Increase in Cyber Incidents Linked to State Actors and Criminal Activity

• •369 significant cyber incidents reported, up from 331 in 2024/25.
• •23% of incidents linked to state actors, down from 25% last year.
• •44% of incidents were financially motivated, showing a rise in criminal activity.

The Cyber Threat Report 2026 indicates a rise in significant cyber incidents, with 369 incidents triaged for potential national significance, up from 331 in the previous year. Of these, 23% (86 incidents) are linked to suspected state actors, a decrease from 25% in 2024/25. Conversely, 44% (162 incidents) were attributed to criminal or financially motivated activities, up from 41%. The total direct financial loss recorded is $23.8 million, a decrease from $26.9 million in the previous reporting period. The report also notes that 33% (121 incidents) could not be linked to any specific actor. The NIST glossary defines a cyber threat as any circumstance that could adversely impact operations or assets through unauthorized access or information modification.