2026 Threat Index and Benchmarks

SRA developed the 2026 Threat Index in collaboration with 120+ organizations across sectors. The Index is a prioritized attack simulation / purple team test plan which establishes a common ground for MITRE ATT&CK alignment and peer Threat Resilience Benchmarks™ (TRB).

Tell your story with the help of VECTR’s Threat Resilience Benchmarks.™

The 2026 Threat Index Composition

Storm-2603

Famous Chollima

Qilin

MuddyWater, UNC1549

Scattered Spider

Lumma, Akira, Cephalus, Play, Vidar, XWorm, RansomHub, SocGholish, Gootloader

TACTIC PROCEDURES
Initial Access 9
Execution 3
Persistence 11
Privilege Escalation 1
Defense Evasion 5
Credential Access 5
Discovery 4
Lateral Movement 7
Collection 2
Command & Control 5
Exfiltration 1
Impact 2

How do you compare to your peers?

Overall

%

Q1 2026 Threat Resilience Benchmark

Financial Services

%

Q4 2025 Threat Resilience Benchmark

Healthcare

%

Q4 2025 Threat Resilience Benchmark

Retail & Hospitality

%

Q4 2025 Threat Resilience Benchmark

Industrial

%

Q4 2025 Threat Resilience Benchmark

Future Benchmarks in 2026

Security Risk Advisors is developing several new benchmarks within the Threat Index. Contact us to learn more about what’s coming in 2026!