Technology
22 columns
65 rows
8 formats

Nonprofit Cybersecurity Incident Tracker

This dataset provides a structured log of cybersecurity incidents affecting nonprofit organizations, capturing essential details such as incident type, severity, affected systems, remediation actions, and compliance status. It enables nonprofits to monitor vulnerabilities, track incident response, and demonstrate regulatory readiness, supporting improved resource allocation and operational resilience.

last updated 31 Dec 2025
by GoMask

The brief that made it

Vulnerability assessment and risk management for nonprofit organizations

Sample rows

preview · 8 of 65 rows · all 22 columns

incident_idstring	incident_severitystring	records_affectedinteger	data_compromisedboolean	regulatory_body_notifiedstring	nonprofit_idstring	nonprofit_namestring	incident_titlestring	incident_typestring	incident_statusstring	date_detecteddatetime	date_reporteddatetime	date_resolveddatetime	reported_bystring	affected_systemsstring	regulatory_notification_requiredboolean	remediation_actionsstring	remediation_statusstring	root_causestring	lessons_learnedstring	audit_readyboolean	incident_descriptionstring
INC-10001	medium	0	false	blank	NP-001	Helping Hands Foundation	Phishing Email Targeted Staff	phishing	resolved	2023-08-14T09:27:00	2023-08-14T10:12:00	2023-08-15T13:30:00	J. Simmons	Staff Email Accounts	false	Password Reset, User Training	completed	User clicked malicious link	Improved phishing awareness needed.	true	Several staff members received a suspicious email requesting login credentials.
INC-10002	high	0	false	blank	NP-002	Green World Project	Malware Infection on Shared Drive	malware	contained	2023-09-11T16:50:00	2023-09-11T17:05:00	blank	IT-Security-System	Shared Drive, Workstation-12	false	Malware Removal, System Scan	in progress	Unvetted file download	Update anti-malware procedures.	false	Malware detected on shared drive after suspicious file download.
INC-10003	critical	225	true	State Attorney General	NP-003	Youth Empowerment Network	Unauthorized Access to Donor Database	unauthorized access	investigating	2023-10-03T22:19:00	2023-10-04T08:17:00	blank	A. Patel	Donor Database	true	Account Lockout, Forensic Audit	in progress	Weak password detected	Enforce strong password policies.	false	Detected unauthorized login attempts to donor records.
INC-10004	critical	1020	true	FTC	NP-004	Literacy for All Initiative	Ransomware Attack on Finance System	ransomware	closed	2022-12-21T11:33:00	2022-12-21T12:01:00	2022-12-22T18:44:00	Finance-Admin	Finance Server	true	Data Restore, Patch Update, Network Segmentation	completed	Outdated system patch	Schedule regular updates.	true	Ransomware encrypted files in finance department, access denied.
INC-10005	high	0	false	blank	NP-005	Food for Families	Insider Threat: Data Export Attempt	insider threat	contained	2024-02-12T15:10:00	2024-02-12T15:35:00	blank	HR-Audit-System	HR Database	false	Access Revoked, Policy Review	in progress	Policy misunderstanding	Clarify access policies.	false	Employee attempted unauthorized data export from HR systems.
INC-10006	high	0	false	blank	NP-001	Helping Hands Foundation	DDoS Attack on Web Portal	DDoS	resolved	2024-01-18T07:45:00	2024-01-18T08:02:00	2024-01-18T13:10:00	WebMonitor	Public Web Portal	false	Traffic Filtering, Firewall Update	completed	Targeted external attack	Implement cloud mitigation.	true	Web portal experienced service disruption due to DDoS.
INC-10007	critical	800	true	State Attorney General	NP-006	Shelter Support Group	Data Breach: Volunteer Records Exposed	data breach	closed	2023-07-08T14:10:00	2023-07-08T15:08:00	2023-07-09T10:40:00	V. Martinez	Volunteer Database	true	Database Patch, Password Reset	completed	Unsecured database	Improve database security.	true	Volunteer records accessed by unauthorized party.
INC-10008	medium	0	false	blank	NP-007	Coastal Cleanups	Phishing Attempt via SMS	phishing	open	2024-03-02T12:25:00	2024-03-02T12:32:00	blank	SMS-Alert-System	Staff Mobile Devices	false	Staff Alert, Blocked Numbers	not started	External phishing campaign	Increase mobile threat training.	false	Staff received SMS messages with malicious links.
INC-10009	medium	0	false	blank	NP-002	Green World Project	Malware in Vendor Email Attachment	malware	contained	2024-03-17T10:18:00	2024-03-17T10:40:00	blank	N. Chen	Staff Email Accounts	false	Attachment Removal, Anti-virus Scan	in progress	Unverified email source	Strengthen email filtering.	false	Malware found in attachment from external vendor email.
INC-10010	high	395	true	Department of Health	NP-008	Global Health Partners	Unauthorized Access: Medical Records	unauthorized access	investigating	2023-05-21T21:12:00	2023-05-22T08:00:00	blank	Security-Admin	Medical Records Database	true	Audit Logs Review, Access Revoked	in progress	Compromised staff credentials	Review credential management.	false	Unauthorized user accessed medical records database.
INC-10011	medium	0	false	blank	NP-009	Arts & Culture Foundation	DDoS Flood on Ticketing System	DDoS	resolved	2023-03-29T19:01:00	2023-03-29T19:20:00	2023-03-30T09:30:00	SystemMonitor	Ticketing System	false	Traffic Throttling, Network Update	completed	External attack vector	Enhance network defense.	true	Ticketing system unavailable due to DDoS flood.
INC-10012	low	0	false	blank	NP-010	Bright Future Scholars	Phishing Campaign Through Social Media	phishing	open	2024-03-28T17:20:00	2024-03-28T17:24:00	blank	SocialMedia-Admin	Social Media Accounts	false	Link Removal, User Notification	not started	External phishing campaign	Increase social media vigilance.	false	Phishing links circulated on nonprofit's social media page.
INC-10013	high	0	false	blank	NP-002	Green World Project	Malware in Donor Portal	malware	resolved	2023-11-17T08:54:00	2023-11-17T09:10:00	2023-11-17T14:20:00	IT-Security-System	Donor Portal	false	File Clean, Security Patch	completed	Unpatched vulnerability	Regular vulnerability assessments.	true	Malware detected in donor portal system files.
INC-10014	medium	42	true	HIPAA Office	NP-011	Community Wellness Center	Insider Threat: Unauthorized Data Sharing	insider threat	investigating	2024-03-16T13:09:00	2024-03-16T13:45:00	blank	Compliance-Dept	Patient Records	true	Staff Suspension, Policy Training	in progress	Policy violation	Reinforce data handling policies.	false	Staff member shared sensitive data without approval.
INC-10015	high	120	true	State Attorney General	NP-005	Food for Families	Data Breach: Donor Emails Leaked	data breach	resolved	2023-06-13T16:05:00	2023-06-13T16:21:00	2023-06-14T10:30:00	M. Lee	Donor Management System	true	Access Review, Permission Update	completed	Permission misconfiguration	Regular access reviews.	true	Donor email addresses exposed due to misconfigured access.
INC-10016	high	84	true	FTC	NP-012	Urban Youth Alliance	Ransomware Detected on Marketing PC	ransomware	contained	2023-04-25T08:10:00	2023-04-25T08:24:00	blank	Marketing-Lead	Marketing PC	true	PC Isolation, Data Restore	in progress	Malicious email attachment	Train staff on suspicious emails.	false	Marketing department PC encrypted by ransomware, files inaccessible.
INC-10017	medium	0	false	blank	NP-006	Shelter Support Group	Phishing Attempt: Fake Invoice	phishing	open	2024-03-11T11:35:00	2024-03-11T11:40:00	blank	Finance-Admin	Finance Email Account	false	Email Block, Staff Warning	not started	External phishing source	Finance staff needs targeted training.	false	Received fake invoice email targeting finance staff.
INC-10018	high	0	false	blank	NP-013	Global Education Trust	Malware Outbreak in Lab Computers	malware	resolved	2023-09-14T14:00:00	2023-09-14T14:17:00	2023-09-14T17:50:00	IT-Support	Lab Computers	false	USB Policy Update, Malware Removal	completed	Infected USB device	Ban unauthorized USBs.	true	Multiple lab computers infected by malware from USB drives.
INC-10019	high	250	true	State Attorney General	NP-014	Healthy Meals Initiative	Data Breach: Client List Exposure	data breach	investigating	2024-02-15T13:02:00	2024-02-15T13:40:00	blank	SystemMonitor	Client Database	true	Access Review, Database Audit	in progress	Credential compromise	Improve credential security.	false	Client list downloaded by unauthorized user.
INC-10020	medium	0	false	blank	NP-015	Neighborhood Resource Center	Unauthorized Access: Grant Application Files	unauthorized access	contained	2023-08-19T10:55:00	2023-08-19T11:03:00	blank	Grant-Manager	Grant Application Folder	false	Access Revoked, Folder Audit	in progress	Improper sharing permissions	Audit file permissions frequently.	false	Unauthorized external user accessed grant application files.

What the 65 rows show

from the 65-row sample

Critical (incident severity) stands out: mean records_affected is 1,330, against 120.8 for the rest.

45%data_compromised = true
0median records_affected
3remediation statuses
5incident statuses
8incident types

Mean records_affected by incident_severity65 rows

records_affected65 rows, in bands of 500

Median 0, from 0 to 3,292.

regulatory_body_notified23 rows with a value · 42 left blank

State Attorney General8
Department of Health4
State Cybersecurity Office4
Privacy Commissioner3
FTC2
HIPAA Office2

22 columns by typefrom the column list below

string 15
integer 1
datetime 3
boolean 3

Columns

22 columns in four groups

blueprint · 22 columns
column	type	description	example
Text 15 columns
`incident_id`	string	Unique identifier for each cybersecurity incidentunique	INC-10001
`nonprofit_id`	string	Unique identifier for the nonprofit organization	NP-001
`nonprofit_name`	string	Official name of the nonprofit organization	Helping Hands Foundation
`incident_title`	string	Short, descriptive title for the incidentup to 150	Phishing Attempt via SMS
`incident_description`	string	Detailed description of the cybersecurity incident	Several staff members rec…
`incident_type`	string	Category of the incident (e.g., phishing, ransomware, data breach, malware, unauthorized access)8 values	phishing
`incident_severity`	string	Severity level of the incidentlow · medium · high · critical	medium
`incident_status`	string	Current status of the incidentopen · investigating · contained · resolved · closed	resolved
`reported_by`	string	Name or identifier of the person or system who reported the incident	J. Simmons
`affected_systems`	string	List of affected systems or assets (comma-separated values)up to 255	Staff Email Accounts
`regulatory_body_notified`	string	Name of the regulatory body notified (if applicable)6 notifieds · optional	State Attorney General
`remediation_actions`	string	Summary of remediation actions taken (comma-separated values)up to 255	Email Block, CEO Alert
`remediation_status`	string	Status of remediation effortsnot started · in progress · completed · not applicable	completed
`root_cause`	string	Identified root cause of the incidentup to 150 · optional	Unvetted file download
`lessons_learned`	string	Summary of lessons learned from the incidentoptional	Clarify access policies.
Numbers 1 column
`records_affected`	integer	Number of individual records or accounts affected (if applicable)0 or more · optional	0
Dates and times 3 columns
`date_detected`	datetime	Date and time when the incident was first detected	2023-08-14T09:27:00
`date_reported`	datetime	Date and time when the incident was reported internally	2023-08-14T10:12:00
`date_resolved`	datetime	Date and time when the incident was resolved or closedoptional	2023-08-15T13:30:00
True or false 3 columns
`data_compromised`	boolean	Indicates if sensitive data was compromised in the incident	false
`regulatory_notification_required`	boolean	Indicates if regulatory notification was required for this incident	false
`audit_ready`	boolean	Indicates if all documentation and remediation are complete for audit purposes	true

Use it for

A technology dashboard
The data_compromised rate, records_affected by incident_severity and a breakdown of regulatory_body_notified. Excel, Power BI or Tableau.
Why do the 12 critical rows have a mean records_affected of 1,330?
A root-cause class exercise
Hand out the rows and one question. The answer is in the data, not in the brief.
Incidents65
INC-100010medium
INC-10003225critical
INC-100041020critical
A software demo
Believable incidents with nonprofit_id, nonprofit_name and incident_title to fill a screen in front of a buyer.

This dataset65 rows22 columns

Yours1,000 rows22 columns

blueprint · nonprofit-cybersecurity-incident-tracker

Behind this dataset

Same schema. As many rows as you need.

These 65 rows came out of a blueprint — 22 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.

Rules it was built with

Each row represents a unique incident and must include timestamp, incident type, detection method, and current status.
Severity rating is assigned on a standardized 1-5 scale based on impact assessment.
Follow-up actions are recorded and must include responsible team/individual and completion status.
Incidents must be categorized as internal, external, or partner-originated.
If an incident affects donor or beneficiary data, this must be explicitly flagged.

Rows1,000 rows10,000 rows100,000 rows1,000,000 rows

Open the blueprint in Data Factory

1 credit per row. Preview 20 rows free. Buy rows for the full run.

Exports: CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
Licence: yours to use, including commercially
API slug: nonprofit-cybersecurity-incident-tracker

What should your data show?

No signup. No card.

Sample rows

What the 65 rows show

Columns

Use it for

A technology dashboard

A root-cause class exercise

A software demo

Make it yours.

Same schema. As many rows as you need.

More in Technology

What should your data show?