United Kingdom
United Kingdom Infostealer Threat Report — July 2026
07/01/2026 – 07/31/2026
Threat summary
Key figures from the month's threat activity.
Overview
Most common malware family: PUREV4 (43.7% of infections). Sector with the most employee account leaks: Technology. Leaked accounts rose by 14% compared with the previous month.
Ransomware victims in United Kingdom9,061
infected devices · from 10 families
Report periodJul 1, 2026 - Jul 31, 2026
Risk score
57-43vs previous month
- Infected devices
- 9,061
- Android devices
- 3,608
- Domains
- 82,709
- Employee accounts
- 6,225
- Customer accounts
- 623,393
- Families
- 10
Top 10 malware families
infections- 1PUREV43,959
- 2LUMMAC1,306
- 3VIDAR1,256
- 4ACREED781
- 5REMUS645
- 6REDLINE515
- 7STEALC315
- 8ELYSIUM STEALER67
- 9SHUB STEALER36
- 10MACSYNC STEALER30
The full list is in the PDF reportDownload report
Top 10 antivirus
infected devices- 1Windows Defender941
- 2Reason Cybersecurity54
- 3ESET Security10
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Technology49organizations156.7Krecords3Ransomware victims2,931employee accounts
- 2Education200organizations30.2Krecords3Ransomware victims954employee accounts
- 3Telecommunications10organizations5.9Krecords–Ransomware victims104employee accounts
- 4Government16organizations16.0Krecords2Ransomware victims53employee accounts
- 5Healthcare16organizations5.6Krecords2Ransomware victims42employee accounts
- 6Social media2organizations21.3Krecords–Ransomware victims35employee accounts
- 7Retail and e-commerce18organizations63.8Krecords4Ransomware victims32employee accounts
- 8Finance8organizations28.6Krecords4Ransomware victims26employee accounts
- 9Manufacturing and industry11organizations3.8Krecords3Ransomware victims22employee accounts
- 10Nonprofit11organizations6.5Krecords–Ransomware victims20employee accounts
The full list is in the PDF reportDownload report
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.