Escalating Cyber Threat Landscape

Recent nationwide surveys conducted by the Communications Commissioner and the Digital Security Authority reveal that cyberattacks in Cyprus are not only frequent but are intensifying. Over the past 12 months, one in three individuals and more than half of businesses reported experiencing a cyber incident, highlighting growing pressure on digital security systems.

Business Under Siege

A survey of 459 companies across multiple sectors, conducted between September and November 2025, found that 53% experienced a cyberattack or data breach within the past year. The figure marks an increase from 47% in 2024 and 49% in 2023.

Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram

On average, businesses reported one cyberattack every eight days, compared with one every 10 days a year earlier. Among affected companies, 51% reported financial losses averaging €12,000, slightly lower than previous results.

Phishing remains the most common attack method, accounting for 44% of incidents. Although the share has declined slightly, 75% of companies said phishing was the most recent form of attack they encountered.

The survey also found gaps in preparedness. Nearly one in four organizations had not updated cybersecurity policies in more than a year, while only 22% participated in cybersecurity training initiatives in 2025. Companies that invested in training reported stronger defensive outcomes.

Individual Vulnerability

A separate survey of 1,043 individuals conducted between August and September 2025 showed that people faced an average of 25.9 cyberattack attempts during the year, slightly below previous levels.

Around one-third of respondents said they had been affected by a cyber incident, with 17% reporting financial losses averaging €141. The 35–44 age group recorded the highest financial impact, marking a shift from earlier trends that showed higher exposure among younger users.

Phishing remained the leading attack method for individuals, representing 22% of incidents.

Despite widespread exposure to cyber risks, awareness levels remain limited. Among respondents who had not experienced an attack, 89% said they were uncertain about their future online safety. In addition, 74% were unaware of available cybersecurity training programs.

Those who attended seminars reported practical changes, including stronger password practices, regular updates, and increased caution when interacting with unfamiliar online environments.

Strengthening Cybersecurity Measures

In response, the Digital Security Authority plans to expand educational outreach through seminars and awareness campaigns aimed at both businesses and individuals.

The initiative is designed to strengthen cybersecurity resilience across Cyprus as organizations and consumers face a growing volume of digital threats.