Check Point Research, the threat intelligence division of Check Point® Software Technologies Ltd., has released the latest data on the global cyber threat landscape for May 2026. According to the data, organizations worldwide suffered an average of 2.055 cyberattacks per week, showing a 2% increase year-over-year, but a 7% decrease compared to April.
In Greece, organizations experienced an average of 1.444 attacks per week in May 2026, a 4% decrease year-on-year. Despite this small decline, the country continues to face a high level of threats, confirming that a decrease in volume does not imply a corresponding decrease in risk.
After a sharp increase in April, May’s data shows a temporary slowdown rather than a sustained downward trend. Despite the decrease in overall attack volume, ransomware activity and risks associated with GenAI usage continued to increase.
Omer Dembinsky, Data Research Manager at Check Point Research, said:
“May’s data shows that a decrease in the number of attacks does not mean a decrease in risk. Cybercriminals are constantly adapting, changing the timing and techniques of attacks. As ransomware escalates and GenAI adoption intensifies in enterprises, organizations must consider themselves constantly exposed and prioritize security strategies based on prevention and artificial intelligence.”
Education, Public Sector and Telecommunications in the spotlight
In May, the Education sector remained the most targeted globally, with 4.641 attacks per organization per week (+7% YoY). Open systems and limited security resources make educational institutions particularly vulnerable.
They followed:
• Government organizations: 2.620 attacks/week
• Telecommunications: 2.583 attacks/week
At the same time, significant growth was also observed in sectors such as:
• Agricultural sector
• Hospitality & Tourism
• Construction & Engineering
This trend highlights that digital transformation is expanding the attack surface across more and more industries.
Regional picture: Latin America remains first in attacks
• Latin America: 3.149 attacks/organization (+13% YoY)
• Africa: Decrease YoY, but remains at high levels
• Other regions: Maintain high activity despite the decrease in May
The spread of GenAI increases the risk of data leaks
Despite the slight decrease in attack volume, the risks associated with using GenAI tools remain extremely high:
• 1 in 25 prompts poses a high risk of leaking sensitive data
• 91% of organizations are affected
• 22% of prompts contain potentially sensitive information
• Businesses use an average of 9 different GenAI tools
• A user creates approximately 70 prompts/month
The rapid adoption of these tools is outpacing governance mechanisms, significantly increasing the risk of unintentional data leakage.
Ransomware surges
Ransomware was one of the most critical threats:
• 698 recorded attacks
• 48% increase year-on-year
• The biggest increase for 2026
Sectors most affected:
1. Business Services (35%)
2. Consumer Goods & Services
3. Industrial production
Parallel growth was recorded in all geographical areas, with:
• First in North America
• Europe and APAC follow
Concentration and expansion of the ransomware ecosystem
Ransomware activity is driven by a few but extremely active groups:
• Qilin (most active)
• The Gentlemen
• DragonForce
At the same time, the number of new smaller groups is increasing, creating a resilient and constantly evolving attack ecosystem.
More details about the May 2026 cyber threat trends report on the Check Point Research Blog.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
