German Firms Face Rising Cyber Threats From States

German companies are reporting a significant increase in cyberattacks suspected to be orchestrated by foreign intelligence services. A recent study indicates that 37% of businesses hit by cyber incidents in the past 12 months attribute them to state actors, a sharp rise from previous years. China and Russia are identified as the predominant sources of these attacks, with Iran also noted as an increasing contributor.

While organized crime continues to be the leading source of cyber threats, the distinction between criminal organizations and state intelligence services is becoming less clear. Intelligence agencies are reportedly leveraging criminal structures, and conversely, criminals may operate with impunity when targeting entities aligned with political objectives.

The financial toll of these cyber activities, including data theft, industrial espionage, and sabotage, is substantial, estimated at a minimum of €211 billion annually. The threat landscape is also being reshaped by artificial intelligence, with traditional ransomware tactics giving way to more sophisticated AI-driven attacks such as robocalls and deepfakes.

Looking ahead, eight in 10 companies anticipate a further escalation in the use of AI by attackers, fundamentally altering the nature of cyber threats. Despite the growing risks, the percentage of companies feeling very well prepared has declined. However, fewer businesses now believe a successful cyberattack could threaten their existence, though cybersecurity budgets remain consistent.