This report covers the period from June 2025 to June 2026 and presents a comprehensive assessment of cybersecurity threats across the Asia-Pacific region, drawing on 15,205 recorded security incidents. The threat landscape showed a structural increase in risk, driven by rapid digital-economy expansion, sustained geopolitical friction, reconfiguration of supply chains, and the proliferation of digital identity and mobile finance.
Data breaches dominated the threat landscape, accounting for 39.91% of all incidents (8,856 cases).80% originated from active system intrusion rather than misconfiguration, and 51% of breaches involved ransomware.
Ransomware accounted for 18.33% (4,068 incidents). Despite law-enforcement disruption of major groups, over 120 new ransomware brands emerged, and victim counts surged 58% year over year. The dual-extortion model—encryption and exfiltration—is now standard.
Phishing reached 18.30% (4,061 incidents), with AI-generated phishing emails accounting for 80% of detected volume and achieving click rates exceeding 50%. Attack channels have diversified beyond email into SMS, QR codes, instant messaging, and OAuth abuse.
