PRIMARY SOURCE DB
MITRE ATT&CK v15.1
Page built 2026-11-12
Data as of November 12, 2026 at 05:15 UTC
Search
VICTIM SECTOR TAXONOMY

Target Sectors & Industries

Cross-sector analysis of major cyber incidents, tracking adversarial focus across commercial industries and public infrastructure.

Key Facts

  • 11 distinct economic and critical infrastructure sectors targeted across library cases.
  • Most frequently targeted sector is Financial Services & Banking with 34 major incidents.
  • Includes private sector enterprises, government agencies, defense industrial base, and public utilities.

Top Targeted Sectors

Cyberattack Cases by Targeted Sector Number of documented federal cyber cases targeting each major industry sector. Financial Services & Banking 34 cases Retail, E-Commerce & Hospitality 23 cases Government, Defense & Elections 22 cases Information Technology & Cloud 20 cases Healthcare & Public Health 19 cases Manufacturing, Aerospace & Transportation 16 cases Energy, Water & Utilities 10 cases Media, Entertainment & Gaming 10 cases
Number of documented federal cyber cases targeting each major industry sector.
Cyberattack Cases by Targeted Sector
Sector Case Count
Financial Services & Banking 34 cases
Retail, E-Commerce & Hospitality 23 cases
Government, Defense & Elections 22 cases
Information Technology & Cloud 20 cases
Healthcare & Public Health 19 cases
Manufacturing, Aerospace & Transportation 16 cases
Energy, Water & Utilities 10 cases
Media, Entertainment & Gaming 10 cases

Financial Services & Banking

34 documented cases
34

Retail, E-Commerce & Hospitality

23 documented cases
23

Government, Defense & Elections

22 documented cases
22

Information Technology & Cloud

20 documented cases
20

Healthcare & Public Health

19 documented cases
19

Manufacturing, Aerospace & Transportation

16 documented cases
16

Energy, Water & Utilities

10 documented cases
10

Media, Entertainment & Gaming

10 documented cases
10

Telecommunications

9 documented cases
9

Cryptocurrency & Darknet Markets

9 documented cases
9

Education & Emergency Services

6 documented cases
6

Sector Concentration in Federal Cyber Enforcement

Across federal criminal indictments, SEC Form 8-K Item 1.05 disclosures, and FTC consent decrees, adversary targeting clusters heavily around regulated financial services, healthcare clearinghouses, cloud identity software providers, and critical energy utilities. Comparing sector profiles reveals how operational outages cascade into systemic third-party regulatory liability.

Crosswalk Sector Risks to Defensive Controls

Each canonical sector page aggregates attributed threat groups, judicial dispositions, cumulative reported losses, and mapped MITRE ATT&CK vectors. Use our Controls Crosswalk or Loss Benchmarks to align board reporting against empirical sector precedents.