United States of America
United States of America Infostealer Threat Report — July 2026
07/01/2026 – 07/31/2026
Threat summary
Key figures from the month's threat activity.
Overview
Most common malware family: VIDAR (41.1% of infections). Sector with the most employee account leaks: Education. Leaked accounts rose by 26.2% compared with the previous month.
Ransomware victims in United States of America24,306
infected devices · from 10 families
Report periodJul 1, 2026 - Jul 31, 2026
Risk score
63+16vs previous month
- Infected devices
- 24,306
- Android devices
- 9,228
- Domains
- 155,136
- Employee accounts
- 6,095
- Customer accounts
- 1,740,793
- Families
- 10
Top 10 malware families
infections- 1VIDAR9,992
- 2PUREV46,106
- 3REDLINE3,133
- 4REMUS1,986
- 5STEALC1,091
- 6ACREED394
- 7LUMMAC381
- 8SHUB STEALER168
- 9MACSYNC STEALER113
- 10SHAPESHIFTER58
The full list is in the PDF reportDownload report
Top 10 antivirus
infected devices- 1Windows Defender2,111
- 2Reason Cybersecurity95
- 3Malwarebytes22
- 4Norton 360 for Gamers17
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Education506organizations82.4Krecords11Ransomware victims1,701employee accounts
- 2Technology125organizations464.3Krecords35Ransomware victims537employee accounts
- 3Telecommunications16organizations23.9Krecords–Ransomware victims151employee accounts
- 4Retail and e-commerce31organizations139.3Krecords27Ransomware victims135employee accounts
- 5Government30organizations58.4Krecords15Ransomware victims128employee accounts
- 6Healthcare35organizations23.1Krecords50Ransomware victims101employee accounts
- 7Logistics and transport4organizations13.2Krecords11Ransomware victims72employee accounts
- 8Energy4organizations985records–Ransomware victims56employee accounts
- 9Travel and hospitality12organizations24.8Krecords–Ransomware victims55employee accounts
- 10Manufacturing and industry25organizations11.6Krecords45Ransomware victims50employee accounts
The full list is in the PDF reportDownload report
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.