ENISA logs 8,257 cyber incidents across EU and EEA in 2025

ENISA's Threat Landscape 2026 reports 8,257 cyber incidents affecting EU and EEA organizations in 2025. DDoS accounted for 51.3% of incidents and unauthorized access for 39.5%, while phishing made up 77.8% of social-engineering-related activity. Public administration was the most affected sector at about 31.8%.

• 8,257 cyber incidents across EU and EEA between January 1 and December 31, 2025
• DDoS made up 51.3% of incidents, unauthorized access 39.5%
• Phishing accounted for 77.8% of social-engineering-related activity
• Public administration was the most affected sector at about 31.8%