March 2026

An independent, attributed roundup of the major cybersecurity incidents of March 2026 — from the TeamPCP supply-chain campaign that poisoned LiteLLM and security-scanner packages on PyPI, to the Handala wiper that erased 200,000+ Stryker devices, the Cl0p Oracle E-Business Suite extortion wave, and breaches at Cegedim Sante, Navia, Aura, Crunchyroll and Telus. Each item carries a verification status (confirmed, claimed or rumoured) and a clearly-labelled subjective editorial severity, with a defensive takeaway.