Denial of Service
0 confirmed incidents.
VERIS: hacking:DoSMITRE ATT&CK: T1498 (Network Denial of Service)T1499 (Endpoint Denial of Service)
MITRE ATT&CK technique names and ids on this page are reproduced and distributed with the permission of The MITRE Corporation. © 2015–2026, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
Denial of service covers an attack meant to make a system or service unavailable, rather than to read or copy its data. It maps to two MITRE ATT&CK techniques: T1498 (Network Denial of Service), flooding network bandwidth or connections so legitimate traffic cannot get through, and T1499 (Endpoint Denial of Service), overwhelming a specific application or host directly. A denial-of-service incident does not by itself expose personal data, which is why it is tracked separately from the exfiltration and destruction techniques above; it appears on Breach Census only where the same incident also involved a confirmed data exposure.
No confirmed incidents currently carry this attack-type classification.
Questions and answers
How many confirmed incidents are classified as Denial of Service on Breach Census?
0 confirmed incidents are currently classified as Denial of Service.
Which MITRE ATT&CK techniques does the Denial of Service classification cover?
This classification maps to MITRE ATT&CK techniques T1498 (Network Denial of Service), T1499 (Endpoint Denial of Service).
What counts as a confirmed incident for the Denial of Service classification?
An incident counts here once it carries the Denial of Service attack-type classification and has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.