Newsroom
New report identifies 34 verified cyber incidents and 244 additional organizations named by ransomware groups, underscoring security challenges facing U.S. businesses and MSPs.
San Francisco — October 21, 2026 — HENNGE Inc., a cloud identity and cybersecurity company, today announced the release of its September 2026 U.S. Cyber Incident Report, examining publicly reported cyberattacks across the United States and the security risks facing organizations of all sizes.
The report identifies 34 verified cyber incidents affecting U.S. organizations during September, with stolen or phished login credentials accounting for 9 of the 21 incidents with a publicly known cause. An additional 244 U.S. organizations were named on ransomware leak sites, although those claims remain pending independent verification.
Compiled from state and federal breach filings, local and national news coverage, and ransomware leak-site monitoring, the report provides an overview of recent cyber incidents and their implications for managed service providers (MSPs) and the small and midsize businesses they support.
Among the verified incidents, local governments, school districts, and SMBs each accounted for eight cases. Several incidents disrupted essential operations, including school closures, government service outages, and compromised email accounts used to distribute fraudulent messages.
The report also highlights the potential scale of ransomware activity beyond officially confirmed incidents. Manufacturing, professional services, and healthcare were among the industries most frequently named by ransomware groups, demonstrating how smaller organizations can face significant exposure even when attacks receive little public attention.
“Cyberattacks don't always begin with sophisticated exploits. In many cases, attackers are finding ways in through credentials that have already been compromised,” said Robert Sharp, President and CEO of HENNGE Inc. “For MSPs, these findings reinforce the importance of looking beyond basic authentication and making stronger access controls part of everyday client protection.”
In addition to its incident analysis, the report outlines five practical security measures organizations and MSPs can take to address the risks observed in September. These include strengthening authentication with conditional access, restricting sign-ins to trusted devices, reviewing third-party access, monitoring email account activity, and preparing for extended operational disruptions.
The September 2026 U.S. Cyber Incident Report is available for free download and includes a breakdown of the 34 verified incidents, industry-level ransomware activity, and recommended security measures.
About HENNGE Inc.
HENNGE Inc. is the North American subsidiary of HENNGE K.K., delivering cloud identity and cybersecurity solutions to organizations and managed service providers across the United States. HENNGE helps organizations strengthen access to cloud applications and protect users, data, and devices through identity and cybersecurity solutions designed for modern cloud environments.
