Step into the Underground

The global threat landscape is changing, but that does not mean risk is receding. AI is beginning to accelerate key parts of the attack lifecycle, from phishing and vulnerability research to malware development and operational planning. At the same time, geopolitical tensions continue to shape hacktivist and state-linked activity, pushing threat actors toward higher-impact targets. Explore these 2026 cybercrime statistics, updated monthly.

Cyber Threats

In the past 12 months, there have been...

 
3.1M

Endpoint logs for sale

Go deep

1.5K

Hacktivist Ops

Cybercrime incidents per sector

Across these sectors, ransomware dominates while data breaches and hacktivism continue to rise, offering a snapshot of how the underground cybercrime economy is evolving. Go deeper to explore expanded insights and additional industries.

Pulse logo
  • BT.com UK Telecom Company Database Breach with 1.5M Corporate Business Records
  • Massive data breach at Global Schools Foundation exposes sensitive student and employee data
  • Offering services for corporate network access with admin rights via Google Ads
  • CRUCIFERRA crypt malware bypasses antivirus and EDR for $1200 per month
  • Underground forum post discusses vulnerabilities in Macedonian online store
state of the underground cta cover

featured report

Ransomware is up. Credential leaks are rising quickly. Malware is diversifying. This year’s report drills into how cybercriminals are evolving—and what defenders must do to keep up. We analyzed millions of endpoints, credentials, and forums to expose the realities of the cyber underground in 2024. This isn’t theory—it’s what’s actually happening right now.

Free Benchmark Report

Free, customized cyber risk benchmark report

This custom report provides key takeaways regarding your company’s cybersecurity posture (likelihood of breach, industry benchmarks, and threat insights) using Bitsight data that has been independently verified to have the strongest correlation to the likelihood of a cyber incident.