Every week, hackers target companies around the world an average of 2,200 times. The number of attacks increased by 10% in one month and by more than 8% over the year, according to the latest data from Check Point Research. In Poland, the domestic government sector is the most exposed, facing attacks more frequently than the global average.
April 2026 brought a sharp acceleration in cybercriminal activity worldwide, ending the brief slowdown recorded in March. The latest data from Check Point Research shows that organisations around the world experienced an average of 2,201 attacks per week, marking a 10% increase month on month and an 8% rise compared with the previous year. Although Polish companies recorded an average of 1,751 cyberattacks — below the global average — this figure is still higher than a year ago.
According to experts, the intensity of cybercriminal and cyberintelligence operations is largely linked to Poland’s key position on the international stage and its official support for Ukraine, which makes the country a constant target for groups associated with Russia. Poland’s government sector is among the most heavily attacked in the world, significantly exceeding the global average of 2,900 attacks. Other high-risk sectors include financial services and business services.
Globally, the education and research sector remains the most exposed. In April, it faced an average of 4,946 attacks per week, representing an 8% year-on-year increase. Government organisations ranked next, with 2,797 attacks, followed by the telecommunications sector, which recorded 2,728 incidents per week.
Experts note a growing number of attempts involving AI. Research has shown that one in every 28 queries sent to GenAI tools in corporate environments carried a high risk of sensitive information leakage, directly affecting 90% of organisations that regularly use this technology. The scale of the challenge is underlined by the fact that the average corporate user generates 77 prompts per month, often moving faster than the security controls and governance mechanisms being implemented.
At the same time, the ransomware market continues to expand. In April, 707 publicly disclosed attacks were recorded, a 12% increase year on year. Business services came under the greatest pressure, accounting for nearly 34% of incidents, followed by the consumer goods and industrial manufacturing sectors. Although just three groups — Qilin, The Gentlemen and DragonForce — were responsible for one-third of all reported attacks, as many as 56 different ransomware groups were active worldwide, confirming the high resilience and continued expansion of this ecosystem.
As Omer Dembinsky of Check Point Research notes, April’s data shows that the slowdown in March was only temporary, and attackers remain highly operational, shifting targets and techniques rather than reducing their activity. In the face of these trends, organisations must focus on prevention and AI-based solutions capable of stopping threats before they have a real impact on company structures.
Source: CEO.com.pl
