British Virgin Islands — Cyber Threat Profile
The British Virgin Islands, a UK Overseas Territory, hosts one of the world's largest offshore corporate registries — 356,256 active companies at end-2025 — making registry data a high-value target: over two-thirds of politician-linked companies in the 2021 Pandora Papers were BVI-registered. The territory has no standalone CERT; since 2019 the UK Integrated Security Fund has run an Overseas Territories cyber programme, and UK-funded specialists completed a national cyber risk assessment with the Department of Information Technology in March 2025. In August 2024, Akira ransomware crippled the BVI Electricity Corporation's billing and customer systems at a cost of hundreds of thousands of dollars. The legal framework rests on the Computer Misuse and Cybercrime Act 2014 (amended 2019 and 2025) and the Data Protection Act 2021, which established an Information Commissioner.- Secure Internet servers per 1M people (2024): 1,443,008.8 (source: World Bank)
Threat actors targeting British Virgin Islands
Most targeted sectors
Recent claimed incidents
Read the full analysis on IntelFusions