Some common categories of incidents (not a fully inclusive list):
1. Unauthorized access to critical resources
2. Denial of service of a web application
3. Endpoint compromised by malware (via phishing attack)
4. Suspected breach (exposure) of sensitive information (medical records, customer contacts)
5. loss of personal identifiable information (email addresses, usernames/passwords)