Global cyberattacks remain near record highs in Feb 2026 despite ransomware decline: Check Point
Global cyberattack levels remained close to record highs in February 2026, with organizations facing an average of 2,086 attacks per week, according to the latest Global Threat Intelligence insights released by Check Point Research. The figure represents a 9.6% increase compared to the same period last year, indicating that overall cyber pressure continues to stay elevated even as ransomware incidents declined.
The report notes that cyber risk has become continuous rather than episodic, with attackers maintaining a steady operational tempo across industries and regions. While ransomware activity dropped year over year due to an unusually large campaign in early 2025, total attack volumes remain high, driven by automated attack tools, expanding digital infrastructure, and increased exposure linked to the rapid adoption of generative AI.
Check Point highlighted that the widespread use of GenAI tools is creating new data security risks, with one in every 31 prompts submitted from corporate networks containing a high risk of sensitive data exposure. The study found that 88% of organizations using GenAI tools experienced at least one risky prompt, while many enterprises are using multiple AI applications without formal governance or visibility. On average, organizations used 11 different GenAI tools in a month, reflecting how deeply AI-driven workflows are being integrated into daily operations.
Industry-wise, the education sector remained the most targeted, followed by government, telecommunications, and automotive organizations in some regions, including India. Education institutions recorded the highest attack frequency globally, reflecting their large user base, open networks, and limited cybersecurity resources.
Regionally, Latin America reported the highest number of attacks per organization, followed by Asia-Pacific and Africa, while Europe and North America also saw year-on-year increases, confirming that both mature and emerging digital economies are under sustained cyber pressure.
Ransomware remained one of the most disruptive threats despite a decline in reported incidents. North America accounted for the majority of ransomware cases, with business services, consumer goods, and industrial manufacturing among the most affected sectors. Researchers also observed a fragmented ransomware ecosystem, with dozens of active groups continuing to target organizations worldwide.
Check Point said the findings highlight the need for AI-driven, real-time threat prevention and stronger governance around emerging technologies, as enterprises face increasingly complex and persistent cyber risks.