Data & Downloads
The Atlas dataset is open. Export it, inspect the field definitions, and reproduce every derived score yourself.
CSV is a flat, one-row-per-case export (good for spreadsheets). JSON preserves the full nested record structure. Both are generated from the same source data that powers the site.
Codebook
Field definitions for the CSV export. Derived scores (unpeace, entanglement) are documented in methodology §06 and can be recomputed from the other columns.
| Field | Description |
|---|---|
| id | Stable unique identifier for the incident record. |
| slug | URL slug (matches /cases/<slug>). |
| name | Full incident name. |
| shortName | Short display name. |
| year | Primary year of the operation. |
| dateRange | Human-readable date range. |
| incidentType | espionage | destructive | ransomware | influence | sabotage | hybrid. |
| attributedTo | Named responsible actor (as publicly attributed). |
| attributionCountry | Attributed state nexus. |
| attributionConfidence | confirmed | high | moderate | low | contested. |
| peakTier | Peak escalation tier: probing…strategic. |
| unpeaceScore | Composite severity, 0–100 (see methodology §06). |
| entanglementScore | Cross-dimension spread, 1–10 (see methodology §06). |
| targetSectors | Affected sectors (semicolon-separated). |
| targetCountries | Affected countries/regions (semicolon-separated). |
| thresholdCrossings | Escalation thresholds crossed (semicolon-separated). |
| governanceFlags | Governance mechanisms triggered (semicolon-separated). |
| attackTechniques | MITRE ATT&CK technique IDs (semicolon-separated). |
| lastUpdated | Date the record was last reviewed (if set). |
Changelog
2024-12
Landmark cases (NotPetya, SolarWinds, Stuxnet, WannaCry, Viasat KA-SAT) reviewed; verified primary-source URLs and additional academic/journalistic references added; per-record review dates set.
2024
Dataset expanded with 2024 operations and additional globally-sourced and attribution-focused cases.
2023
Initial corpus assembled: 20 seed cases across escalation, infrastructure, and governance lenses.
Candidate cases under consideration are tracked in docs/dataset-todo.md and are not added until fully sourced.