“Reports a disruptive cyber incident affecting commercial operations without indicating human safety risks or catastrophe.”