.png?width=640&quality=80&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000)
Root Cause Analyses (RCAs)
At Sophos we strive to learn from our incidents, and to use them as a mechanism for continuous improvement. We feel that transparency is a key part of this process. Below are our root cause analyses (RCAs) for our most recent incidents documenting our findings and the changes made to improve our resiliency.
- INC-2026-002: Developer Job Lure Repository Leads to Malware Execution on a Sophos Employee Mac
- INC-2026-001: Fake “Claude for Mac” Malvertising Leads to a macOS Infostealer Compromise
- INC-2025-003: March 2025 Internal Sophos Phishing Attempt
- INC-2025-002: Sophos Fusion Cross-Tenant Audit Log Exposure
- INC-2025-001: Sophos Email Abused to Send Spam Messages