High-Tech Sector Overtakes Finance as Top Target for Cyber-Attacks, Mandiant Reports

The high-tech sector was the most targeted industry for cyber-attacks in 2025, dethroning financial services as the primary focus of threat actors, according to Mandiant’s latest incident response data. High tech companies accounted for 17% of all Mandiant investigations in 2025, the Google Cloud‑owned firm noted in the M-Trends 2026 Report, published on 23 March 2026.

In comparison, finance represented 14.6% of Mandiant investigations over the past year, while business and professional services and healthcare were also heavily targeted, making up 13.3% and 11.9% respectively. Dwell time rose, with the global median increasing from 11 days in 2024 to 14 days in 2025, driven largely by North Korean-linked cyber espionage campaigns and IT worker incidents, both with median dwell times of 122 days. Source: M-Trends 2026, Mandiant, Google Cloud.