Cyberstats

Security Intelligence

ENISA

Cybersecurity reports and statistics published by ENISA

8 categories2 reports

Research Reports

Reports and publications from ENISA

ENISA Sectorial Threat Landscape - Public Administration

ENISA Threat Landscape 2025

Recent Statistics & Reports

Cybercrime operators accounted for approximately 16% of cyber incidents in the EU in 2024.

Cyber incident Cybercrime operator Europe

Cyberespionage campaigns constituted 2.5% of all reported cyber incidents in the EU in 2024.

Cyber incident Cyberespionage Europe

38% of all reported cyber incidents in the EU in 2024 targeted the public administration sector.

Cyber incident Public Administration Europe

Hacktivists were responsible for nearly 63% of cyber incidents in the EU in 2024.

Cyber incident Hacktivism Europe

Data breaches accounted for 17.4% of cyber incidents affecting public administration in the EU in 2024.

Data breach Cyber incident Public Administration

69% of cyber incidents in 2024 targeted central governments in the EU.

Cyber incident Central government Europe

60% of all reported cyber incidents in 2024 were Distributed Denial-of-Service (DDoS) attacks.

Cyber incident DDoS Europe

13.4% of assessed objectives were financially-motivated.

Europe Cyber incident motivation

Top Shares of Recorded Incidents by Sector in the EU: 38.2%: Public Administration, 28.5%: Unknown, 7.5%: Transport (second most targeted sector), 4.8%: Finance, 4.5%: Energy, 2.9%: Education, 2.3%: Health, 2.2%: Digital Infrastructure & Services, 1.7%: Manufacturing, 1.2%: Media & Entertainment.

Europe Cyber incident

Phishing (including malspam, vishing, and malvertising) was the dominant intrusion vector, accounting for approx. 60% of cases..

Europe Phishing Intrusion vector

79.4% of assessed objectives were ideology driven.

Europe Cyber incident motivation

Vulnerability exploitation accounted for 21.3% of initial access vectors.

Europe Vulnerability exploitation Initial access vector

7.2% of assessed objectives were cyberespionage.

Europe Cyber incident motivation

Public Administration was the most targeted sector in the EU, accounting for just over 38% of incidents.

Europe Public administration Cyber incident

NoName057(16) was responsible for over 60% of claims in the realm of hacktivism, sustained by its DDoSia platform

Europe NoName057(16)Hactivism

Ransomware remained the most impactful cybercrime tool despite a reported decrease of 11% compared to the previous ENISA Threat Landscape (ETL) report.

Europe Ransomware

State-aligned operations, often driven by low-impact DDoS campaigns targeting EU Member States’ organisations’ websites, resulted in service disruption in only 2% of incidents.

Europe DDoS State-aligned

Vulnerability exploitation led to malware deployment as a follow-up activity in 68% of cases.

Europe Vulnerability exploitation Malware

Insider threats accounted for 0.8% of initial access vectors.

Europe Insider threat Initial access vector

Botnet accounted for 9.9% of initial access vectors.

Europe Botnet Initial access vector

Showing first 20 results

Top Categories

Initial access vector

5

3

Cyber incident motivation

3

Public Administration

2

Vulnerability exploitation

2

Public administration

Related Vendors

Rubrik Zero Labs