Step into the Underground

The global threat landscape is changing, but that does not mean risk is receding. AI is beginning to accelerate key parts of the attack lifecycle, from phishing and vulnerability research to malware development and operational planning. At the same time, geopolitical tensions continue to shape hacktivist and state-linked activity, pushing threat actors toward higher-impact targets. Explore these 2026 cybercrime statistics, updated monthly.

Cyber Threats

In the past 12 months, there have been...

 
3.1M

Endpoint logs for sale

Go deep

1.5K

Hacktivist Ops

Cybercrime incidents per sector

Across these sectors, ransomware dominates while data breaches and hacktivism continue to rise, offering a snapshot of how the underground cybercrime economy is evolving. Go deeper to explore expanded insights and additional industries.

SOTU 2026 Image

featured report

Ransomware is up. Credential leaks are rising quickly. Malware is diversifying. This year’s report drills into how cybercriminals are evolving—and what defenders must do to keep up. We analyzed millions of endpoints, credentials, and forums to expose the realities of the cyber underground. This isn’t theory—it’s what’s actually happening.

Free Benchmark Report

Free, customized cyber risk benchmark report

This custom report provides key takeaways regarding your company’s cybersecurity posture (likelihood of breach, industry benchmarks, and threat insights) using Bitsight data that has been independently verified to have the strongest correlation to the likelihood of a cyber incident.