T–MINUS
Winter allocations openChristmas orders close 7 DecemberPrepare now

Live · refreshed every few minutes

The incident clock

Cyber incidents used to be news. Now they are weather. This clock counts the time since the latest confirmed one, from two public feeds: the US government's catalogue of software flaws under active attack, and new breaches added to Have I Been Pwned. Leave it open and watch it reset.

Incident clock · live

T+ --:--:--

since PHP patched two critical holes that let attackers take over web servers. Help Net Security

  • 4 a weeknationally significant cyber-attacks on the UK (NCSC)

Live from the feeds

The latest confirmed incidents

  1. Loading the live feed…

The record

What has already happened

  1. The Government launches Be Ready

    A three-year campaign asks every household to manage three days alone: three litres of water per person per day, a radio, cash, printed documents. GOV.UK

  2. Black October: PHP patches two critical holes

    The flaws let attackers take over web servers without logging in. AI helped find them, and attackers were already probing four days before the fix. Help Net Security

  3. Only 13% of households say they're prepared

    Just 4% of UK adults have three days of bottled water at home. Fewer than a quarter own a battery or wind-up radio. Cabinet Office

  4. AI models escape a test and break into Hugging Face

    OpenAI says models it was testing escaped their sandbox and compromised parts of Hugging Face's production systems. Axios

  5. The National Risk Register adds digital resilience failure

    It rates a national power outage as catastrophic, and assumes full, stable power could take about a week to restore. Cabinet Office

  6. 204 nationally significant cyber-attacks in a year

    The UK's cyber agency handled four a week in the year to August 2025, up from 89 the year before. NCSC

  7. A cyber-attack stops Jaguar Land Rover for five weeks

    The Cyber Monitoring Centre puts the cost to the UK at about £1.9bn, across more than 5,000 organisations. CMC

  8. Spain and Portugal go dark

    A blackout hits both countries around midday. As phones and the internet fail, portable radios and batteries sell out in small shops. RSF

  9. A cyber-attack stops M&S taking online orders

    Orders stay paused for 46 days. The Co-op is attacked the same month. Reuters

  10. A substation fire shuts Heathrow

    The North Hyde fire cuts power to more than 71,000 homes and businesses and closes the airport for most of the day. NESO

  11. Barclays payments fail on payday

    More than half of attempts to make an online payment failed, on payday and the self-assessment deadline. Barclays expects to pay up to £7.5m in compensation. Alliance News

  12. Two storms, eight million phones

    Across Storms Darragh and Éowyn, the Government's emergency alert sounded on about 8 million phones, warning of danger to life. UCL

  13. One faulty update knocks out thousands of UK services

    The Government's risk register says the CrowdStrike outage may have cost the UK economy £1.7bn to £2.3bn. National Risk Register

How the clock works

Only confirmed incidents count

The clock resets when one of two public sources confirms something new. The US Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw to its catalogue of vulnerabilities known to be under active attack, or a newly verified data breach is added to Have I Been Pwned, the breach-notification service run by security researcher Troy Hunt. We check both every few minutes.

We leave out rumours, unverified claims and criminals' own leak-site posts. The record of major incidents is kept by hand, with a source on every line.

Is this every cyber-attack?
No. Many attacks are never made public, and the clock only counts incidents confirmed by the two sources it watches. The real pace is faster than it looks.
Why does a US list matter in the UK?
The software is the same. A flaw confirmed under attack in the US sits in the same systems that run British firms, councils and hospitals.
Does this mean the power will go out?
No. Most incidents never reach households. The point is the pace: the more often systems are breached, the more often one breach becomes an outage, as it did for Jaguar Land Rover's suppliers and M&S customers in 2025.
What should I do about it?
Keep enough at home to manage without power, water, shops or the internet for at least three days, which is what the Government's Be Ready campaign asks. The readiness test shows where you stand in a minute.

Winter allocations open · Christmas orders close 7 December

Prepare now

Every kit is assembled by hand and numbered, so each month's allocations are limited. Tell us who it is for and we will confirm your allocation, delivery date and any changes for allergies, infants, pets or medical needs.

  • No payment is taken until your kit and delivery date are confirmed.
  • Dispatch within 10 working days for T+3 and T+7. Installed kits are scheduled with you.
  • Gifting: we deliver to the recipient with a handwritten card and no prices inside.