Skip to content
NetarxImpact Database
Database

Social engineering incidents

277 entries spanning 1995 to 2026. Filter by how the attacker reached the human, what it cost, and whether AI was involved.

View as JSON
Showing 1 of 1 entries
March 2011·Technology

RSA SecurID breach begins with '2011 Recruitment Plan' spear phishing email

RSA Security (EMC) · United States

In March 2011 attackers stole information related to RSA's SecurID two-factor authentication product after two small groups of RSA employees were sent spear phishing emails carrying a booby-trapped Excel attachment. RSA executive Uri Rivner publicly described the lure email as being titled '2011 Recruitment Plan.' The stolen SecurID data was subsequently used in attempted intrusions at US defense contractors, and RSA offered to replace tokens for customers.

Spear Phishing (Email)
$66.0M business impactConfirmed3 sources

Entry types: Incident, Campaign, Benchmark. Aggregate agency statistics are kept as benchmarks and are never summed into the counters. Methodology. Machine-readable version of this page: global-social-engineering-impact-da.vercel.app/api/incidents?q=Suspected+nation-state+actor+%28widely+reported+as+China-linked%3B+never+formally+attributed+by+RSA%29.