Nicosia, Cyprus. One in three people and more than half of businesses in Cyprus were hit by cyberattacks in the past 12 months, according to two nationwide surveys by the Communications Commissioner and the Digital Security Authority.
Survey scope and methodology
The business survey was conducted between September and November 2025 on a sample of 459 companies across industry, trade and services. The survey of individuals was carried out during August and September 2025 on a sample of 1,043 people.
Business impact and trends
Among businesses, 53% in 2025 reported suffering an attack or breach in the previous 12 months, compared with 47% in 2024 and 49% in 2023. On average, businesses experienced one attack every eight days, up from one every 10 days in 2024.
Of the businesses that suffered an incident, 51% in 2025 incurred a financial cost averaging €12,000. This compared with 2024, when 55% of affected businesses reported financial damage.
Attacks affecting individuals
The surveys found that 33% of people experienced a cyberattack over the last year, while almost half of companies reported at least one breach.
Most common attack type
Phishing, defined as fraudulent email messages, remained the most frequent form of attack and accounted for 44% of incidents. This was down four percentage points compared with 2024 and one point compared with 2023.
What steps do you take to protect your accounts and devices from phishing emails?
