Cybersecurity statistics / Adversary Infrastructure

In 2025, 27.89% of all adversary infrastructure tracked was hosted in the US, an increase from 23.63% in 2024.

Publisher	Bridewell
Report	Cyber Threat Intelligence Report 2026
Published	18 May 2026
Topics	Adversary Infrastructure, US

Published by Bridewell in Cyber Threat Intelligence Report 2026 , 18 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

China remained the second largest adversary infrastructure hosting location at 13.55%, down from 17.57% the previous year.

Bridewell, 27/05/2026

Germany increased to 8.74%, becoming the third largest adversary infrastructure hosting location and overtaking both Hong Kong (7.22%) and the Netherlands (6.51%).

Bridewell, 27/05/2026

93% of US organizations affected by ransomware pay a ransom.

Proofpoint, 25/07/2026

US organizations report AI-enhanced attack effectiveness at 81%.

Proofpoint, 25/07/2026

The US recorded the most confirmed ransomware attacks on the education sectorm with 12 confirmed in H1 2026.

Comparitech, 25/07/2026

34 of 104 attacks (33%) in H1 2026 targeted educational institutions in the US, a 44% decline from 61 attacks in H2 2025.

Comparitech, 25/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.