India Faces 2,937 Weekly Cyberattacks as Ransomware Surges, CPR Report Finds

India continues to remain one of the most targeted regions in Asia-Pacific, with organisations facing an average of 2,937 cyberattacks per week in October 2025, according to new data from Check Point Research (CPR). While this reflects a 10% year-on-year decline, the broader regional trend points to escalating ransomware activity and increasing exposure linked to enterprise use of Generative AI (GenAI) tools.

Globally, organisations encountered 1,938 attacks per week, a 5% increase compared to last year. CPR warns that although overall volumes rose moderately, the severity and sophistication of attacks — especially ransomware — grew significantly.

GenAI Usage Triggers New Data Exposure Risks

CRP flagged rising risks associated with widespread GenAI adoption across corporate networks. In October, 1 in every 44 enterprise GenAI prompts carried a high risk of sensitive data leakage, and 87% of organisations using GenAI were impacted. Another 19% of prompts contained potentially sensitive information such as internal communications, source code, or customer data.

The report notes a notable increase in the exposure of credentials and source code, partly driven by employees relying on multiple AI tools without oversight. On average, organisations used 11 different GenAI tools per month, often outside managed environments, raising the likelihood of inadvertent data disclosure.

Education and Public Sector Remain Top Targets

The Education sector saw the highest number of cyberattacks globally, averaging 4,470 attacks per week per organisation, driven by its high volume of accessible data and comparatively weaker cybersecurity controls. Telecommunications followed with 2,583 weekly attacks, while Government institutions faced 2,550 attacks per week.

Regionally, Latin America recorded the highest attack volume, with organisations facing 2,966 weekly incidents (+16% YoY), while North America saw an 18% YoY surge, partly due to intensified ransomware campaigns.

Ransomware Cases Rise 48% as Qilin, Akira, and Sinobi Lead Activity

Ransomware showed the sharpest escalation, with 801 publicly reported incidents in October, marking a 48% year-on-year increase. The APAC region accounted for 8% of global ransomware victims, while North America remained the most affected, representing 62% of cases.

Three groups — Qilin (22.7%), Akira (8.7%), and Sinobi (7.8%) — were responsible for nearly 40% of incidents. Business Services, Consumer Goods, and Industrial Manufacturing were among the most frequently targeted industries.

Omer Dembinsky, Data Research Manager at Check Point Research, said the findings highlight two parallel threats: increasing ransomware effectiveness and rising data exposure risks through GenAI usage. “Attackers are using both traditional and emerging techniques to widen their reach. Prevention-first security with real-time intelligence is the only viable defence.”

The Growing Cost of Digital Complexity

CPR warns that the convergence of high attack volumes, rapid GenAI adoption, and fragmented security oversight is creating new systemic risks. With more data flowing into autonomous tools and agents, organisations may face a widening gap between innovation and security capacity.

The report calls for consolidated security architectures, stronger policy controls for AI tools, and continuous monitoring to reduce exposure in high-risk sectors.

Latest articles

Related articles