A notable attack could include a bombing, an attack on someone who works there, a hack, etc. The attack does not need to be successful; a bomb that doesn't detonate would still count. However the planned attack must actually matter. Some graffiti on the wall of an AI lab is not going to resolve this YES, though more significant vandalism like cutting the internet cables could count.

A large, sustained, in-person protest would also count, even if nothing is violent. Must be at least 500 people over the course of at least a week, and actually cause disruption to them.

Any hack counts if it's seriously disruptive. A data breach alone is not good enough.