Counsel Cyber · Incident Response

Real incidents. Full case studies.

Read each report as a web page. The optional PDF download preserves the original document for anyone who wants a copy.

Choose a case study
Account takeover · Oklahoma · April 2026

When a Trusted Email Becomes a Weapon

A real account takeover, automated containment in six seconds, and the follow-up investigation.

Law firm incident · Texas · September 2026

Day One. Already Compromised.

Persistent access discovered in a Texas law firm's Microsoft 365 environment during onboarding.