Welcome to SOCRadar’s 2025 North America Threat Landscape Report!

Explore the critical cyber threats shaping North America’s digital environment in SOCRadar’s 2025 North America Threat Landscape Report. This concise report outlines major attack vectors, sector-specific threats, and dark web activities to help organizations across the region improve resilience and safeguard assets.

Key Insights from North America’s Cyber Threat Landscape:

Finance and Insurance Sectors at Highest Risk: Accounting for 12.11% of all incidents, this sector remains the most frequently targeted, reflecting its vast data and financial assets.

U.S. Dominates Cyber Targeting: The United States faced 82.15% of all regional cyber incidents, making it the primary focus of threat actors, especially in ransomware and phishing.

Ransomware Surge Led by PLAY Group: PLAY, RansomHub, and Akira top the list of active ransomware groups, with double-extortion tactics increasingly affecting public and private organizations.

Dark Web Exposure Escalates: Stolen data, unauthorized access sales, and compromised credentials dominate dark web listings—58.38% of all incidents involve selling sensitive digital assets.

Phishing Targets Public and Info Sectors: Public administration (18.75%) and information services (17.53%) lead phishing targets, with attackers mimicking trusted platforms and using HTTPS to deceive victims.

DDoS Attack Volume Alarming: Over 1.48 million DDoS attacks were recorded, with peak bandwidths exceeding 1857 Gbps, posing serious continuity threats.

Why This Report Matters:

Cybercriminals are aggressively exploiting North America’s digital surface through ransomware, phishing, and dark web trade. With financial services, public administration, and tech-driven sectors facing increasing risks, this report equips security leaders with the insights needed for a proactive defense strategy.

SOCRadar’s report delivers:

• Early visibility into region-specific threats.

• Insights into top ransomware groups and dark web activities.

• Strategic recommendations to enhance cyber defense.

Take Action Now:

Protect your organization with SOCRadar’s advanced threat intelligence tools:

• Dark Web Monitoring: Detect data leaks and unauthorized access before exploitation.

• Ransomware Intelligence: Track active ransomware groups and their tactics.

• Phishing Detection: Prevent social engineering threats with real-time monitoring.

Download the full report today to stay ahead of emerging threats and fortify your digital perimeter.