Financial sector hit hard by breaches but ransomware seeks targets elsewhere

The banking, financial services and insurance (BFSI) sector has been the most targeted in 2025 accounting for 17.8 percent of all incidents (172 incidents out of 966) tracked in Cyble’s latest North American Threat Landscape Report. The report describes a mature leak economy where a small cluster of prolific actors generate many listings, supported by a large ‘long tail’ of smaller sellers -- meaning BFSI data can be sourced by both major brokers and many opportunists. Cyble observed 657 compromised-access listings in 2025. BFSI was the second most targeted industry (105 incidents) in that underground economy behind only retail (132… [Continue Reading]