2026 already exceeds 2025 in cyber and maritime events

As of 14 October 2026, my maritime cyber incident dataset already holds 1,365 incidents for 2026. The full year 2025 holds 1,352. At the same date in 2025, we stood at 1,036, a gap of 32%.

A surplus from the summer

Yet the first half of the year looked much like 2025. From January to June 2026, 616 events could be counted, against 649 over the same period in 2025. The reversal comes in July. From July to September 2026, the dataset records 653 events, including… 261 for August alone against 112 last year (poor CISOs, who never get a holiday).

Denial of service… down, the rest up

Denial-of-service attacks (DDoS, Distributed Denial of Service) account for 742 incidents in 2026 against 851 over the whole of 2025. Excluding DDoS, the count goes from 501 to 623. The increase therefore comes from ransomware, extortion and cybercrime in general.

12 October…

34 events are dated 12 October and relate to the attack claimed by n0n against maritime actors, mostly in Asia.

Countries that follow denial of service

The ranking of victim countries shifts mostly with denial of service. Finland goes from 76 incidents in 2025 to 4 in 2026 and Belgium from 53 to 6, and 73 of Finland’s 76 incidents in 2025 were denial of service. In the other direction, Romania rises from 6 to 65 (62 of them denial of service), Ukraine from 32 to 81, Japan from 27 to 80 and the United Kingdom from 47 to 90.

What stays the same

NoName057(16) holds first place in 2025 with 650 incidents and in 2026 with 611 so far. That said, let’s keep calm: a NoName claim does not mean the web application is systematically down. The United States remains the first victim country, with 194 incidents in 2025 and 138 this year. The ranking behind it changes. In 2025 came Italy (99), Finland (76), Germany (70), Poland (69) and France (67). In 2026, Germany moves up to second with 104, ahead of Italy (93), the United Kingdom (90), Ukraine (81) and Japan (80).

The year 2026 will therefore end above 2025. By how much, the future will tell. The cyber crystal ball has not been invented yet. Except for cyber influencers, who have already seen it all, know it all and said it all before it happened, and who, had they been in charge, would have solved all this long ago, as everyone knows.