The Threat Index

1. 01

   Sourced

   Every figure traces to a named primary source: breach disclosures, regulator and law-enforcement reports (FBI/IC3, FTC, ENISA), vendor threat research, and our own original analysis. No aggregator estimates.

2. 02

   Dated

   Each figure carries the date it was last confirmed, shown on both the report and its card, so you can see how current it is.

3. 03

   Re-checked

   Figures are re-verified every 30 days. Any that cannot be reconfirmed against a current source are marked and queued for refresh.

Where do these numbers come from?

Named primary sources — breach filings, government and law-enforcement data, and vendor threat research — plus SQ Magazine's own analysis. Every report lists its sources; there are no aggregator estimates.

How often is the index updated?

Figures are re-verified on a 30-day cycle, and the verification ledger logs every change. Fast-moving topics like ransomware and phishing are re-checked first.

Can I cite these figures?

Yes. Credit SQ Magazine and link directly to the report you are citing. The "Cite this desk" button copies a ready-made reference with the link included.

This desk is informational only. Figures describe reported incidents and trends; nothing here prevents attacks, guarantees security outcomes, or constitutes security advice. SQ Magazine has no affiliation with any company or tool named in this index.

Quoting a figure with a link to this page needs no permission. Cite it as you would any source. Reuse of the compiled dataset itself is licensed under CC BY 4.0: credit SQ Magazine and link back.

Maintained by Sofia Ramirez, Senior Tech Writer