Transportation
22 columns
88 rows
8 formats

Smart Traffic System Incident Logs

This dataset provides detailed logs of cyber incidents impacting smart city traffic systems, including incident types, severity, affected devices, locations, response actions, and resolution status. It enables public safety planners and IT teams to analyze vulnerabilities, monitor infrastructure resilience, and inform proactive risk management for secure civic IoT operations.

last updated 11 Dec 2025
by GoMask

The brief that made it

Vulnerability analysis and risk assessment for smart city traffic infrastructure

Sample rows

preview · 8 of 88 rows · all 22 columns

incident_idstring	response_actionstring	incident_severityinteger	resolvedboolean	location_citystring	incident_datetimedatetime	system_idstring	system_typestring	location_streetstring	location_statestring	location_postal_codestring	location_countrystring	incident_typestring	detected_bystring	response_datetimedatetime	resolution_datetimedatetime	impact_on_trafficstring	reported_to_authorityboolean	report_reference_numberstring	iot_vendorstring	firmware_versionstring	descriptionstring
INC-20240601A1	isolated_device	3	true	Atlanta	2024-06-01T07:32:12	SYS-1001	traffic_light	835 Maple Ave	GA	30303	USA	denial_of_service	automated_system	2024-06-01T07:35:20	2024-06-01T09:12:47	Major congestion reported for 1 hour.	true	ATL-DOS-3001	TraffiTech	v2.4.1	Traffic light at intersection was unresponsive due to network overload.
INC-20240601B2	patched	2	true	Atlanta	2024-06-01T08:10:45	SYS-1017	sensor	15 Peachtree St	GA	30309	USA	malware	automated_system	2024-06-01T08:15:26	2024-06-01T08:45:00	No major impact, sensor data delayed.	false	blank	SensorWise	1.8.2	Malware detected on traffic flow sensor.
INC-20240601C3	escalated	4	false	Atlanta	2024-06-01T09:24:17	SYS-1023	camera	340 Auburn Ave	GA	30312	USA	data_breach	external_alert	2024-06-01T09:25:52	blank	No direct traffic impact, potential privacy violation.	true	ATL-DBR-2223	CamSecure	3.2.0	Unauthorized access to camera feed; partial data exfiltration.
INC-20240601D4	monitoring	1	true	Atlanta	2024-06-01T10:37:29	SYS-1048	control_hub	990 Spring St	GA	30308	USA	unauthorized_access	automated_system	2024-06-01T10:38:15	2024-06-01T12:03:48	No traffic impact.	false	blank	HubLink	5.0.9	Failed login attempts flagged at control hub.
INC-20240601E5	patched	3	true	Decatur	2024-06-01T11:03:11	SYS-1029	sensor	401 West Ponce	GA	30030	USA	malware	automated_system	2024-06-01T11:10:05	2024-06-01T11:40:31	Brief data outage; no safety impact.	false	blank	SensorWise	1.8.2	Suspicious file found on sensor firmware.
INC-20240601F6	reset	2	true	Atlanta	2024-06-01T12:15:19	SYS-1055	traffic_light	223 Glenwood Ave	GA	30316	USA	anomaly	manual_report	2024-06-01T12:20:02	2024-06-01T12:48:50	Traffic flow slowed for 15 minutes.	false	blank	TraffiTech	v2.5.0	Unusual cycle duration detected in traffic light.
INC-20240601G7	patched	1	true	Atlanta	2024-06-01T13:07:54	SYS-1068	camera	145 Edgewood Ave	GA	30303	USA	other	automated_system	2024-06-01T13:09:45	2024-06-01T13:30:15	No traffic impact.	false	blank	CamSecure	3.1.8	Camera firmware bug caused intermittent video loss.
INC-20240601H8	isolated_device	4	false	Decatur	2024-06-01T13:45:10	SYS-1072	sensor	82 North Ave	GA	30033	USA	denial_of_service	external_alert	2024-06-01T13:49:22	blank	Data unavailable for 2 hours; safety risk.	true	ATL-DOS-1072	SensorWise	1.7.5	Sensor flooded with requests, stopped reporting.
INC-20240601I9	monitoring	2	true	Atlanta	2024-06-01T14:28:03	SYS-1086	control_hub	600 Boulevard Pl	GA	30312	USA	unauthorized_access	automated_system	2024-06-01T14:28:49	2024-06-01T15:45:00	No traffic impact.	false	blank	HubLink	5.0.9	Unauthorized access attempt detected at hub.
INC-20240601J0	reset	2	true	Atlanta	2024-06-01T15:13:36	SYS-1093	camera	77 Moreland Ave	GA	30307	USA	anomaly	manual_report	2024-06-01T15:14:50	2024-06-01T15:33:02	No major impact.	false	blank	CamSecure	3.1.8	Camera reported abrupt disconnects.
INC-20240601K1	patched	3	true	Sandy Springs	2024-06-01T15:55:28	SYS-1104	traffic_light	112 Oak St	GA	30328	USA	malware	automated_system	2024-06-01T15:58:17	2024-06-01T16:38:44	Lights malfunctioned for 20 mins.	true	SS-MAL-1104	TraffiTech	v2.5.0	Malware infection detected in traffic light controller.
INC-20240601L2	reset	1	true	Sandy Springs	2024-06-01T16:36:17	SYS-1119	sensor	390 Central Ave	GA	30328	USA	anomaly	automated_system	2024-06-01T16:40:15	2024-06-01T17:01:05	No traffic impact.	false	blank	SensorWise	1.8.2	Sensor reported invalid readings.
INC-20240601M3	isolated_device	4	false	Sandy Springs	2024-06-01T17:08:51	SYS-1122	control_hub	205 Hammond Dr	GA	30328	USA	malware	external_alert	2024-06-01T17:11:17	blank	Signal coordination lost; severe delays.	true	SS-MAL-1122	HubLink	5.1.0	Critical malware found, hub disconnected.
INC-20240601N4	monitoring	2	true	Marietta	2024-06-01T18:25:40	SYS-1136	camera	2100 Sandy Plains Rd	GA	30066	USA	anomaly	manual_report	2024-06-01T18:26:22	2024-06-01T18:47:55	No traffic impact.	false	blank	CamSecure	3.2.0	Camera reported low frame rate.
INC-20240601O5	isolated_device	3	true	Marietta	2024-06-01T19:02:19	SYS-1148	sensor	540 Canton Rd	GA	30060	USA	denial_of_service	automated_system	2024-06-01T19:05:03	2024-06-01T19:47:20	Delayed data led to brief congestion.	false	blank	SensorWise	1.7.5	Sensor overwhelmed by traffic data requests.
INC-20240601P6	monitoring	2	true	Marietta	2024-06-01T19:44:12	SYS-1152	traffic_light	89 Memorial Dr	GA	30067	USA	unauthorized_access	external_alert	2024-06-01T19:46:25	2024-06-01T20:20:37	No traffic impact.	false	blank	TraffiTech	v2.4.1	Unusual login detected in traffic light controller.
INC-20240601Q7	escalated	4	false	Marietta	2024-06-01T20:16:00	SYS-1164	camera	510 Whitlock Ave	GA	30064	USA	data_breach	external_alert	2024-06-01T20:19:02	blank	No direct impact.	true	MAR-DBR-1164	CamSecure	3.2.0	Camera feed exposed to unauthorized user.
INC-20240601R8	patched	2	true	Marietta	2024-06-01T20:57:47	SYS-1173	sensor	99 Johnson Ferry Rd	GA	30068	USA	malware	automated_system	2024-06-01T20:59:10	2024-06-01T21:14:38	No traffic impact.	false	blank	SensorWise	1.8.3	Malware signature detected in sensor logs.
INC-20240601S9	isolated_device	4	false	Marietta	2024-06-01T21:22:51	SYS-1181	control_hub	408 Windy Hill Rd	GA	30060	USA	denial_of_service	automated_system	2024-06-01T21:23:40	blank	Severe delays and traffic rerouting.	true	MAR-DOS-1181	HubLink	5.1.0	Hub stopped responding due to traffic spike.
INC-20240601T0	reset	1	true	Marietta	2024-06-01T22:05:39	SYS-1197	camera	200 Cobb Pkwy	GA	30062	USA	other	automated_system	2024-06-01T22:07:03	2024-06-01T22:17:28	No traffic impact.	false	blank	CamSecure	3.1.7	Camera rebooted automatically after error.

What the 88 rows show

from the 88-row sample

Escalated (response action) stands out: mean incident_severity is 3.9, against 2.2 for the rest.

81%resolved = true
2median incident_severity
3location countries
3detected_by values
4system types
6incident types

Mean incident_severity by response_action88 rows

incident_severity88 rows, in bands of 0.5

Median 2, from 1 to 4.

location_city88 rows · top 10 of 33 values

Marietta22
Atlanta9
Sandy Springs4
Los Angeles4
Houston4
Toronto3
San Francisco3
Montreal3
Sydney3
Vancouver3

22 columns by typefrom the column list below

string 16
integer 1
datetime 3
boolean 2

Columns

22 columns in four groups

blueprint · 22 columns
column	type	description	example
Text 16 columns
`incident_id`	string	Unique identifier for each cyber incident log entryunique	INC-20240601A1
`system_id`	string	Unique identifier for the affected smart traffic system or device	SYS-1001
`system_type`	string	Type of smart traffic system (e.g., traffic light, sensor, camera, control hub)traffic_light · sensor · camera · control_hub · other	traffic_light
`location_street`	string	Street address where the affected system is located	835 Maple Ave
`location_city`	string	City where the affected system is located	Atlanta
`location_state`	string	State or region where the affected system is located	GA
`location_postal_code`	string	Postal code of the affected system's locationoptional	30303
`location_country`	string	Country of the affected system's location3 countries	USA
`incident_type`	string	Category of cyber incident (e.g., denial_of_service, unauthorized_access, malware, data_breach, anomaly)6 values	denial_of_service
`description`	string	Detailed description of the incident and its impactoptional	Traffic light at intersec…
`detected_by`	string	Source of detection (e.g., automated_system, manual_report, external_alert)automated_system · manual_report · external_alert · other	automated_system
`response_action`	string	Primary action taken in response to the incident (e.g., isolated_device, patched, reset, escalated, monitoring)6 values · optional	isolated_device
`impact_on_traffic`	string	Description of the incident's impact on traffic flow or safetyoptional	No traffic impact.
`report_reference_number`	string	Reference number for any official report filed with authoritiesoptional	ATL-DOS-3001
`iot_vendor`	string	Name of the IoT device vendor/manufactureroptional	TraffiTech
`firmware_version`	string	Firmware version of the affected device/systemoptional	v2.4.1
Numbers 1 column
`incident_severity`	integer	Severity level of the incident (1=Low, 2=Medium, 3=High, 4=Critical)1 to 4	3
Dates and times 3 columns
`incident_datetime`	datetime	Timestamp when the incident was detected or reported	2024-06-01T07:32:12
`response_datetime`	datetime	Timestamp when the response action was initiatedoptional	2024-06-01T07:35:20
`resolution_datetime`	datetime	Timestamp when the incident was resolvedoptional	2024-06-01T09:12:47
True or false 2 columns
`resolved`	boolean	Indicates whether the incident has been resolved	true
`reported_to_authority`	boolean	Indicates whether the incident was reported to city or public safety authoritiesoptional	true

Use it for

A transportation dashboard
The resolved rate, incident_severity by response_action and a breakdown of location_city. Excel, Power BI or Tableau.
Why do the 13 escalated rows have a mean incident_severity of 3.9?
A root-cause class exercise
Hand out the rows and one question. The answer is in the data, not in the brief.
Incidents88
INC-20240601A13isolated…
INC-20240601B22patched
INC-20240601C34escalated
A software demo
Believable incidents with incident_datetime, system_id and system_type to fill a screen in front of a buyer.

This dataset88 rows22 columns

Yours1,000 rows22 columnslocation_street: UK only

blueprint · smart-traffic-system-incident-logs

Behind this dataset

Same schema. As many rows as you need.

These 88 rows came out of a blueprint — 22 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.

Rules it was built with

Each incident log contains a unique event ID and timestamp.
Incident severity is classified as Low, Medium, or High based on system impact.
Affected sensor types must be specified (e.g., camera, signal controller).
Response time to containment is recorded in minutes.
Resolution status must be marked as Open, In Progress, or Closed.

Rows1,000 rows10,000 rows100,000 rows1,000,000 rows

Open the blueprint in Data Factory

1 credit per row. Preview 20 rows free. Buy rows for the full run.

Exports: CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
Licence: yours to use, including commercially
API slug: smart-traffic-system-incident-logs

What should your data show?

No signup. No card.

Sample rows

What the 88 rows show

Columns

Use it for

A transportation dashboard

A root-cause class exercise

A software demo

Make it yours.

Same schema. As many rows as you need.

More in Transportation

What should your data show?