring	location_street_addressstring	location_citystring	location_statestring	location_postal_codestring	location_countrystring	descriptionstring
INC2024-1A2B3C4D	critical	true	Bosch	dev-001A	sensor	v3.2.1	Plant-West-4	2023-10-17T09:25:12Z	malware	resolved	system-monitor-1	SOC-Team-Alpha	quarantined	CVE-2023-5512	425 Industrial Ave	Cleveland	OH	44115	USA	Malware detected on sensor device in manufacturing plant. Quarantined and patched to prevent propagation.
INC2023-2B3C4D5E	high	true	Axis	dev-002B	camera	v5.0.2	Lobby-East-1	2024-02-12T16:45:09Z	unauthorized_access	investigating	user-345	SOC-Team-Beta	locked	blank	100 Main St	Boston	MA	02110	USA	Unauthorized login attempt detected on Axis camera in office lobby. Investigation ongoing.
INC2024-3C4D5E6F	medium	true	Cisco	dev-003C	gateway	v9.1.0	Core-Backbone-2	2023-11-22T13:12:08Z	dos	resolved	system-monitor-4	SOC-Team-Gamma	monitored	blank	200 Market St	Dallas	TX	75201	USA	Denial of Service attack mitigated on core gateway. Traffic monitored for recurrence.
INC2024-4D5E6F7G	high	true	Nest	dev-004D	thermostat	v2.0.0	Home-Main-3	2022-07-14T11:22:36Z	vulnerability_exploit	resolved	auto-monitor-1	HomeSec	patched	CVE-2022-1478	487 Maple Dr	San Jose	CA	95112	USA	Exploit detected in Nest thermostat. Firmware updated and patched to close vulnerability.
INC2024-5E6F7G8H	critical	true	Honeywell	dev-005E	sensor	v6.1.3	Warehouse-North-2	2024-03-05T08:17:44Z	data_leak	detected	system-monitor-7	SecOps-Beta	quarantined	blank	621 Commerce Blvd	Houston	TX	77002	USA	Sensitive data transmission detected on Honeywell sensor. Device quarantined for review.
INC2023-6F7G8H9I	medium	false	Dahua	dev-006F	camera	v4.3.0-label	Outdoor-West-7	2023-08-28T19:33:52Z	configuration_change	resolved	user-678	IT-Helpdesk	logged	blank	879 Park Ave	Seattle	WA	98101	USA	Suspicious configuration change logged on Dahua camera. Settings reverted and incident closed.
INC2024-7G8H9I0J	high	true	ABB	dev-007G	environmental-sensor	v1.0.0-test	Plant-East-5	2023-12-01T07:54:23Z	malware	detected	system-monitor-2	Industrial-Sec	patched	CVE-2023-2937	921 Factory Rd	Columbus	OH	43215	USA	Malware signature found on ABB environmental sensor. Device patched immediately.
INC2023-8H9I0J1K	medium	true	Bosch	dev-008H	sensor	v4.9.2	Plant-South-1	2022-11-09T14:00:00Z	dos	investigating	system-monitor-6	SOC-Team-Alpha	monitored	blank	303 Tech Center	Austin	TX	78701	USA	Unusual network traffic on Bosch sensor. Possible DoS attack under investigation.
INC2024-9I0J1K2L	critical	true	Siemens	dev-009I	PLC	v5.8.8	Factory-Control-3	2024-01-18T10:08:31Z	vulnerability_exploit	resolved	system-monitor-9	Industrial-Sec	patched	CVE-2024-1023	1124 Control St	Pittsburgh	PA	15222	USA	Known PLC vulnerability exploited. Emergency patch and system restore performed.
INC2024-0J1K2L3M	critical	true	Netgear	dev-010J	router	v7.4.2	DMZ-Test-1	2023-09-05T13:30:25Z	malware	detected	auto-monitor-4	Network-Response	quarantined	CVE-2023-4777	555 Security Blvd	Chicago	IL	60601	USA	Malware detected on Netgear router in DMZ. Device isolated and security review initiated.
INC2023-1K2L3M4N	high	true	Bosch	dev-011K	sensor	v2.1.3	Plant-North-2	2023-05-21T15:47:31Z	data_leak	resolved	system-monitor-11	SecOps-Beta	monitored	blank	601 River Rd	Cincinnati	OH	45202	USA	Data leak detected on Bosch sensor. Data transmission reviewed and secured.
INC2024-2L3M4N5O	high	true	Tesla	dev-012L	vehicle-sensor	v8.0.0	Fleet-East-2	2024-04-13T17:15:29Z	dos	investigating	system-monitor-8	FleetSec	monitored	blank	778 Fleet Ln	San Francisco	CA	94107	USA	High volume of traffic detected on Tesla vehicle sensor. DoS suspected; investigation underway.
INC2023-3M4N5O6P	critical	true	Huawei	dev-013M	gateway	v10.2.5	QA-TestNet-1	2023-06-30T22:11:44Z	vulnerability_exploit	resolved	system-monitor-14	TestSec	patched	CVE-2023-1999	300 Network Blvd	Singapore	blank	238801	Singapore	Huawei gateway exploited via CVE-2023-1999. Patch deployed and security baseline restored.
INC2024-4N5O6P7Q	low	false	Axis	dev-014N	camera	blank	Outdoor-South-2	2024-03-08T06:22:19Z	configuration_change	dismissed	user-456	SOC-Team-Beta	ignored	blank	512 Willow St	Los Angeles	CA	90001	USA	Configuration change on Axis camera reviewed and dismissed as non-malicious.
INC2023-5O6P7Q8R	low	false	Siemens	dev-015O	smart-meter	v1.1.7	Utility-North-1	2023-04-12T21:41:03Z	other	investigating	user-159	HomeSec	calibrated	blank	144 Utility Dr	New York	NY	10001	USA	Unexpected readings reported by Siemens smart meter. Device recalibrated as precaution.
INC2024-6P7Q8R9S	critical	true	Honeywell	dev-016P	sensor	v3.0.0	Plant-East-3	2023-10-29T12:00:58Z	malware	resolved	system-monitor-3	SOC-Team-Alpha	quarantined	CVE-2023-8882	910 Industrial Dr	Columbus	OH	43004	USA	Critical malware detected on Honeywell sensor. Device quarantined and system sanitized.
INC2023-7Q8R9S0T	high	true	Cisco	dev-017Q	gateway	v8.1.3	Branch-East-5	2022-12-07T18:18:40Z	dos	resolved	system-monitor-15	Network-Response	monitored	blank	812 Gateway Blvd	Frankfurt	HE	60311	Germany	Branch gateway experienced DoS attempt. Network traffic stabilized and incident resolved.
INC2024-8R9S0T1U	critical	true	Bosch	dev-018R	sensor	v7.2.1	Warehouse-South-2	2023-11-11T10:44:09Z	data_leak	detected	system-monitor-10	SecOps-Beta	quarantined	blank	431 Storage Rd	Columbus	OH	43229	USA	Data leak identified on Bosch sensor in warehouse. Device isolated for analysis.
INC2023-9S0T1U2V	high	true	Bosch	dev-019S	camera	blank	Lobby-North-1	2023-01-31T22:30:32Z	unauthorized_access	investigating	auto-monitor-3	SOC-Team-Beta	locked	blank	72 Central Ave	San Diego	CA	92101	USA	Multiple failed logins detected on Bosch camera. Device locked until investigation is complete.
INC2024-0T1U2V3W	high	true	Huawei	dev-020T	router	v6.0.0	DMZ-Core-2	2023-06-03T03:27:12Z	malware	resolved	system-monitor-17	TestSec	patched	CVE-2023-8428	999 East Rd	Shanghai	blank	200120	China	Malware infection detected on Huawei router. Patched and network monitored for further threats.

What the 120 rows show

from the 120-row sample

78%compliance_violation = true
4incident statuses
7incident types
8location countries
9device types
9response actions

incident_severity120 rows by value

device_vendor108 rows with a value · 12 left blank

Bosch19
Cisco12
Honeywell12
Axis10
Siemens10
Nest9
ABB9
Netgear7
Tesla6
Huawei6

21 columns by typefrom the column list below

string 19
datetime 1
boolean 1

Columns

21 columns in three groups

blueprint · 21 columns
column	type	description	example
Text 19 columns
`incident_id`	string	Unique identifier for the security incident log entryunique	INC2024-1A2B3C4D
`device_id`	string	Unique identifier for the affected IoT device	dev-001A
`device_type`	string	Type or model of the IoT device (e.g., sensor, camera, gateway)9 types	sensor
`device_vendor`	string	Manufacturer or vendor of the IoT device12 vendors · optional	Bosch
`device_firmware_version`	string	Firmware version running on the device at the time of incidentoptional	v3.2.1
`network_segment`	string	Logical or physical network segment where the device is locatedoptional	Plant-West-4
`incident_type`	string	Category of security incident (e.g., unauthorized access, malware, DoS)7 values	malware
`incident_severity`	string	Severity level of the incident (e.g., low, medium, high, critical)low · medium · high · critical	critical
`incident_status`	string	Current status of the incident (e.g., detected, investigating, resolved, dismissed)detected · investigating · resolved · dismissed	resolved
`reported_by`	string	Identifier or name of the system or user who reported the incidentoptional	system-monitor-1
`assigned_team`	string	Name or identifier of the cybersecurity team handling the incident10 teams · optional	SOC-Team-Alpha
`response_action`	string	Action taken in response to the incident (e.g., quarantined, patched, monitored)9 actions · optional	quarantined
`vulnerability_id`	string	Reference identifier for any known vulnerability exploited (e.g., CVE number)optional	CVE-2023-5512
`description`	string	Detailed description of the incident and its contextoptional	Malware detected on senso…
`location_street_address`	string	Street address where the affected device is physically locatedoptional	425 Industrial Ave
`location_city`	string	City where the affected device is physically locatedoptional	Cleveland
`location_state`	string	State or province where the affected device is physically locatedoptional	OH
`location_postal_code`	string	Postal code of the device's locationoptional	44115
`location_country`	string	Country where the affected device is physically located8 countries · optional	USA
Dates and times 1 column
`incident_datetime`	datetime	Timestamp when the security incident was detected	2023-10-17T09:25:12Z
True or false 1 column
`compliance_violation`	boolean	Indicates if the incident represents a compliance violationoptional	true

Use it for

A technology dashboard
The compliance_violation rate, compliance_violation by incident_severity and a breakdown of device_vendor. Excel, Power BI or Tableau.
Why do 93 of 120 rows have compliance_violation = true?
A class exercise
Hand out the rows and one question. Everyone works from the same 120 rows.
Incidents120
INC2024-1A2B3C4Dcritical
INC2023-2B3C4D5Ehigh
INC2023-6F7G8H9Imedium
A software demo
Believable incidents with device_id, device_type and device_vendor to fill a screen in front of a buyer.

This dataset120 rows21 columns

Yours1,000 rows21 columnslocation_street_address: UK only

blueprint · iot-device-security-incident-logs

Behind this dataset

Same schema. As many rows as you need.

These 120 rows came out of a blueprint — 21 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.

Rules it was built with

Each incident log must include device type, severity, and detection timestamp.
Only edge network connected IoT devices are included; exclude non-IoT endpoints.
Incident resolution times must be recorded and calculated.
Flag whether incidents triggered automated or manual response protocols.
Include device firmware version for all incidents.

Rows1,000 rows10,000 rows100,000 rows1,000,000 rows

Open the blueprint in Data Factory

1 credit per row. New accounts start with 25 free credits.

Exports: CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
Licence: yours to use, including commercially
API slug: iot-device-security-incident-logs

What should your data show?

No signup. No card.

Sample rows

What the 120 rows show

Columns

Use it for

A technology dashboard

A class exercise

A software demo

Make it yours.

Same schema. As many rows as you need.

More in Technology

What should your data show?