Non-governmental organisation says number could be much higher, as most attacks go unreported