Key facts
- MeitY releases Digital Threat Report 2025-26 for India's BFSI sector
- Report produced in collaboration with SISA
- Six of seven threats flagged last year are now operational
- Second edition of the annual report
The Ministry of Electronics and Information Technology released the second edition of its Digital Threat Report 2025-26 for India's BFSI sector on Thursday, in collaboration with cybersecurity assessment firm SISA. The report serves as the government's formal assessment of the evolving digital threat landscape facing banks, insurers, and financial services companies operating in India.
The timing of the release is striking: an industry report published the same day reveals that six of the seven cyber threats specifically flagged in last year's edition of the report have now become operational — meaning they have moved from theoretical warnings to active, real-world attack vectors targeting the financial sector. The near-perfect conversion of predicted threats into live attacks suggests that threat intelligence in this domain is both accurate and, critically, that institutions have not acted swiftly enough to neutralise the risks.
The BFSI sector is among the most targeted in India's digital economy, handling the financial data and transactions of hundreds of millions of account holders. Cyberattacks on this sector can range from phishing and ransomware to sophisticated attacks on payment infrastructure, and their consequences — financial losses, data breaches, erosion of public trust — can be severe and widespread.
The MeitY report, produced in collaboration with SISA, is intended to serve as a resource for financial institutions, regulators, and cybersecurity professionals to align their defences with the most current threat intelligence. Its release alongside the IISc Director's call for self-sufficiency in cybersecurity reflects a broader policy moment in India around securing its digital financial infrastructure.