Austria
Primarily a target
—
23 received·
0 initiated·
11 responses
·EU
This year to date, 23 new cyber operations involving Austria were added to the database: a 64% increase compared to the previous period. The number of operations is currently in line with the long-term year-to-date average. The Intensity of cyber operations involving Austria over this year to date is declining to 3.4, compared with 3.5 in the same elapsed span of the previous year. This is above the all-time average for Austria of 2.7.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For this year to date, this country appears chiefly as a target — 23 incidents directed at it, 0 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
23 incidents · as targetCyber activity
Incidents directed at Austria targets, and the responses they drew.
Cyber incident intensity
Mean3.6/15Moderate
Range 1.0–8.0
Drag the ends of the observed range to narrow intensities.
22 coded incidents · This year to date
Database additions by monthincidents against Austria
Bar height shows incidents added during this year to date; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration
2.8Moderate
2/8
Government / ministries
2.6Moderate
2/7
Corporate Targets
3.0Moderate
1/7
Education
3.2Moderate
2/5
International / supranational organization
3.8Moderate
1/5
Telecommunications
2.8Moderate
2/4
Transportation
3.0Moderate
1/4
Energy
3.3Moderate
1/3
Civil service / administration is the most-targeted sector — 8 of 23 incidents, 2 answered.
02 / 02
Incidents received & responses
AUUSJPDE4 statesjoint
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Official policy
18 Sep 2026
Official policy
18 Sep 2026
AUUSJPDE4 states
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Unknown
Austria
·Civil service / administration
Unknown Threat Actors Copied Internal Information From The Magistrate Of The City Of Vienna In Austria Between 3 September And 11 September 2026
3 Sep 2026
Incident · Unattributed
3 Sep 2026
Unknown
Austria
·Civil service / administration
Unknown Threat Actors Copied Internal Information From The Magistrate Of The City Of Vienna In Austria Between 3 September And 11 September 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Criminal proceedings
18 Aug 2026
Criminal proceedings
18 Aug 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Unknown
NLFRALAD+4145 countries
·Corporate Targets +1
Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026
29 Jul 2026
Incident · Unattributed
29 Jul 2026
Unknown
NLFRALAD+4145 countries
·Corporate Targets +1
Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026
Laundry Bear
USATBEBG+2428 countries
·Government / ministries +4
Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026
22 Jul 2026
Incident · Low severity
22 Jul 2026
Laundry Bear
USATBEBG+2428 countries
·Government / ministries +4
Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026
NLNetherlands Defence Intelligence and Security Service
one Russian intelligence and security se… (Russian Federation)
Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026
Official policy
10 Jul 2026
Official policy
10 Jul 2026
NLNetherlands Defence Intelligence and Security Service
one Russian intelligence and security se… (Russian Federation)
Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026
APT 73
Austria
·Transportation
The Ransomware-Group APT73 Stole Freight Documents From Vienna Airport In Austria On 24 June 2026
24 Jun 2026
Incident · Low severity
24 Jun 2026
APT 73
Austria
·Transportation
The Ransomware-Group APT73 Stole Freight Documents From Vienna Airport In Austria On 24 June 2026
INC Ransom
USCOCHAE+185189 countries
·Unknown +2
INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026
22 Jun 2026
Incident · Low severity
22 Jun 2026
INC Ransom
USCOCHAE+185189 countries
·Unknown +2
INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026
Showing the 8 most recent of 34
Open all in advanced search