In August 2026, a comprehensive dark web monitoring effort detected 224 cyber incidents across the Americas and Europe. The financial sector bore the brunt, followed by healthcare and government. Experts warn of a new wave of ransomware and attacks on critical infrastructure, urging organizations to bolster their defenses immediately.

Anatomy of a Cybercrime Surge

During August 2026, an extensive analysis of threat actor publications and leak sites identified 224 cyber incidents across the Americas and Europe. This marks a 27% increase from July, according to threat intelligence firm Digital Shadows.

The monitoring covered key countries, including the United States, Mexico, Brazil, Canada, Germany, Spain, Italy, the United Kingdom, and the Netherlands. Cybercriminals are diversifying their targets but are increasingly focusing on sectors that handle sensitive data and critical payments.

🇺🇸 Americas: U.S. Leads in Attacks

  • U.S. – 89 incidents, concentrated in finance and healthcare.
  • Canada – 15 incidents, targeting provincial governments and telecoms.
  • Mexico – 12 incidents, mainly in banking and retail.
  • Brazil – 18 incidents, with a rise in ransomware aimed at SMBs.

In the United States, a payment processor breach exposed data from over 2 million credit cards. In Canada, a provincial health system was down for 48 hours, forcing surgery postponements.

🇪🇺 Europe: Germany and UK Under Siege

  • Germany – 27 incidents, including an attack on an auto parts manufacturer.
  • UK – 19 incidents, including a data breach at the National Health Service (NHS).
  • Spain – 11 incidents, hitting city councils and universities.
  • Italy – 9 incidents, targeting fashion and luxury brands.
  • Netherlands – 7 incidents, focusing on ports and logistics.

In Germany, the auto parts attack disrupted the supply chain for several European carmakers. In the UK, the NHS incident exposed vulnerabilities in public healthcare systems against ransomware.

What is Driving This Spike?

Analysts point to three main factors: the rise of Ransomware-as-a-Service (RaaS) lowering the barrier for entry, increased digitization of critical infrastructure, and AI-driven phishing campaigns that are more convincing than ever.

“Cybercriminals are no longer just after ransom payments; they aim to disrupt essential services to force faster payouts,” said a spokesperson for ENISA, the European cybersecurity agency.

Alarmingly, at least 40% of victims paid the ransom despite official guidance to refuse. The average cost of an attack for a medium-sized company is estimated at $1.2 million.

Recommendations for Businesses and Governments

  • Patch security vulnerabilities immediately, especially in remote access systems.
  • Enforce multi-factor authentication on all accounts.
  • Maintain daily cloud backups with versioning.
  • Train staff to spot phishing and deepfake attempts.
  • Invest in cyber insurance covering business interruption, not just data loss.

Experts stress the importance of international cooperation: in August, the FBI and Europol dismantled a ransomware network operating from Eastern Europe, recovering $40 million in cryptocurrency.

*Cover image: artistic representation of a cyber attack, via Pixabay.

Data source: Digital Shadows monitoring and public reports from CISA, ENISA, and national CERTs.