Compass Brief — 2026-07-22 — EMEA

Executive Summary

Tropical Storm Bertha is the primary operational concern for this window, with an active open incident placing approximately 61,420 contact-center and BPO seats across New Orleans-Metairie, Baton Rouge, and Shreveport-Bossier City, LA under landfall-threat conditions ahead of an expected Gulf Coast touchdown on Wednesday, July 23. All 12 monitored risk domains are active this window — none are quiet — producing a risk posture of Elevated, driven by concurrent severe weather across EMEA (Poland, Romania, Spain, Italy), an open Microsoft 365 espionage campaign, and a China internet outage, alongside the US Gulf Coast storm track.

---

Lead Highlights

Tropical Storm Bertha — Gulf Coast Landfall Threat / TS Warning (FL Panhandle to Morgan City, LA incl. New Orleans)

Two open incidents track the same system under separate warning products. Tropical Storm Bertha (50 kt / 60 mph) is drifting WNW through the northern Gulf of Mexico with landfall anticipated near the northern Gulf Coast on Wednesday, July 23. A Tropical Storm Warning is in effect from the Florida Panhandle westward to the Terrebonne/Lafourche Parish Line, Louisiana, encompassing the New Orleans metro. Coastal Flood Warnings are active for MS/LA coastlines with up to 4 ft storm surge forecast; flash flooding is possible from western Florida through southern Louisiana through Friday, July 25. The exposed population is estimated at ~61,420 seats across three named hubs: New Orleans-Metairie, LA (primary blast radius), Baton Rouge, LA, and Shreveport-Bossier City, LA. Pre-landfall deterioration — high winds, storm surge ingress, and flash flooding — creates the realistic planning scenario for site closures or degraded access in New Orleans-Metairie beginning as early as tonight (Tuesday evening local). Baton Rouge and Shreveport-Bossier City carry secondary risk from inland flooding and potential overflow routing demand. Exposure is rated low against total seat inventory, but given concentration in a single metropolitan risk zone, site-level impact can be acute even at low aggregate exposure.

---

Domain Watch

• Weather — ACTIVE: 93 signals, 8 open incidents, max severity 10. Red Thunderstorm warnings at severity 10 are in effect across multiple counties in Poland's Lubuskie Province (Sulęcińśki, Gorzowski, Gorzów Wielkopolski counties), with a separate severe storm warning covering Kreis Anhalt-Bitterfeld, Germany (UNWETTERWARNUNG: orkan gusts, extreme heavy rain, hail). Open incidents also cover severe torrential rain in Bucharest, Romania; extreme heat in Madrid, Spain; and a Red High-Temperature Warning for Puglia, Italy. Gulf Coast Bertha incidents noted (see Lead Highlights).

• Seismic — ACTIVE: 74 signals, max severity 6. Top signal is M 5.0 approximately 55 km WSW of Langsa, Indonesia. No signals reach the exposure threshold for EMEA or major contact-center hubs.

• Cyber — ACTIVE: 48 signals, 1 open incident, max severity 10. Open incident: HOLLOWGRAPH espionage campaign exploiting Microsoft 365 Calendars, targeting Dallas-Fort Worth contact-center and knowledge-worker environments. Separately, an AutomationDirect Productivity Suite vulnerability is signaled at severity 10 out of Denver.

• Health — ACTIVE: 26 signals, max severity 6. Notable signal: Avian Influenza A(H9N2) detected in Italy. No signals at incident threshold.

• Geopolitical — ACTIVE: 23 signals, max severity 8. Top signal involves the Black Sea missile strike with diplomatic implications (India/Russia/Ukraine vector); demoted to Context — no exposed workforce.

• Supply Chain — ACTIVE: 5 signals, max severity 7. Houthi maritime blockade declaration against Saudi Arabia is the top signal; demoted to Context — no exposed workforce in affected region.

• Labor — ACTIVE: 2 signals, max severity 5.5. Notable: Telangana gig workers' strike action on July 22 (Telangana, India); Romanian salary law blocked by Bucharest Court of Appeal (Sanitas union involvement, Romania).

• Infrastructure — ACTIVE: 10 signals, 1 open incident, max severity 8. Open incident: Internet outage across China, affecting contact-center and knowledge-worker operations. Multi-state severe storm power outage (OH, WV, MI, KY, VA — 210K+ customers) also in signal feed.

• Travel — ACTIVE: 44 signals, 3 open incidents, max severity 9. Open incidents include: heavy traffic congestion in Dallas, TX; FAA mass ground stop/delay program covering NE Corridor (JFK/LGA/EWR/PHL/IAD/DCA/BOS); and a TfL Circle Line part-suspension active in London, GB. Global oil price spike and shipping cost inflation tracked as ongoing signal.

• Financial — ACTIVE: 11 signals, max severity 5.5. Top signal: Pakistan requests $10B US facility to strengthen reserves (Islamabad). No signals at incident threshold.

• Environmental — ACTIVE: 16 signals, 1 open incident, max severity 8. Open incident: Extreme UV index (11.8) in Mexico. France wildfire season tracking at elevated level (noted in news intake; no geo_density exposure resolved).

• Disaster — ACTIVE: 121 signals, max severity 7. Top signals include a stabbing incident near the Acropolis, Athens, Greece, and wildfire activity in Crook County, Oregon (Henry fire). No signals at incident threshold for EMEA workforce exposure.

Quiet: none — all 12 domains are active this window.

---

Context / Watching

• Black Sea missile strike / Indian nationals killed (Ukraine) — Russian military strike killed four Indian nationals in the Black Sea theater; Russia states contact with India but confirms strikes will continue. Military/defense event; no exposed contact-center or knowledge-worker workforce.

• Houthis declare maritime blockade on Saudi Arabia — Houthi forces announced a maritime blockade targeting Saudi Arabian shipping. No exposed workforce in the affected maritime zone.

• Russia/India diplomatic developments (Ukraine deaths) — Parallel diplomatic signaling between Moscow and New Delhi over the Black Sea incident. No exposed workforce in the affected region.

• North Texas extreme heat — construction/pet-owner advisory — Local public-health advisory for outdoor workers and pet owners in North Texas. No geo_density workforce exposure resolved for this event.

• Nigeria — Ansaru commanders jailed for life (terrorism) — Nigerian court sentenced two Ansaru terror commanders to life imprisonment. No exposed contact-center or knowledge-worker workforce in the affected region.

• France — worst wildfire season since 2022 — Wildfire activity across France is tracking at historically elevated levels. No geo_density workforce exposure resolved for this event.

---

Active Incidents

Thirteen incidents are currently open. EMEA-relevant incidents are highlighted first:

• [OPEN — EMEA] Orange Gale Warning — Central Poland (Sev 10): Active gale-force storm system affecting central Poland. WFM leaders with Poland-based delivery should confirm site accessibility plans and monitor for power and transport disruption in affected provinces.

• [OPEN — EMEA] Red High-Temperature Warning — Puglia, Italy (Sev 10): Extreme heat advisory for Puglia. Site managers should verify cooling adequacy and assess attrition risk for agents commuting without air-conditioned transport.

• [OPEN — EMEA] Severe Heat Warning — Madrid, Spain (Sev 10): High-temperature warning covering the Sierra de Madrid zone. Confirm welfare checks and attendance contingency for Madrid-based contact-center staff.

• [OPEN — EMEA] Severe Torrential Rain Warning — Bucharest, Romania (Sev 10): Extreme rainfall (25–70+ l/m²) forecast for the mountain zone influencing Bucharest. Monitor for transport disruption and site access issues; Romanian labor signal (Sanitas/salary law) adds a parallel watchpoint.

• **[OPEN — EM

External Corroboration

Independent external sources for today's lead highlights (via Exa), distinct from the internal signals above.

• Tropical Storm Bertha – Gulf Coast Landfall Threat — corroborated: pbs.org, nbcnews.com, cnn.com

• TS Bertha — Gulf Coast Tropical Storm Warning (FL Panhandle to Morgan City LA incl. New Orleans) — corroborated: cnn.com, nbcnews.com, wafb.com

Top Operational-Risk Signals — EMEA Window

The severity-ranked events on the board this window (last 8h). Included so an eventful-but-no-incident window still reads as a live board — the shelf is never silent.

• [weather] Sev 10 — "[Lubuskie Province SulęCińSki County] weather 10.0 — Red Thunderstorm warning for Poland - Lubuskie Province Sulecinski County" (Lubuskie Province SulęCińSki County)

• [weather] Sev 10 — "[Lubuskie Province Gorzowski County] weather 10.0 — Red Thunderstorm warning for Poland - Lubuskie Province Gorzowski County" (Lubuskie Province Gorzowski County)

• [weather] Sev 10 — "[Lubuskie Province GorzóW Wielkopolski County] weather 10.0 — Red Thunderstorm warning for Poland - Lubuskie Province Gorzow Wielkopolski County" (Lubuskie Province GorzóW Wielkopolski County)

• [weather] Sev 10 — "[Bucharest] weather 10.0 — În zona de munte cantitățile de apă vor fi de 25...50 l/mp și pe arii restrânse de peste 60...70 l/mp." (Bucharest)

• [weather] Sev 10 — "[Madrid] weather 10.0 — Severe high-temperature warning. Sierra de Madrid" (Madrid)

• [weather] Sev 10 — "[Rome] weather 10.0 — Red High-temperature Warning for Italy - Sardegna" (Rome)

• [cyber] Sev 10 — "[Denver] cyber 10.0 — AutomationDirect Productivity Suite" (Denver)

• [weather] Sev 10 — "[Kreis Anhalt Bitterfeld] weather 10.0 — Amtliche UNWETTERWARNUNG vor SCHWEREM GEWITTER mit ORKANBÖEN, EXTREM HEFTIGEM STARKREGEN und HAGEL" (Kreis Anhalt Bitterfeld)

Watching — Did Not Escalate

Candidates that were evaluated by admission control but did NOT rise to an incident (denies / suppressions / holds). Rejection is not disappearance — these remain on the shelf, visible.

• [cyber] "[Dfw] cyber 10.0 — CISA Adds Four Known Exploited Vulnerabilities to Catalog" — evaluated and denied — no actionable WFM nexus (cyber_asset_deny)