Check Point Research, the Threat Intelligence division of Check Point Software Technologies Ltd., has released its Global Threat Intelligence data for July 2026, showing that organizations worldwide experienced an average of 2.336 cyberattacks per week , up 3% month-on-month and 16% compared to July 2025.
In Greece , organizations suffered an average of 1.638 cyberattacks per week , recording a 5% increase year-on-year . Although the growth rate in the country is lower than the 18% recorded in Europe as a whole , the data confirms that the pressure of cyber threats remains steadily increasing for Greek businesses and organizations as well.
The cyberthreat landscape in July was shaped by simultaneous pressures on multiple fronts. Overall attack volume continued to grow, ransomware activity accelerated significantly from the relatively stable picture of previous months, and data exposure through GenAI tools is now emerging as a clear business risk as employees use more tools and create more prompts in the corporate environment.
«July data shows cyber risk accumulating simultaneously on multiple fronts"He said Omer Dembinsky, Date Research Manager Check Point Research that holds the top spot. "The volume of attacks continues to increase, the ransomware has been significantly accelerated and exposure through GenAI is now part of everyday business. Organizations need a security approach that prioritizes prevention and leverages Artificial Intelligence, protecting networks, users, data and AI workflows before the attacks can have a real impact.»
In July, Education remained the sector with the highest exposure to cyberattacks globally, recording an average of 4.848 weekly attacks per organization , up 14% year-on-year.
The Public Sector followed with 3.044 attacks per week and Telecommunications with 2.927. At the same time, the Energy and Utilities sector recorded a 20% increase, reaching 2.759 attacks per week, while the Hospitality, Travel and Leisure sector entered the top five with 2.614 attacks, recording a significant increase of 28% year-on-year.
Latin America remained the region with the highest volume of cyberattacks, with 3.561 weekly attacks per organization , up 19% year-on-year. Asia-Pacific ( APAC ) followed with 3.316 attacks, while Africa recorded 3.237, despite a 5% decrease.
Europe stood out for its strong upward trend, with attacks increasing by 18% year-on-year , reaching 2.051 per organization per week . North America recorded a 9% increase, with 1.613 weekly attacks.
Within this European environment of increased cyber threats, Greece recorded 1.638 weekly attacks per organization, up 5% year-on-year . The number of attacks in Greece is approximately 20% lower than the European average of 2.051 attacks per week . However, the annual increase of 5% shows that the country is also on an upward trajectory, albeit at a slower pace than Europe as a whole, highlighting the ongoing need to strengthen cyber resilience and prevention against evolving threats.
The exposure associated with GenAI usage became a daily business issue in July. One in 36 enterprise prompts posed a high risk of sensitive data leakage, while 88% of organizations that routinely use GenAI were impacted by high-risk prompt activity. At the same time, 22% of prompts contained potentially sensitive information.
Organizations used an average of eight different GenAI tools , and each user created an average of 95 prompts per month. Personal data was the most common category of sensitive information exposed, found in 70% of organizations. This was followed by financial data and information related to IT networks and infrastructure , at 68% each.
The evidence demonstrates that security in the use of GenAI is no longer a future or theoretical issue, but an immediate challenge to corporate data governance and protection.
Email continued to be a high-risk and high-volume channel for attacks. One in 128 emails , or 0,78%, was classified as phishing , while an additional 20% fell into unwanted or potentially dangerous categories, such as graymail, spam, and suspicious messages.
Africa recorded the highest rate of phishing, with one in 106 emails being classified as phishing, followed by North America with one in 117.
The findings confirm that email continues to be one of the most common starting points for broader cyberattack chains, from credential theft and malware distribution to Business Email Compromise ( BEC ) attacks.
The most significant change in July was recorded in ransomware . Publicized attacks reached 964 , up 49% compared to June and 87% compared to July 2025.
The development marks a clear divergence from the picture of the first half of 2026, when monthly ransomware activity averaged around 672 incidents.
Business Services remained the sector with the most recorded victims, representing 32,5% of the total. It was followed by Industrial Production with 14,4% and Consumer Goods and Services with 13,4%.
Geographically, North America remained the most affected region, accounting for 45% of reported ransomware incidents . Europe followed with 28% and the APAC region with 17%.
At the country level, the United States continued to accumulate the highest number of victims, accounting for 39,4% of the publicized attacks , followed by Germany, Canada, the United Kingdom and Italy.
The Gentlemen and Qilin were the most active ransomware groups in July, each responsible for 14% of reported attacks . DeadLock came in third with 10% and 97 reported victims, highlighting the ongoing changes in the ransomware ecosystem.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
