Global Cyber Incident Landscape

Recorded cyber incidents across 130+ countries, 2014–2026

16,860incidents · Jan 2014 – May 2026
Show:

Grey = no events recorded. Reflects reporting gaps, not absence of cyber activity.

At a glance · Jan 2014 – May 2026

Confirmed incidents

16,860

Jan 2014 – May 2026

Countries affected

177

distinct, all time

Peak year

2022

2,564 events

Top targeted sector

Public Administration

19.7% of events in range

This data reflects publicly reported, confirmed-impact incidents. Countries with weaker disclosure ecosystems, less English-language coverage, or fewer mandatory reporting requirements are systematically under-represented, regardless of actual exposure.

Headline indicators · Jan 2014 – May 2026

CAGR 2014–2025

+8.8%

avg. annual growth in recorded incidents

Critical infrastructure

56.3%

of incidents hit key sectors

Attribution gap

57.8%

events with no named actor

Nation-state share

7.2%

of incidents attributed to states

Ransomware share

16.5%

of all attack types

How incidents break down · Jan 2014 – May 2026

Share of events across four dimensions. Hover a segment to see the label.

By actor type

73.6%Criminal
12.9%Hacktivist
7.2%Nation-State
4.9%Undetermined
1.2%Hobbyist
0.2%Terrorist

By primary motive

58%Financial
20.8%Undetermined
11.5%Protest
5.5%Political-Espionage
2.7%Sabotage
1.5%Others

By attack type

51.6%Exploitive
30.6%Disruptive
16.5%Mixed
1.3%Undetermined
Filter by

Most targeted countries

Jan 2014 – May 2026

United States
7,934
United Kingdom
861
Russia
501
Italy
473
Ukraine
451

Attack origins

Media-attributed · Jan 2014 – May 2026

Russia
2,041
China
279
North Korea
199
Iran
194
Ukraine
180

Top targeted sectors

Jan 2014 – May 2026

Public Administration
3,245
Healthcare & Social
2,252
Information
1,868
Finance and Insurance
1,609
Educational Services
1,481

Top attack techniques

Jan 2014 – May 2026

App. Server Exploitation
7,462
Data Attack
4,113
External DoS
1,950
End Host Exploitation
1,851
Message Manipulation
1,389