Technology
21 columns
500 rows
8 formats

Phishing and Social Engineering Incidents

This dataset provides a comprehensive record of phishing and social engineering incidents, including attack details, affected parties, incident analysis, and customer education efforts. It is designed to support security monitoring, risk assessment, and the development of targeted prevention strategies for organizations. Ideal for incident response teams, compliance reporting, and awareness program evaluation.

last updated 29 Oct 2025
by GoMask

The brief that made it

Security incident tracking and analysis

Sample rows

preview · 8 of 500 rows · all 21 columns

incident_idstring	target_groupstring	employee_affected_countinteger	data_compromisedboolean	location_countrystring	report_datedatetime	incident_typestring	attack_vectorstring	detected_bystring	incident_statusstring	resolution_datedate	impact_levelstring	customer_affected_countinteger	customer_education_datedate	customer_education_typestring	reported_bystring	location_citystring	location_statestring	descriptionstring	prevention_measuresstring	analysis_summarystring
INC202300001	customers	0	false	USA	2023-01-04T10:13:27	phishing	email	spam_filter_01	resolved	2023-01-05	medium	0	blank	blank	support_bot_1	New York	New York	Customer received suspicious email with fake login link. Phishing attempt detected during login process.	Enabled multi-factor authentication for all customer accounts.	Incident was contained and no data was compromised. Customer support notified.
INC202300002	customers	0	true	USA	2023-01-08T14:39:10	phone_scam	phone	customer_service	closed	2023-01-09	high	575	2023-01-11	email_campaign	customer_alert_23	Dallas	Texas	Customer reported receiving fraudulent call requesting account details. Caller impersonated bank staff.	Bank notified all customers of scam calls and blocked suspicious numbers.	Large number of customers received scam calls. Some reported sharing information.
INC202300003	executives	4	true	USA	2023-01-11T09:05:40	social_engineering	phone	executive_assistant	investigating	blank	critical	0	blank	blank	pa_ceo	San Francisco	California	Executive received phone call from individual posing as IT support requesting credentials.	Increased verification steps for IT requests to executives.	Potential compromise of executive credentials under investigation.
INC202300004	employees	1	false	USA	2023-01-15T16:27:33	phishing	email	automated_filter	open	blank	medium	0	blank	blank	it_sys	Chicago	Illinois	Employee reported a suspicious email requesting password reset on internal system.	Password reset requests flagged for manual review.	No data loss detected. Employee educated on phishing risks.
INC202300005	partners	0	false	Canada	2023-01-21T11:20:15	other	website	partner_admin	resolved	2023-01-23	medium	0	blank	blank	partner_71	Montreal	Quebec	Partner organization notified about malicious website mimicking official portal.	Legal team initiated takedown of fraudulent website.	No partner data compromised. Awareness raised among partners.
INC202300006	customers	0	true	UK	2023-02-02T13:44:58	phishing	SMS	customer_alert_12	closed	2023-02-04	high	950	2023-02-06	webinar	support_bot_2	London	England	Mass SMS campaign attempted to trick customers into clicking malicious links.	SMS filtering enhanced. Message sender blocked.	High number of customers targeted, some reported compromised accounts.
INC202300007	employees	3	false	India	2023-02-07T15:11:54	social_engineering	SMS	hr_team	investigating	blank	high	0	blank	blank	ajohnson	Bangalore	Karnataka	Employee received SMS from unknown number requesting confidential project data.	Blocked sender and alerted security team.	SMS scam attempt. No employee credentials leaked.
INC202300008	IT	0	false	Ireland	2023-02-11T08:18:21	phishing	website	IT_monitor	open	blank	medium	0	blank	blank	it_alert_04	Dublin	Leinster	IT staff noticed fake login page hosted on compromised domain.	Domain blacklisted for all internal access.	Fake login page removed. IT staff notified employees.
INC202300009	customers	0	true	India	2023-02-14T21:33:52	phishing	website	customer_service	resolved	2023-02-15	high	110	2023-02-17	training	customer_alert_31	Mumbai	Maharashtra	Customer reported a fraudulent website asking for payment credentials.	Customer notified to avoid interacting with suspicious sites.	Website taken offline. No major data loss confirmed.
INC202300010	employees	0	false	Australia	2023-02-19T12:25:46	phishing	email	employee_report	open	blank	low	0	blank	blank	sroberts	Sydney	New South Wales	Suspicious internal email identified. Employee notified IT.	IT team increased phishing detection for internal emails.	No impact. Employee educated on email best practices.
INC202300011	customers	0	true	USA	2023-03-01T17:14:39	phone_scam	phone	customer_service	resolved	2023-03-03	high	300	2023-03-04	email_campaign	support_bot_3	Houston	Texas	Several customers reported scam calls asking for account PINs.	Warned customers. Updated fraud detection on phone system.	Scam calls blocked. Customer data review ongoing.
INC202300012	employees	0	false	Germany	2023-03-05T09:51:17	phishing	SMS	automated_filter	open	blank	medium	0	blank	blank	it_sys	Berlin	Berlin	Employee received SMS with malicious link. IT flagged the number.	Blocked sender. Notified all employees.	Phishing SMS contained. No data loss.
INC202300013	executives	2	true	Switzerland	2023-03-10T11:30:38	social_engineering	email	finance_team	investigating	blank	critical	0	blank	blank	mmiller	Zurich	Zurich	Email impersonating CEO sent to finance head requesting urgent funds transfer.	Finance team now verifies all transfer requests verbally.	Email fraud detected. No funds transferred.
INC202300014	vendors	0	false	Spain	2023-03-12T14:28:56	other	website	threat_intel	resolved	2023-03-14	medium	0	blank	blank	thintel_05	Barcelona	Catalonia	Vendor alerted to cloned website collecting sensitive contract data.	Legal team issued takedown. Vendors notified.	No vendor data exposed. Monitoring ongoing.
INC202300015	customers	0	true	South Africa	2023-03-18T19:10:22	phishing	email	spam_filter_02	closed	2023-03-20	high	575	2023-03-22	webinar	customer_alert_44	Cape Town	Western Cape	Targeted email sent to customer segment offering fake rewards.	Blocked sender. Notified affected customers.	Large volume of phishing emails stopped. Data review ongoing.
INC202300016	employees	2	false	India	2023-03-22T10:03:01	social_engineering	phone	hr_team	open	blank	high	0	blank	blank	ajohnson	Delhi	Delhi	Employee received call from person claiming to be HR, requesting personal information.	HR reminders on verification procedures.	Employee did not share information. Incident contained.
INC202300017	employees	1	false	Germany	2023-03-29T08:32:14	phishing	email	finance_team	investigating	blank	medium	0	blank	blank	lmartin	Frankfurt	Hesse	Phishing email targeting finance team requesting invoice payment.	Finance team alerted to review all payment requests.	No payment made. Email reported and blocked.
INC202300018	customers	0	true	Brazil	2023-04-02T16:51:09	phone_scam	phone	customer_service	closed	2023-04-03	high	110	2023-04-05	training	customer_alert_29	São Paulo	São Paulo	Scam call requesting customers to verify account information.	Fraudulent numbers blocked. Customers warned.	Scam contained. No major losses confirmed.
INC202300019	IT	0	false	Singapore	2023-04-08T09:27:42	phishing	SMS	IT_monitor	open	blank	low	0	blank	blank	it_alert_11	Singapore	Singapore	IT team received SMS with suspicious link. Investigation ongoing.	SMS sender blocked for all IT members.	IT team flagged SMS. No data loss.
INC202300020	vendors	0	false	France	2023-04-15T21:14:56	other	website	partner_admin	resolved	2023-04-17	medium	0	blank	blank	partner_77	Paris	Île-de-France	Vendor reported fake website collecting RFP details.	Website taken down. Vendors notified.	No vendor data exposed. Monitoring continues.

What the 500 rows show

from the 500-row sample

Executives (target group) stands out: mean employee_affected_count is 2.6, against 0.43 for the rest.

42%data_compromised = true
0median employee_affected_count
3customer education types
4incident types
4attack vectors
4incident statuses

Mean employee_affected_count by target_group500 rows

employee_affected_count500 rows, in bands of 1

Median 0, from 0 to 6.

location_country500 rows · top 10 of 17 values

USA119
India69
Australia49
UK38
South Africa36
Germany33
Canada28
Switzerland28
Spain28
Brazil20

21 columns by typefrom the column list below

string 15
integer 2
date 2
datetime 1
boolean 1

Columns

21 columns in four groups

blueprint · 21 columns
column	type	description	example
Text 15 columns
`incident_id`	string	Unique identifier for each reported incidentunique	INC202300001
`incident_type`	string	Type of incident (e.g., phishing, social engineering, phone scam)phishing · social_engineering · phone_scam · other	phishing
`target_group`	string	Group or department targeted by the incident (e.g., customers, employees, executives)6 groups	customers
`attack_vector`	string	Primary method used in the attack (e.g., email, phone, SMS, website)4 vectors	email
`description`	string	Detailed description of the incident	Customer received suspici…
`detected_by`	string	Person, team, or system that detected the incidentoptional	spam_filter_01
`incident_status`	string	Current status of the incident (e.g., open, investigating, resolved, closed)open · investigating · resolved · closed	resolved
`impact_level`	string	Severity or impact level of the incident (e.g., low, medium, high, critical)low · medium · high · critical	medium
`prevention_measures`	string	Summary of prevention measures taken after the incidentoptional	Enabled multi-factor auth…
`analysis_summary`	string	Summary of incident analysis and lessons learnedoptional	Incident was contained an…
`customer_education_type`	string	Type of customer education provided (e.g., email campaign, webinar, training)email_campaign · webinar · training · other · optional	email_campaign
`reported_by`	string	Name or identifier of the person who reported the incidentoptional	support_bot_1
`location_city`	string	City where the incident occurred or was reportedoptional	New York
`location_state`	string	State or region where the incident occurred or was reportedoptional	New York
`location_country`	string	Country where the incident occurred or was reportedoptional	USA
Numbers 2 columns
`customer_affected_count`	integer	Number of customers affected by the incident0 or more · optional	0
`employee_affected_count`	integer	Number of employees affected by the incident0 or more · optional	0
Dates and times 3 columns
`report_date`	datetime	Date and time when the incident was reported	2023-01-04T10:13:27
`resolution_date`	date	Date when the incident was resolved or closedoptional	2023-01-05
`customer_education_date`	date	Date when customer education or awareness was conductedoptional	2023-01-11
True or false 1 column
`data_compromised`	boolean	Indicates if any sensitive data was compromised	false

Phishing and Social Engineering Incidents

Sample rows

What the 500 rows show

Columns

Use it for

A technology dashboard

A root-cause class exercise

A software demo

Make it yours.

Same schema. As many rows as you need.

What should your data show?

Sample rows

What the 500 rows show

Columns

Use it for

A technology dashboard

A root-cause class exercise

A software demo

Make it yours.

Same schema. As many rows as you need.

More in Technology

What should your data show?