Digital Twin Security Incidents
The incident model is ready; publication waits for source-supported classification.
CURRENT STATUS
No initial incident is labeled as a confirmed digital-twin compromise. This restraint is deliberate: an ordinary ICS or cyber-physical incident is not automatically a digital-twin incident.
Inclusion model
Confirmed twin incident
Sources directly establish a compromise of an implemented digital twin or its defining relationship.
Related cyber-physical incident
Evidence is relevant to twin architecture, but does not establish a compromised twin.
Research analogue
A controlled experiment or model-integrity event informs defensive design without being a real-world twin incident.
Future records will expose date, sector, classification, affected system, incident type, impact, twin relevance, techniques, controls, sources, confidence, and last review.