Microsoft’s Digital Defense Report 2026 warns that faster, AI-enhanced attacks are intensifying operational risks for businesses across the island.
Puerto Rico’s business community is facing growing exposure to sophisticated cyberattacks fueled by artificial intelligence, according to Microsoft’s Digital Defense Report 2026, which identified 3,252 victims on the island linked to credential‑theft schemes, malware campaigns and other cybercriminal operations.
The figure places Puerto Rico firmly within the global map of cybercrime activity and underscores the operational and financial risks facing local companies as attackers adopt faster, more automated methods. Microsoft’s Digital Crimes Unit (DCU) uncovered the victims through international disruption efforts aimed at dismantling criminal infrastructure.
For Puerto Rican businesses—many of which rely on cloud services, remote work systems and interconnected supply chains—the findings highlight a growing vulnerability. AI‑enhanced tools allow attackers to scale operations rapidly, craft targeted phishing campaigns and exploit newly discovered vulnerabilities in less than 24 hours, compressing the time companies have to detect and contain threats.
“Interrupting criminal infrastructure is now a core component of cybersecurity,” said Jimena Mora, senior corporate attorney with Microsoft’s DCU. She noted that Puerto Rico’s exposure reflects how cybercriminal networks operate across borders, often targeting regions where digital adoption is high but defensive resources may vary.
The report shows that identity compromise remains the primary attack vector worldwide. Phishing accounted for 23 percent of intrusions, and more than 52 percent of incidents involving compromised accounts resulted in additional credential theft—an escalation pattern that can disrupt operations, compromise financial data and expose sensitive customer information.
Across the Americas, organizations in the United States, Canada, Brazil, Colombia and Mexico experienced the highest frequency of cybercriminal activity. Puerto Rico’s inclusion in Microsoft’s disruption findings suggests that the island’s digital infrastructure is deeply connected to regional and global networks, making it susceptible to the same high‑velocity threats affecting larger markets.
Microsoft recommends that businesses in Puerto Rico strengthen identity protection, accelerate response times and build operational resilience. That includes adopting strong authentication methods, reducing reliance on passwords, securing high‑value accounts, automating detection and response processes, and regularly testing incident‑response plans. Companies should also prepare continuity strategies to maintain critical operations during disruptions and recover quickly.
As Puerto Rico continues to expand its digital economy—from banking and telecommunications to manufacturing and professional services—the report signals that cybersecurity is becoming a strategic imperative for sustaining growth and protecting the island’s competitive position.
