TechCrunch's mid-year roundup argues that cybersecurity has moved from a background concern to a central feature of 2026's news, with digital attacks now intertwined with warfare, government overreach and infrastructure disruption. The piece highlights two major strands so far this year: unresolved questions over the Department of Government Efficiency's (DOGE) handling of Social Security data, and a growing wave of nation-state attacks on civilian energy and water infrastructure across Europe and the US.

More than a year after DOGE operatives swept through federal agencies, litigation continues over a whistleblower's claim that a live copy of the Social Security database, reportedly containing personal data on most living Americans, was uploaded to an unsecured third-party server; House Democrats have called it potentially the largest data breach in US history. Separately, attacks linked to Russia have hit Poland's energy grid, a Swedish thermal plant, a Norwegian dam and Polish water treatment plants, while Iranian-linked hackers have targeted US critical infrastructure following the recent US-Israel conflict with Iran, prompting a response from the Cybersecurity and Infrastructure Security Agency (CISA).