Report finds Puerto Rico highly exposed to AI-driven global cybercrime surge
By THE STAR STAFF
Puerto Rico is emerging as a significant target within the expanding global ecosystem of cybercrime, according to Microsoft’s Digital Defense Report 2026.
The document revealed that more than 3,252 individuals and organizations on the island have been identified as victims of credential‑theft campaigns, malware and other cybercriminal operations.
The report, released early this week, analyzes cyberthreat activity observed between July 2025 and June 2026 and underscores how artificial intelligence is accelerating both the speed and scale of attacks worldwide. Microsoft says AI is enabling criminals to automate intrusions, craft more convincing phishing attempts and exploit vulnerabilities within hours of their discovery—leaving organizations with shrinking time to respond.
While the report outlines global trends, Puerto Rico’s inclusion is notable. The island’s victims were identified through disruption operations led by Microsoft’s Digital Crimes Unit (DCU), which works with authorities to dismantle criminal infrastructure. The figure highlights that Puerto Rico is not insulated from the digital threats affecting major economies across the Americas.
“Cybersecurity is no longer just about responding to incidents, but about disrupting the criminal ecosystems that make them possible,” said Jimena Mora, senior corporate attorney with Microsoft’s DCU. She emphasized that Puerto Rico’s exposure reflects the interconnected nature of modern cybercrime, where attacks launched from abroad can quickly reach local users and businesses.
Across the Americas, the United States, Canada, Brazil, Colombia and Mexico saw the highest frequency of cybercriminal activity. Microsoft notes that the region’s digital and economic interdependence allows attacks to spread quickly across borders—a dynamic that places Puerto Rico squarely within the threat landscape.
Globally, identity compromise remains the most common entry point for attackers. Phishing accounted for 23 percent of observed intrusions, and more than half of incidents involving compromised accounts led to additional credential theft. Microsoft warns that a single compromised account or service can trigger cascading impacts across multiple organizations and sectors.
The company urges organizations—including those in Puerto Rico—to prioritize identity protection, faster response capabilities and operational resilience. That includes stronger authentication methods, reducing reliance on passwords, automating detection and response processes, and regularly testing incident‑response plans.
Microsoft’s findings suggest that Puerto Rico’s digital infrastructure is increasingly intertwined with global networks, making vigilance and preparedness essential as cybercriminals adopt more advanced AI‑driven tools.
