In 2024, India overtook the United States to become the world's most targeted country for cyberattacks — a distinction that carries serious implications for every enterprise operating in the country. According to Check Point Research's annual threat intelligence report, Indian organisations faced an average of 3,201 cyberattacks per week in the second half of 2024 — more than double the global average.

The attackers are not random. India's rapid digital economy growth, the proliferation of internet-connected devices, the expansion of digital payments, and the relative immaturity of enterprise cybersecurity posture collectively make Indian organisations attractive targets for both financially motivated criminal groups and state-linked threat actors.

The Star Health and Allied Insurance data breach exposed the personal health records of 31 million customers — later offered for sale on Telegram. BSNL suffered two separate data breaches affecting millions of subscriber records. A ransomware attack on a major Indian hospital chain in 2025 disrupted patient care at 12 facilities for over a week before systems were restored. These are not isolated incidents — they are symptoms of a systemic gap between the speed of India's digital expansion and the maturity of its cybersecurity defences.

CERT-In's revised reporting mandate — requiring breach notification within six hours, one of the shortest windows globally — has forced enterprises to confront the inadequacy of their incident detection and response capabilities. Many discovered that they could not meet a six-hour reporting requirement because they had no real-time threat monitoring in place.