Notes: Data is based on publicly available reports, and primarily includes incidents affecting countries where English is widely spoken, cybersecurity companies publish in English, or there is English-language media.