We heard from a few sec engineers in our team that's there's no great open database of security incidents

Over the past 2 months a few people in my team have been manually building one from public data. It's in early stages, but plan to keep it free.