Skip
CYBER TARGET
EN ▾

← Articles and guides on fraud, cybersecurity, privacy and AML

Latin America: where attacks per organization grow fastest

Latin American organizations faced 3,065 attacks a week in December 2025, the fastest growth of any region. See the numbers, Brazil's role and the reasons.

Measured by attacks per organization per week, Latin America leads global growth. Check Point Research found the region's organizations faced an average of 3,065 weekly attacks in December 2025, up 26% year on year, the largest increase of any region (Intelligent CIO). The global average was 2,027. By March 2026, the region hit about 3,100 a week, roughly double the US level of just under 1,500 (Dark Reading).

Regional comparison

RegionQ1 2025Q2 2025Dec 2025
Global1,9251,9842,027
Africa3,2863,365n/a
Asia-Pacific2,9342,874n/a
Latin America2,640 (+108%)2,8033,065 (+26%)
Europe1,6121,669n/a
North America1,3571,430n/a

Sources: Check Point via Check Point Blog and IT Edge News. Note: Africa had a higher per-organization average in the first two quarters of 2025; Latin America's lead is in growth and versus the US.

Brazil at the center

  • Phishing: 553 million blocked attempts in Brazil (Jul 2024–Jul 2025), 42.8% of the regional 1.29 billion (InfoMoney).
  • Ransomware: 549,000 blocked attempts, over half the regional total; Mexico 237,000 (Hardware.com.br).
  • Confirmed victims: Brazil ranked 3rd worldwide in June 2026 (TI Inside).

Individuals are exposed too: 72% of adults in South America reported scam attempts (GASA/Feedzai), and Mexico's CONDUSEF logged 2.484 million fraud complaints in H1 2025 (Vanguardia).

Why the region is targeted

Fast payment digitization, lower security budgets (6.4% of IT spend in Brazil versus 8–12% internationally, per Brasscom via Teletime), a talent gap of 214,536 professionals in Brazil (ISC2) and a mature local criminal ecosystem. Investment is rising: Brazil spent R$22.2 billion on cybersecurity in 2025, projected to reach R$38.2 billion in 2029.

What to do

  • Cover the basics: MFA, patching and isolated backups.
  • Train staff against phishing.
  • Monitor leaked credentials and remote access.
  • Use managed security services where in-house talent is short.

Source

+

EN · PT · ES · FR · ZH · AR