Week 28 October–03 November 2026
389 cyberattacks across 52 countries
Global avg ESIX© of the week: 4.74
Strategic cyber threat intelligence
Beyond attack counts.
Threat intelligence measured in impact.
Traditional threat intelligence tells you what attackers did. Hackmanac tells you how bad it was — and how bad the next one could be for an organization like yours. 65,000+ verified incidents. Analyzed, classified, scored, and ready to act on.
65,000+
Analyzed incidents as of today
13,000+
Attacks classified in H1 2026 alone
4,800+
Unique named threat actors tracked
19 / 188
Industry classes & countries covered
Our solutions
One unique dataset. Impact measured and quantified.
At Hackmanac, we build solutions for those who own the budget. We provide live visibility into real attacks and their severity trends, as well as the financial consequences of past attacks and the type and magnitude of future ones. We also offer bespoke consulting services for situations that a platform cannot solve alone.
HackRisk
Provides strategic threat intelligence on over 65,000 verified attacks, which are scored using the ESIX© Severity Index and segmented by industry, geography, attacker type, technique and threat actor.
The platform includes the threat feed, trend analysis tools, alerts and the Threat Impact Simulator.
HackLoss
Global cyber loss analytics: severity-scored incident data translated into quantified economic loss by area, country, industry, technique, and threat actor. It provides separate tracks for data breach and DDoS incidents, materiality by company size and the industry-impact matrix, as well as several other unique views on our loss data.
Discover HacklossConsulting services
In addition to our strategic threat intelligence and loss analytics platforms, we provide custom cyber risk and potential loss reports, dark web monitoring, cyber strategy assessments and C-level training and awareness programmes. All of these services draw on the same unique data and over 20 years of expertise in the field.
See all servicesWhy Hackmanac
Vendor surveys and black box models are not enough.
The same question keeps resurfacing in every CISO engagement: What is the true impact of this kind of attack on an organisation like ours? Where should we invest our resources? Vendor surveys can be biased, and synthetic models can be inaccurate. Traditional threat intelligence doesn't have these answers either.
Hackmanac was built to close this gap — with years of curated incident research, a proprietary severity index, and two dedicated platforms that put impact-based strategic intelligence in the hands of decision-makers. Transparent, auditable, up-to-date figures that you can bring to the Board.
01 — STRATEGIC INSIGHT
Frequency alone isn't enough. Impact tells the rest of the story.
Incident counts give you partial visibility. Severity, acceleration, and concentration reveal where your real exposure lives — and where defensive resources actually pay off.
02 — STRATEGIC INSIGHT
Generic defenses fail. Context wins.
Identical attack vectors produce vastly different outcomes across industries, company sizes, countries and threat actors. True resilience requires responses tailored to your sector, geography, and threat profile.
03 — STRATEGIC INSIGHT
Prevention lags behind threats. Build resilience.
State-aligned actors and organized criminal groups now operate above the critical risk threshold. Mitigations must include impact containment, precise reserves allocation, and optimized risk transfer.
Our proprietary moat
Six years of research and customer feedback.
Four unique metrics.
In 2024, ESIX© made strategic threat intelligence quantifiable for the first time. In 2025, we extended the framework with two new lenses — designed to detect critical shifts before they escalate. In 2026, we introduced HackLoss and the new Relative Loss Intensity index.
ESIX©Estimated Severity Index
A single 1–10 absolute severity score weighing operational, financial, technical, legal, and reputational consequences of an incident. The foundation of our impact-based threat intelligence.
IMImpact Momentum
Quantifies the rate of change in aggregate incident severity across sectors, geographies, and techniques — distinguishing accelerating threats from stabilizing ones.
QSIQuiet Shift Index
A severity anomaly detection metric. QSI captures subtle transitions in threat levels — surfacing latent clusters before they manifest as widespread incidents.
RLIRelative Loss Intensity
A loss anomaly detection metric. RLI compares a group's share of total loss with its share of incident volume — showing how loss is concentrated and deviates from the average.
Threat Impact Simulator
How much would a real cyber attack actually cost you?
Enter your industry, country and size. In a few seconds, the Threat Impact Simulator© inferential engine will return your most likely and worst-case attack scenarios, with their calibrated SLE (single loss expectation) ranges and their spread (heavy, typical, or mild). All estimates are based on tens of thousand of verified incident data from the last 60 months and are fully auditable.
Most typical and most damaging scenarios in this context
Manufacturing · UAE · 250 employees · 40M revenue
Most likely
Generic DDoS
Est. loss: $123K
Worst case
Ransomware
Est. loss: $3.66 – 3.71M
Estimated economic loss per scenario, threat actor type attribution, and technique breakdown (for Business and Enterprise plans).
Unlock →
Inside HackRisk.io
Your strategic threat intelligence hub.
HackRisk offers constantly updated visibility into real-world attack patterns, severity-scored and segmented across every dimension that matters for situational awareness, risk management and decision-making.
Geospatial intelligence
Visualize attack distribution and severity across regions and countries, in real time.
ESIX© severity scoring
Prioritize threats by real-world impact, not by volume or CVSS scores alone.
Customizable filters
Slice by severity, industry, location, attacker class, technique, and 20+ additional variables.
Threat Impact Simulator
Model your specific risk scenarios and evaluate potential losses in seconds.
RECENT INCIDENTS · MANUFACTURING · EUROPE
Italian auto supplierESIX 6.2
German chemical plantESIX 5.8
French aerospace firmESIX 5.5
Spanish steel producerESIX 5.1
Polish electronics makerESIX 4.9
Sector avg ESIX© 4.8 · Impact Momentum +12%
Inside Hackloss.io
Quantify cyber loss. Don't assume it.
Hackloss turns ESIX©-scored incident data into economic loss figures: how much cyber incidents cost, by industry, region, country, company size, technique and threat actor, and how those losses evolve over time.
Estimated global loss, USD
H1 2026 vs H2 2025
+55% incidents+72% estimated global loss
Estimated typical loss, Data Breach and DDoS tracks. Source: Hackloss.
Losses in dollars, from real incidents
Estimated economic loss calibrated on verified, severity-scored incidents, not survey answers or abstract models.
188 countries, 19 industry classes
Compare losses by industry, region, country, company size, attack technique and named threat actor.
Every figure shows its uncertainty
Statistical spread, confidence level and data recency come with each estimate, so every number can be audited.
Free to start, Pro to go deeper
Download the Global Cyber Loss Report for free. Pro adds all twelve dashboard sections, and the API puts the data in your own systems.
Flagship research
Two flagship reports. Free to download.
The Global Cyber Attacks Report maps what attackers did. The Global Cyber Loss Report estimates what it cost.
Get your free copy
Inside the Global Cyber Attacks Report
The fifth annual report introduces three new proprietary insights (Impact Momentum, Quiet Shift Index and Impact-Exposure Matrix), derived from six years of curated incident analysis.
- Trends by severity, industry, geography, technique and attacker
- Three strategic insights for 2026 CISO decision-making
- Full ESIX©, IM, QSI and Impact-Exposure Matrix analysis
Inside the Global Cyber Loss Report
Estimated global loss, its distribution, loss by country and the monthly shocks, plus high-level highlights from the industry, technique and threat-actor analysis. Published twice a year.
- Estimated loss from verified Data Breach and DDoS incidents
- Compare loss with the previous quarter and semester
- Updated every semester
Cited by leading outlets worldwide
Reuters
The New York Times
SecurityWeek
TechRadar
The Record
Tom's Guide
Open research
Free intelligence, published every week.
Weekly attack tracking, expert long-reads, monthly threat reports and annual global reports. All built on the same dataset that powers HackRisk and HackLoss. All free to read, with new entries every week.
LONG-READS
Experts insights
Strategic analysis from our research team on emerging threats, attacker shifts, and the geopolitical forces shaping cyber risk.
Browse the latest articlesWEEKLY
Hack Tuesday
Every confirmed cyber attack from the past seven days, mapped and classified by ESIX© severity.
Read this week's editionMONTHLY
Monthly reports
Full analytical narrative on each month's threat landscape, with sector breakdowns and an executive summary.
Read the latest reportYEARLY
Global reports
Strategic insights about incident severity and loss trends, grouped by industry, company size, geography, technique and attacker.
Read all global reportsLatest Hack Tuesday
Week 21–27 October 2026
494 cyberattacks across 67 countries
Global avg ESIX© of the week: 4.80
Week 14–20 October 2026
585 cyberattacks across 64 countries
Global avg ESIX© of the week: 4.55
Clearer decisions. Better budgeting. Fewer losses.
From "how many attacks?" to "how much damage?"
The clarity needed for sharper strategy.