How attacks work
Event types, techniques, and which sectors attract which methods
Exploitive
51.6%
8,700 incidents
Data theft or breach, no disruption
Disruptive
30.6%
5,157 incidents
Operational disruption, no data theft
Mixed
16.5%
2,790 incidents
Both: e.g. ransomware (encrypt + exfiltrate)
Top 12 attack subtypes by incident count. Colours indicate the predominant event type for each technique. "Message Manipulation" covers disinformation and influence operations.
Share of annual incidents by top 10 subtypes in the selected period.
Top 10 industries in the selected period. Stacked bars show the breakdown by attack type.
Percentage share of each attack type within each industry (rows sum to ~100%). Reveals structural differences: public administration faces more disruption; finance and healthcare face more exploitation.
Countries with the most incidents of the selected attack type in the selected period.