Spain recorded 1,932 weekly cyberattacks on average during the month of October, 6% more than in 2024, according to Check Point Research. Check Point Software Technologies’ Threat Intelligence division has released its October 2025 Global Threat Index, showing that enterprises are exposed to a continued escalation of global cyberattacks driven by the spread of ransomware and risks related to generative AI (GenAI). This figure represents an increase of 2% compared to September and a year-on-year increase of 5%.
By sector, education was once again the most attacked worldwide, with an average of 4,470 attacks per week per organization, which represents a year-on-year increase of 5%. This persistence reflects both the rapid digitalization of the sector – which expands its attack surface – and its traditional lack of investment in cybersecurity, which makes it a common target for cybercriminals who launch cyberattacks in a massive and automated manner.
The most affected sectors in October
The Telecommunications industry recorded 2,583 weekly attacks per organization (+2% year-on-year), while Government Institutions suffered 2,550 weekly attacks (-2% year-on-year), remaining among the sectors most monitored by cybercriminals and state agents. These data confirm a growing trend in cyberattacks directed at critical infrastructure and public organizations.
Also surprising is the notable increase of 40% year-on-year in the Hospitality sector, which rises from eighth to fifth place among the most attacked industries, driven by the proximity of the holiday season. This boom places tourism among the new preferred targets of cyberattacks, especially those based on the theft of personal and financial data.
It is imperative that organizations strengthen their threat prevention strategies to stay one step ahead of their adversaries.
According to Eusebio Nieva, technical director of Check Point Software for Spain and Portugal, “the October data shows that, in addition to the general increase in the number of attacks, the real concern lies in their consequences, reflected in the sharp increase in successful ransomware incidents.” The manager highlights that the risks of data exposure through generative AI and other vectors can provide attackers with new tools for future cyberattacks.
This evolution poses unprecedented challenges for cybersecurity professionals. “The only truly effective strategy is one based on proactive prevention, powered by real-time AI and advanced threat intelligence, capable of blocking cyberattacks before they cause damage,” he says.
By region, Latin America was the most attacked area, with an average of 2,966 weekly attacks per organization, which represents a year-on-year increase of 16%, followed by Africa, with 2,782 attacks (-15%) and the APAC region, with 2,703 (-8%). For its part, Europe recorded a moderate increase of 4%, while North America once again stood out with the highest year-on-year growth of 18%, driven in part by the intensification of ransomware cyber attacks.
Data Exposure Risks
The use of Generative Artificial Intelligence (GenAI) tools has become widespread in corporate environments, which is increasing the risks of exposure of sensitive information and opening new doors to cyberattacks aimed at the theft of intellectual property or customer data.
During October, one in every 44 interactions or “prompts” made from business networks presented a high risk of data leakage, a trend that already affects 87% of organizations that regularly use GenAI solutions. Furthermore, 19% of the prompts analyzed contained potentially confidential, private or proprietary information, which multiplies the impact of cyberattacks based on the exploitation of poorly protected information.
Strong rebound in ransomware
Ransomware activity experienced a sharp rebound in October, with 801 attacks publicly reported worldwide, representing a year-on-year increase of 48% compared to the same month in 2024. North America accounted for the majority of incidents (62%), followed by Europe (19%). The United States remained the main target, with 57% of registered victims and a monthly increase of 56.8%, while other especially affected countries were Canada (5%), France (4%) and the United Kingdom (3%), reflecting the growing global expansion of this type of cyberattacks.
By sectors, Business Services was the most affected by ransomware, accounting for 12% of the total victims, followed by Consumer Goods and Services (10.5%) and Manufacturing Industry (10.4%). These data show that cyberattacks are no longer limited to critical sectors, but also affect consumer-oriented industries.
The October 2025 threat landscape reflects an environment in which cybercriminals act increasingly opportunistically, taking advantage of geopolitical instability, AI-powered automation, and double extortion tactics to expand their reach. As ransomware groups evolve and the risks associated with generative AI multiply, it is imperative that organizations strengthen their threat prevention, data security and technology governance strategies to withstand the rising wave of global cyberattacks.
