A sharp rise in cyberattacks worldwide, coupled with major data breaches at leading US universities and cryptocurrency platforms, has intensified concerns over digital security. The growing use of artificial intelligence (AI) by cybercriminals is adding a new dimension to the threat, making attacks faster, more sophisticated and increasingly difficult to prevent.
More than 4,900 serious cyberattacks were recorded worldwide during the first six months of 2026, marking a 71 percent increase from the same period last year, according to a report by Italy's national cybersecurity agency Clusit.
The report recorded 4,911 serious incidents between January and June, averaging 819 attacks a month. This was 105 percent higher than the number recorded in the preceding six months. The incidents during the first half of 2026 were equivalent to 93 percent of the total recorded throughout 2025.
Meanwhile, a major cyberattack on Harvard University has exposed the personal information associated with more than 851,000 accounts, highlighting the vulnerability of even the world's most prestigious educational institutions.
According to technology news website TechRadar, hackers stole personal information from systems used by Harvard's alumni and fundraising departments. The compromised information included names, email addresses, dates of birth, telephone numbers, postal addresses and social media profiles.
The breach originated in November 2025, when attackers used voice phishing, a form of telephone-based social engineering, to gain access to the university's systems.
The data breach monitoring website Have I Been Pwned identified approximately 850,500 unique email addresses in the leaked records. The compromised data reportedly belonged to alumni, donors, their family members, as well as some faculty members, employees and current students.
Harvard previously confirmed that the affected systems contained information about alumni, donors, faculty members, staff and students, including their spouses, partners and parents.
The exposed information included contact details, records of event participation, donation histories and biographical information used for fundraising and alumni relations.
However, the university said Social Security numbers, passwords, payment card details and financial account information were not compromised.
The notorious cybercriminal group ShinyHunters later claimed responsibility for the attack. The group alleged that it had stolen more than one million records containing personally identifiable information and donation-related details.
After negotiations with the university reportedly broke down, the hackers leaked more than 1.1 gigabytes of documents in early February 2026.
The full extent of the breach became clearer after the leaked documents were analysed by Have I Been Pwned.
Harvard was not the only US university targeted by the cybercriminal group. Within weeks of the Harvard breach, Princeton University and the University of Pennsylvania also faced similar attacks.
In early November 2025, ShinyHunters claimed responsibility for an attack on the University of Pennsylvania, alleging that it had stolen information belonging to nearly 1.2 million students, alumni and donors.
According to media reports, the attackers gained access to a university employee's PennKey single sign-on account, reportedly obtaining access to several internal platforms, including its virtual private network, Salesforce data, Qlik analytics platform, SAP Business Intelligence system and SharePoint documents.
The hackers subsequently sent offensive and deceptive emails to members of the university community, while also making allegations about the institution's admission and recruitment practices.
The university initially described the emails as fraudulent but later acknowledged the cyber incident.
In a statement, the University of Pennsylvania said its employees had promptly shut down the affected systems and prevented further unauthorised access. However, the attackers had managed to steal some information before the security measures took effect.
The university said it was investigating the nature and extent of the compromised information. It also identified social engineering as the method used in the attack.
Reports indicated that although multi-factor authentication was mandatory for most employees, some senior officials had reportedly been allowed to bypass the requirement.
Princeton University also faced a similar cyber incident during the same period, underscoring the growing vulnerability of higher education institutions to coordinated attacks.Cybersecurity researchers are increasingly concerned that artificial intelligence could fundamentally change the scale and sophistication of cybercrime.
AI tools can already help criminals develop convincing phishing emails, imitate trusted individuals, automate reconnaissance and identify weaknesses in digital systems. These capabilities can reduce the time and technical expertise required to launch attacks.
A particularly concerning development is known as agentic hacking, in which AI-powered agents can independently plan and execute multiple stages of a cyberattack with limited human intervention.
Such systems could potentially identify vulnerable networks, gather information, test security weaknesses and adapt their approaches based on the results.
However, the same technology is also being used by cybersecurity professionals to detect suspicious activities, identify vulnerabilities and respond to threats more quickly.
The growing use of AI in both offensive and defensive cybersecurity is creating a technological race between attackers and security professionals.
The rising number of cyber incidents has also raised concerns about the security of financial institutions and cryptocurrency platforms.
Recent reports of hacking incidents involving major cryptocurrency platforms and third-party data service providers have renewed questions about the security of digital financial infrastructure.
Cyberattacks can cause losses beyond stolen money. Businesses may face operational disruptions, confidential information leaks, reputational damage and costly recovery processes.
Ransomware attacks, in particular, have become a major concern, as criminals can encrypt critical business data and demand payment in exchange for restoring access.
Banks, hospitals, manufacturing companies, government agencies and educational institutions are among the organisations that could face serious consequences from such attacks.
Cybersecurity experts say organisations must strengthen their security infrastructure through regular software updates, multi-factor authentication, encrypted data storage, secure backup systems and employee awareness programmes.
They also stress the importance of monitoring third-party service providers, as vulnerabilities in an external supplier can expose an entire organisation to cyber risks.
As digital services become increasingly integrated into economic and public life, cybersecurity is no longer simply a technical issue. It has become a critical concern for financial stability, business continuity and national security.
The sharp rise in reported attacks, combined with the growing capabilities of AI, suggests that governments, businesses and technology companies will need stronger cooperation and more proactive security measures to protect sensitive information and critical digital infrastructure.
