2026 Threat Index and Benchmarks
SRA developed the 2026 Threat Index in collaboration with 120+ organizations across sectors. The Index is a prioritized attack simulation / purple team test plan which establishes a common ground for MITRE ATT&CK alignment and peer Threat Resilience Benchmarks™ (TRB).

Tell your story with the help of VECTR’s Threat Resilience Benchmarks.™
The 2026 Threat Index Composition
Storm-2603
Famous Chollima
Qilin
MuddyWater, UNC1549
Scattered Spider
Lumma, Akira, Cephalus, Play, Vidar, XWorm, RansomHub, SocGholish, Gootloader
| TACTIC | PROCEDURES |
| Initial Access | 9 |
| Execution | 3 |
| Persistence | 11 |
| Privilege Escalation | 1 |
| Defense Evasion | 5 |
| Credential Access | 5 |
| Discovery | 4 |
| Lateral Movement | 7 |
| Collection | 2 |
| Command & Control | 5 |
| Exfiltration | 1 |
| Impact | 2 |
How do you compare to your peers?
Overall
%
Q1 2026 Threat Resilience Benchmark
Financial Services
%
Q4 2025 Threat Resilience Benchmark
Healthcare
%
Q4 2025 Threat Resilience Benchmark
Retail & Hospitality
%
Q4 2025 Threat Resilience Benchmark
Industrial
%
Q4 2025 Threat Resilience Benchmark
Future Benchmarks in 2026
Security Risk Advisors is developing several new benchmarks within the Threat Index. Contact us to learn more about what’s coming in 2026!