• Last modified: February 3, 2026

Motivations January H2 2026

Attack Techniques January H2 2025

Initial Access January H2 2026

After the first timeline of January 2026, it’s time to publish the list of the main cyber attacks occurred in the second half of the month, between 16 and 31 January 2026.

In the second half of the month, I collected 73 events (4.56 events/day) with a threat landscape dominated by malware with 38%, (it was 36% in the first fortnight), ahead of ransomware and account takeover, both with 14% (they were respectively 15% and 11% in the previous timeline).

The multiple campaigns of ShinyHunters had a remarkable impact in the initial access with social engineering (especially vishing), which leads the chart with 18%, the same value of phishing up from 15%, and ahead of supply chain compromise with 12%.

And unsurprisingly cyber crime led the motivations chart with 74% (it was 74% in the previous timeline), ahead of cyber espionage (once again at 19%) and cyber warfare with 3% (two events).

Target belonging to the Information and Communication sector were hit the most during the second half of January (up to 32% from 7%) ahead of Public Administrations (down to 12% from 14%) and Wholesale/Retail with 6%.

Besides these trends, as always the timeline is rich of interesting events, such as mega breaches (now updated for 2026) and attacks against organizations in the fintech space, so my final suggestion does not change: browse the timeline for the details of all the events collected in this fortnight

SUPPORT MY WORK!
MAKE A DONATION

Creating the timelines is a very time-consuming task.

Any little helps!

• 16-31 January 2026 Cyber Attacks Timeline

  Connect on Linkedin Follow me on X Follow me on Bluesky Connect on Mastodon EVENTS EVENTS/DAY 0 EVENTS 0 EVENTS/DAY 0 Motivations January H2 2026 No Data Found Attack Techniques January H2 2025 No Data Found Initial Access January H2 2026 No Data Found Sectors ...

• Mega Breaches in 2026

  Here’s a collection of the main mega breaches (that is data breaches with more than one million records compromised and possibly leaked) during 2026. The information is derived from the cyber attacks timelines that I published, normally, on a bi-weekly basis.

• 1-15 January 2026 Cyber Attacks Timeline

  And I am back with the 1-15 January 2026 cyber attacks timeline. In the first timeline of January 2026, I collected 61 events (4.07 events/day) with a threat landscape dominated by malware with 36%, a direct comparison with the previous timelines is not fair, since ...

• February 2025 Cyber Attacks Statistics

  After the cyber attacks timelines, it’s time to publish the statistics for February 2025 where I collected and analyzed 231 events. In February 2025, Cyber Crime continued to lead the Motivations chart with 64% down from 75%, of February. Operations driven by Cyber Espionage ranked ...

• 1-15 May 2023 Cyber Attacks Timeline

  In the first half of May 2023 I collected 173 events (corresponding to 11.53 events/day), a value that confirms the sustained trend characterizing this year from an information security perspective.