AI hacking statistics
Counts from the registry of documented incidents, not survey estimates. Each number can be traced to the records behind it, and the full data is free to download.
From the registry
Computed from every live record on 15 Nov 2026. Retracted records are excluded.
- Incidents in the registry
- 3
- Confirmed by a primary document (E1)
- 3
- Verified losses
- None yetNo record here has a verified loss figure
- Latest disclosure
- 2025
By AI role
| AI role | Incidents | Share |
|---|---|---|
| AI as the weapon | 3 | 100% |
| AI as the target | 0 | 0% |
| AI as the way in | 0 | 0% |
By attack type
A record can have up to three types, so the counts add up to more than the total.
AI as the weapon
- AI-orchestrated intrusion 2
- AI malware 1
- AI ransomware 1
By severity
Levels are defined in the severity rubric.
| Severity | Incidents | Share |
|---|---|---|
| 5, critical | 0 | 0% |
| 4, severe | 1 | 33% |
| 3, significant | 1 | 33% |
| 2, limited | 1 | 33% |
| 1, minimal | 0 | 0% |
By AI vendor
Records that name the vendor's model or product. One record can name several.
| AI product | Incidents |
|---|---|
| Claude | 3 |
| Amazon Q and Bedrock | 1 |
| Gemini | 1 |
By year
Year the attack began.
| Year | Incidents |
|---|---|
| 2025 | 3 |
By month
By month of occurrence. Records dated only by year are not shown.
Show as table
| Month | Incidents |
|---|---|
| Nov 2026 | 0 |
| Oct 2026 | 0 |
| Sep 2026 | 0 |
| Aug 2026 | 0 |
| Jul 2026 | 0 |
| Jun 2026 | 0 |
| May 2026 | 0 |
| Apr 2026 | 0 |
| Mar 2026 | 0 |
| Feb 2026 | 0 |
| Jan 2026 | 0 |
| Dec 2025 | 0 |
| Nov 2025 | 0 |
| Oct 2025 | 0 |
| Sep 2025 | 1 |
| Aug 2025 | 1 |
Download
Free to reuse under CC BY 4.0 with a link to this site. Data dictionary.