DP World Australia shut its ports for days after an unpatched-vulnerability hack
Analysts said the ports operator left CitrixBleed unpatched for over a month; 30,137 containers backed up and employee data was stolen.
Read the casemistake.clubA CASESTUDIES.CHAT ARCHIVE
Learn from mistakes.
Preferably not your own.
Business failures, costly decisions and the lessons they leave behind.
The full archive, in the appPublished cases
2,000 PUBLISHED CASES · REGULARLY UPDATEDFaulty access-control servers took DBS digital banking down for two days
DBS's worst outage in a decade downed digital banking and PayNow for two days in Nov 2021, drawing MAS's warning of 'supervisory action'.
Read the caseCN's internal upgrade cut its own internet link and halted Toronto's GO trains
CN's internal upgrade cut its internet connectivity on 3 Oct 2023, halting every GO Transit line and UP Express and delaying Via trains at Union Station.
Read the caseCeva Logistics hack exposed customers' data across banks, retailers and Steam buyers
Ceva's July 2026 cyberattack hit eight European warehouses and exposed delivery data of Bol, ING, De Bijenkorf, Ajax, Ace & Tate and Valve customers
Read the caseBraid, the $10M-backed shared wallet app, shut down after a sponsor-bank coma
Six months processing $0 in payments left the Index- and Accel-backed startup unable to recover; its founder later bought the IP back at auction.
Read the caseTreasury scrapped BNY's Direct Express deal before a single card migrated
BNY won the Direct Express prepaid card contract in Nov 2024; readiness problems sank the transition and Treasury handed the five-year deal to Fifth Third.
Read the caseBluspark left its global shipping platform exposed, then couldn't be reached
Plaintext passwords and an unauthenticated API opened decades of shipment records — and the researcher couldn't find a way to report it.
Read the caseBillDesk's $4.7B exit to Prosus auto-terminated, stranding a shelved IPO
BillDesk shelved IPO plans for Prosus' $4.7B all-cash buyout; when conditions lapsed on the Sept 30, 2022 long stop date the deal died automatically.
Read the caseBSP's Easter core-banking cutover showed wrong balances and let PNG customers overdraw
PNG's largest bank rolled out a new system over Easter 2023; a glitch showed wrong balances, some customers overdrew, and the bank asked them to repay.
Read the caseAvanti West Coast cut its timetable in half as overtime goodwill ran dry
Running a railway on rest-day overtime worked until drivers stopped volunteering: Avanti slashed services, and its contract got just six more months.
Read the caseACBF sold Aboriginal families funeral plans for 30 years, then collapsed owing $66M
The fund later called Youpla took door-to-door funeral insurance into Indigenous communities — and left 14,500 customers at least $66M out of pocket.
Read the caseABC Carpet & Home filed Chapter 11 after a slow e-commerce shift and pandemic slump
The century-old NYC home-furnishings emporium entered bankruptcy with revenue under half its 2017 level, sold via a $15 million credit bid.
Read the caseYum! Brands ransomware stole company data and closed 300 UK restaurants for a day
The KFC, Pizza Hut and Taco Bell parent confirmed data was stolen in a ransomware attack that forced roughly 300 UK restaurants to close for 24 hours.
Read the caseXbox outage blocked even disc-based games for nearly a full day
A July 2026 Xbox outage stopped sign-ins, the store and game-license checks — including physical discs — until Microsoft mitigated it the next evening.
Read the caseWest Coast Railways lost its High Court bid to avoid central door locking
The Jacobite operator fought the rail regulator's central-locking demand in court rather than pay £7 million — and lost, with two door incidents cited.
Read the caseEmbracer shut 30-year studio Volition after its $2B Savvy deal fell through
The Saints Row reboot underwhelmed, the $2B Saudi-funded investment collapsed, and Embracer closed Volition 'effective immediately'.
Read the caseTwitch banned burned-in ads, streamers revolted, and it scrapped the rules in a day
Twitch's branded-content rules banned the sponsored overlays streamers live on; after an open-letter revolt it removed them within about a day.
Read the caseTreeHouse talked up its $2.7B Conagra deal while it struggled — $27M settlement
TreeHouse Foods spent $2.7B on Conagra's private-label business, kept upbeat guidance while the deal underperformed, and paid $27M to settle investor claims.
Read the caseTencent gutted Fanbyte's staff — and lost control of its Instagram account
Months after its first-ever revenue decline, Tencent laid off nearly all of Fanbyte's editors one by one; the laid-off social manager still had the keys.
Read the caseTarget and Ulta are ending their shop-in-shop deal after employees flagged cracks
610 Ulta beauty shops opened inside Target stores since 2021; after shoplifting, understaffing and cannibalization complaints, the deal ends in August 2026.
Read the case