After the cyber attacks timelines of January 2022 (part I and part II) I can finally publish the corresponding statistics. In the two timelines I have collected 187 events, a sharp decrease compared with the 217 events collected in December 2021.
Cyber crime continues to lead the Motivations chart, and its percentage returns above 80% (81.2% up from 74.2% in December 2021). The impact of cyber espionage continues to be quite important but is back to the value of November 2021 (14.4%) down from 18% of December 2021.
Malware continues to lead the Attack Techniques chart with a percentage stable around 30% (32.4%) down from 34.6%. Account takeovers rank at second place among the known attack techniques with 16.6% up from 12.4% of December 2021 and back to the a value close to November of the same year. The exploitation of vulnerabilities continues to play an important role and ranks at number three with 11.2% despite the value shows a light decrease from 12.9% of December 2021.
Multiple targets lead the Target Distribution with 27.8% from 30.4%, ahead of healthcare with 13.9% (from 11.5%) and governments with 12.8% from 8.3%.
Check out the interactive charts and the statistics, also available as an infographic.
As always bear in mind that the sample refers exclusively to the attacks included in my timelines, available from public sources such as blogs and news sites. Obviously the sample cannot be complete, but only aims to provide an high level overview of the threat landscape.
Finally, please support my work, sharing the content, and of course follow @paulsparrows on Twitter for the latest updates.
Support my work! Make a donation!
16-31 January 2022 Cyber Attacks Timeline
The second timeline of January 2022 is out, with 99 events (corresponding to an average of 6.19 events/day), an 11% increase compared with…
1-15 January 2022 Cyber Attacks Timeline
Let’s start this 2022 with the first cyber attacks timeline. The new year begins with…
Rogue AI AgentsAI agents are escaping sandboxes, misusing credentials and acting without authorization. This live dashboard tracks every reported incident on a horizontal timeline, with charts showing which AI companies and agents are involved, the techniques used and how they got in. It updates automatically as new ...
Mega Breaches in 2026Here’s a collection of the main mega breaches (that is data breaches with more than one million records compromised and possibly leaked) during 2026. The information is derived from the cyber attacks timelines that I published, normally, on a bi-weekly basis.
October 2026 Cyber Attacks TimelineA live view of the month's vetted cyber incidents, updated as new events are confirmed. Explore the timeline, filter by attack type, and see motivations, techniques, initial access methods, targeted sectors and target countries on an interactive map.
AI-Assisted Malicious CampaignsIn this blog post I am collecting the campaigns that show evidence of being AI-generated, or make use of AI tools to increase their impact. As always I will continue to update the list as soon as new campaigns emerge.
September 2026 Cyber Attacks StatisticsSeptember 2026 recorded 182 cyber incidents, and Cyber Crime drove roughly three in four of them (73.9%). Malware was the top attack vector at 27.8%, exploitation of public-facing applications led initial access at 28.9%, and Information & Communication was the most targeted sector. Explore the ...
