Abstract: A method of detecting an event anomaly includes receiving one or more data points, in which each data point represents a spatial or temporal event, associating a unique identifier with each of the one or more data points to obtain one or more individualized data points, distributing the one or more individualized data points across a grid, in which the grid includes one or more cells, determining an event likelihood ratio for one or more of the grid cells, identifying one or more event clusters, in which each event cluster includes one or more of the grid cells, and storing in a data repository an event cluster having a significance level above a threshold significance level.