How many cyber attacks in 2026?
As of 2 November 2026, Global Incident Tracker has recorded 39 news-sourced records of cyber attacks in 2026 (records begin on 9 August 2026); the most were in Nigeria (9). One incident can be reported more than once, so this is not a count of separate cyber attacks.
No agency anywhere publishes a live feed of cyber attacks, so every record here comes from news reports. Read the number as a floor, not a total.
2026Month by month
| Month | Recorded | Severe or extreme | |
|---|---|---|---|
| January | 0 | 0 | before records began |
| February | 0 | 0 | before records began |
| March | 0 | 0 | before records began |
| April | 0 | 0 | before records began |
| May | 0 | 0 | before records began |
| June | 0 | 0 | before records began |
| July | 0 | 0 | before records began |
| August | 0 | 0 | |
| September | 10 | 0 | |
| October | 21 | 0 | |
| November | 8 so far | 0 | |
| December | — | — | |
| Total | 39 | 0 |
Severity, then number of reportsThe 10 most severe cyber attacks of 2026
Ranked by this site's severity signal, then by how many separate reports reached us. Neither is a death toll.
2026Countries with the most cyber attacks
| # | Country | Recorded | Severe or extreme |
|---|---|---|---|
| 1 | Nigeria | 9 | 0 |
| 2 | India | 9 | 0 |
| 3 | Pakistan | 8 | 0 |
| 4 | Russia | 6 | 0 |
| 5 | United Kingdom | 1 | 0 |
| 6 | Philippines | 1 | 0 |
| 7 | Thailand | 1 | 0 |
Recorded in 7 countries. Events at sea or without a location are not in this table.
QuestionsAbout this count
How many cyber attacks have there been in 2026?
Which country has had the most cyber attacks in 2026?
Which month of 2026 had the most cyber attacks?
Is this the official number of cyber attacks?
How to cite this
Suggested citation:
Global Incident Tracker (2026). Cyber attacks recorded in 2026. Data as of 2 November 2026. https://globalincidenttracker.com/2026/cyber-attacks (CC BY 4.0)
Quote it as: “As of 2 November 2026, Global Incident Tracker has recorded 39 news-sourced records of cyber attacks in 2026 (records begin on 9 August 2026); the most were in Nigeria (9). One incident can be reported more than once, so this is not a count of separate cyber attacks.” — link the words Global Incident Tracker to https://globalincidenttracker.com/2026/cyber-attacks.
Data & methodology
- Licence: CC BY 4.0 — free to reuse, including commercially, with credit and a link. Upstream sources keep their own terms (listed here).
- What is counted: records of events by the date they happened (UTC), after duplicate reports were merged. Official warnings are counted separately, never as events. How records are sourced and checked.
- What is missing: types with no official feed exist here only because news reported them, so their counts are a floor, not a total. Coverage by type.
- Not a death toll: severity is this site’s monitoring signal, not an official damage or casualty assessment.
- Download: this page as CSV · every record as CSV or JSON.
Counts compiled by Global Incident Tracker and published under CC BY 4.0. Upstream records keep their own terms: USGS, NOAA and NASA data are US public domain; GDACS is free to reuse with attribution; headlines belong to their publishers. Every record of this type, warnings included: full CSV.