Asia-Pacific organisations faced an average of 3,593 cyber attacks per organisation each week in September 2026, the third-highest regional volume globally, says Check Point Research. The findings come as global attack volumes rose 48% year on year and 16% month on month, reaching an average of 2,803 weekly attacks per organisation.
Singapore recorded 3,603 weekly attacks per organisation in September, 29% above the global average and 92% higher year on year—the second-highest increase in Asia-Pacific. Japanese organisations faced an average of 2,319 weekly attacks, representing a 107% year-on-year rise.
Within Singapore, financial services recorded the highest local impact, with 3,652 weekly attacks per organisation—38% above the global sector average of 2,650. Business services followed with 3,633 weekly attacks, 40% above the global average, while consumer goods and services recorded 3,446 weekly attacks, 34% above average.
“September’s data shows cyber risk increasing in both volume and breadth,” said Omer Dembinsky, Data research manager at Check Point Research. “Security teams cannot rely on fragmented defences. They need prevention-first protection that combines visibility, control and automation across network, cloud, endpoint, email and AI usage.”
GenAI becomes a data-governance risk
Across enterprises using generative AI, one in every 39 prompts posed a high risk of sensitive-data leakage in September. The issue affected 89% of organisations that regularly use GenAI tools, while a further 14% of prompts contained potentially sensitive information.
The exposure extended across core business information. Network and IT infrastructure data appeared in GenAI prompts at 71% of organisations, followed by financial data at 70%, legal and regulatory data at 68%, employee and HR data at 62%, and personally identifiable information at 60%. These figures represent the proportion of organisations where each data category was observed, rather than the proportion of prompts.
In Asia-Pacific, one in every 48 enterprise GenAI prompts was classified as high risk, below the global average of one in 39. However, rising prompt volumes and broader tool adoption remain a concern: users generated an average of 131 prompts during the month, while organisations used an average of eight GenAI tools.
Phishing and ransomware intensify
Email remained a major attack channel. One in every 91 emails globally—1.1%—was classified as phishing in September, up from one in 112 in August. Among phishing emails, 81% contained links, making malicious URLs the dominant delivery method.
Ransomware also remained elevated. Check Point recorded 824 reported ransomware attacks in September, a 53% increase year on year. Business services accounted for 31.3% of reported victims, followed by consumer goods and services at 15.2% and industrial manufacturing at 11%. Asia-Pacific accounted for 17% of reported incidents.
For Asia-Pacific CISOs, the data reinforces the need for integrated controls spanning email, cloud, endpoints, networks and AI usage. Check Point argues that prevention-first protection, shared threat intelligence and consistent AI governance can help organisations reduce exposure before it becomes operational or regulatory impact.
