Nearly one in two Cypriot businesses suffered a cyberattack in the past year, according to two nationwide surveys conducted by the Digital Security Authority. Attack frequency has risen compared to 2024, averaging one incident every eight days.
Phishing through fraudulent emails remains the most common form at 44%. Of the affected businesses, over half incurred financial costs — averaging €12,000 per case.
A worrying finding is the “we’re not a target” mindset: nearly half of businesses that were not attacked believe they will never be targeted. Meanwhile, almost one in four has not updated its cybersecurity policies in over a year.
Citizens fare slightly better: the victim rate dropped to 33%, with an average cost of €141. However, 74% are unaware that cybersecurity training seminars even exist.
The Authority is planning awareness campaigns, conferences in partnership with ENISA, and events including the “Cybersecurity For All” Festival for the third consecutive year.
