ENISA: 8,257 EU incidents in 2025, DDoS made up 51.3%

ENISA's Threat Landscape 2026 analyzed 8,257 incidents recorded in the EU during 2025. DDoS attacks accounted for 51.3% and unauthorized access for 39.5%, with public administration the most targeted sector at 31.8%.

• 8,257 EU incidents in 2025, with DDoS at 51.3%
• Public administration hit hardest at 31.8%, 81.8% of those DDoS
• Ransomware attack on Swedish IT supplier affected ~200 municipalities
• Phishing was 77.8% of social engineering, ClickFix usage rising