Desk live·
ForensicPost
Ransomware/Telecom/File 25-0718

Americas Recorded the Most Telecom Incidents, With 47 in the US

The Americas recorded the highest number of telecom incidents, with the United States accounting for 47. The corpus has just spent a file explaining why that number should not be read as risk.

Constructed geometry · not a chart of case data
JurisdictionUSAthe affected organisation’s jurisdiction, not the actor’s suspected origin
TargetTelecommunications sector
ActorMultiple
D. Kennedy10 min readConfidence: medium2 sources reviewed

Sector research records the Americas as experiencing the highest number of telecom incidents, with the United States accounting for 47 attacks.

This Desk Has Already Argued Why That Is Not A Ranking

At 25-0502 the corpus set out four filters deciding which incidents anywhere become public record: a disclosure obligation, collective redress, a security research industry, and publication in English.

The United States passes all four more comprehensively than any other country. A dataset assembled from leak sites and public reporting will find American incidents most reliably, and the number reflects visibility as much as incidence.

Applying The Corpus’s Own Standard To Itself

This file exists mainly to demonstrate that the caution at 25-1206 and 25-1214 is not something this desk applies only to other people’s regions.

When the number favours the jurisdiction the corpus covers best, the same discount applies. 47 US telecom incidents against lower counts elsewhere is a statement about where researchers were looking.

What Would Make The Comparison Meaningful

Incidents per operator, or per subscriber, in countries with comparable disclosure regimes. None of the sector research this desk has reviewed publishes that.

The two French carrier incidents at 25-0804 and 25-0909 illustrate the point: two incidents in a four-operator market is a far higher rate than 47 across the fragmented US carrier and reseller population, and no ranking by absolute count would show it.

This is an analysis file

Built on published vendor research, listed below. Counts are of recorded incidents and are not normalised for operator population, subscriber base or disclosure regime. Corrections: corrections@forensicpost.com.

Sources
  1. Telecommunication sector faces new threatsThe Cyber Express
  2. 12 recent cyber-attacks on the telco sectorWisdiam
D. Kennedy
Identity and access reporter. Former DFIR consultant. Signal on request.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary