Data Destruction
0 confirmed incidents.
VERIS: hacking:Exploit vulnMITRE ATT&CK: T1561 (Disk Wipe)T1565 (Data Manipulation)T1485 (Data Destruction)
MITRE ATT&CK technique names and ids on this page are reproduced and distributed with the permission of The MITRE Corporation. © 2015–2026, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
Data destruction covers an attack whose primary effect is deleting, wiping or corrupting data rather than stealing it. It maps to three MITRE ATT&CK techniques: T1485 (Data Destruction), permanently deleting files or data structures so they cannot be recovered; T1561 (Disk Wipe), overwriting an entire disk or partition; and T1565 (Data Manipulation), altering data to disrupt normal operations or mislead its reader. Because destruction and unauthorized copying often happen in the same intrusion, a data-destruction incident here can still involve exposure if data was read or exported first.
No confirmed incidents currently carry this attack-type classification.
Questions and answers
How many confirmed incidents are classified as Data Destruction on Breach Census?
0 confirmed incidents are currently classified as Data Destruction.
Which MITRE ATT&CK techniques does the Data Destruction classification cover?
This classification maps to MITRE ATT&CK techniques T1561 (Disk Wipe), T1565 (Data Manipulation), T1485 (Data Destruction).
What counts as a confirmed incident for the Data Destruction classification?
An incident counts here once it carries the Data Destruction attack-type classification and has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.