More than half of businesses in Cyprus reported being targeted by cyberattacks in 2025, with around half of those affected suffering financial losses averaging €12,000, according to the annual report of the Digital Security Authority of Cyprus.
The findings are based on a survey of 459 companies across the industry, commerce and services sectors, conducted between September and November 2025. The report also found that 33% of citizens had experienced a cyberattack.
Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram
Businesses Face Frequent Attacks And Financial Losses
Some 53% of surveyed businesses reported a cyberattack in 2025. The average frequency increased to one attack or breach every eight days, compared with every 10 days in 2024.
Among targeted companies, 51% reported financial losses, averaging €12,000. Although this was slightly below the 55% recorded in 2024, the financial impact remains significant.
Phishing continued to be the most common threat, affecting 44% of businesses. Despite the persistent risk, preparedness remains uneven: nearly one in four companies had not created, updated or reviewed its cybersecurity policies for more than a year.
Awareness of training opportunities improved, with 43% of businesses unaware of cybersecurity seminars, down from 50% in 2024. Participation increased from 13% to 22%. However, 48% of companies that had not experienced an attack believed they were unlikely to become targets, up from 37% in 2024. The Authority warned that no business should assume it is too small or insignificant to attract cybercriminals.
One In Three Citizens Reported An Attack
The proportion of citizens reporting a cyberattack fell to 33% in 2025, from 49% in 2024. Those affected experienced an average of 25.9 attacks during the year, compared with 28.5 previously.
Financial losses were less common among individuals: 17% of those targeted reported a financial cost, averaging €141. Phishing remained the leading type of attack, affecting 22% of citizens, down from 39% in 2024.
Despite the decline, awareness of future risks was high, with 89% of citizens who had not experienced an attack recognising that they could be targeted. However, 74% were unaware of available cybersecurity seminars, and only 15% had participated. Those who attended reported adopting practical measures such as stronger passwords and avoiding suspicious websites.
Cyber Resilience Becomes A National Priority
The 2025 assessment marks the fourth consecutive annual review of cybersecurity in Cyprus. Presented at a stakeholder meeting on December 17, 2025, its findings will inform future training and public-awareness campaigns.
Communications Commissioner Marios Pieris said digitalisation creates opportunities for growth and innovation but also increases the need to protect critical infrastructure and services. Cyber resilience, he stressed, is essential to national security, economic development and public trust.
The Digital Security Authority also reported progress in implementing the country’s 2024–2026 cybersecurity priorities. These include strengthening national resilience, updating the legal and regulatory framework and protecting critical infrastructure. Director General Antonis Antoniades said the Authority expanded its supervisory and support activities for essential and important entities during 2025.
The year also saw the completion of preparations to align Cyprus with the NIS2 Directive, following Parliament’s approval of the relevant legislation on April 10, 2025.
€7.67 Million To Strengthen Cybersecurity Capabilities
Cyprus secured €7.67 million through the N4CY2 project to develop its National Cybersecurity Coordination Centre and strengthen the national cybersecurity ecosystem. Co-funded by the EU’s Digital Europe Programme and the Republic of Cyprus, the project is scheduled to run until December 31, 2028.
Other initiatives included the international Cyber Skies 2025 exercise, focused on civil aviation and air transport, and specialist training for the maritime sector. A trilateral agreement between Cyprus, Greece and Israel also established a Cybersecurity Centre of Excellence for Maritime in Cyprus, with operations expected to begin in 2026.
The Authority is also developing an online learning platform with educational materials and interactive exercises, while the ICT Academy was named a finalist in the Cybersecurity Skills category of the European Digital Skills Awards 2025. A national Cybersecurity Career Fair introduced students and the public to opportunities in the sector.
The report highlights a widening gap between the growing frequency of cyber threats and the preparedness of businesses and individuals. Regularly updated security policies, practical training and greater awareness of risk remain essential to protecting Cyprus’ increasingly digital economy.
