Dark Web Index (DWI) Country Rankings

SOCRadar, the Extended Threat Intelligence platform, collects data from hacker forums and chatters on the Dark Web, including Telegram, Discord, and IRC hacker channels. While converting the raw data into intelligence, the SOCRadar Research Team also provides insightful statistics about Dark Web posts, such as Dark Web Index – Country Rankings.

DWI is a metric that gives insight into threats targeting countries, based on the number of Dark Web mentions between September 2025 and August 2026. DWI is a number between 0 and 100, calculated from each country’s share of mentions and normalized against the most-mentioned country. See Methodology for details.

Do you want to know the data breaches about your company exposed on the Dark Web?

Methodology

SOCRadar automatically tags each Dark Web post based on the targeted country, attack type, industry, etc. The country is determined by whether the country’s name is directly mentioned or one or more companies in the post operate in the country of interest.

See our recent regional and Dark Web reports

DWI for a country is a normalized value calculated by the equation below:

DWI = 100 x (total Dark Web mentions for that country over the last 12 months) / max (total mentions recorded for any single country)

The highest-ranked country sets the reference point at 100, and every other country is scaled against it. Mentions are grouped by country and totaled per country before normalization.

Posts targeting more than one country are excluded from country totals, as are mentions that cannot be attributed to a specific country.

Current date range: September 1, 2025 – August 31, 2026.