Austria

Analyse

Primarily a target — 201 received· 3 initiated· 49 responses ·EU

Across the full record, 201 cyber operations involving Austria were added to the database. The all-time mean Intensity of cyber operations involving Austria is 2.7.

Maintained by EuRepoC research analysts · updated 16 Oct 2026

201received initiated3

For all time, this country appears chiefly as a target — 201 incidents directed at it, 3 it is linked to initiating.

Source: EuRepoC Global Database as of 16 Oct 2026.

01 / 02

Cyber activity

201 incidents · as target

As target 201 As actor 3

Incidents directed at Austria targets, and the responses they drew.

Cyber incident intensity

Mean2.7/15Moderate

Range 1.0–8.0

Drag the ends of the observed range to narrow intensities.

Minimum Maximum

199 coded incidents · All time

Database additions by yearincidents against Austria

Bar height shows incidents added during all time; select a bar to filter this interval; hover for average intensity.

Most-targeted sectorswhat gets hit

SectorIncidentsIntensityResponded

Government / ministries 71 2.6Moderate 12/71 Corporate Targets 58 2.8Moderate 5/58 International / supranational organization 34 2.5Moderate 6/34 Energy 30 3.4Moderate 8/30 Defence industry 27 2.7Moderate 1/27 Telecommunications 27 3.0Moderate 5/27 Transportation 27 2.9Moderate 5/27 Civil service / administration 26 3.0Moderate 11/26

Government / ministries is the most-targeted sector — 71 of 201 incidents, 12 answered.

By originwho is behind activity against it

China 44incidents avg 2.6 · Moderate Russia 36incidents avg 2.8 · Moderate Iran, Islamic Republic of 20incidents avg 2.9 · Moderate Korea, Democratic People's Republic of 11incidents avg 2.3 · Moderate United States 5incidents avg 2.4 · Moderate Turkey 3incidents avg 1.0 · Moderate Austria 3incidents avg 1.0 · Moderate United Kingdom 3incidents avg 2.3 · Moderate

Showing 8 of 18

02 / 02

Incidents received & responses

AUUSJPDE4 statesjoint WaterPlum Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026 Official policy 18 Sep 2026

Official policy 18 Sep 2026

AUUSJPDE4 states WaterPlum

Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026

Unknown Austria ·Civil service / administration Unknown Threat Actors Copied Internal Information From The Magistrate Of The City Of Vienna In Austria Between 3 September And 11 September 2026 3 Sep 2026

Incident · Unattributed 3 Sep 2026

Unknown Austria ·Civil service / administration

Unknown Threat Actors Copied Internal Information From The Magistrate Of The City Of Vienna In Austria Between 3 September And 11 September 2026

USFederal Bureau of Investigation Mabna Institute US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026 Criminal proceedings 18 Aug 2026

Criminal proceedings 18 Aug 2026

USFederal Bureau of Investigation Mabna Institute

US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026

Unknown NLFRALAD+4145 countries ·Corporate Targets +1 Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026 29 Jul 2026

Incident · Unattributed 29 Jul 2026

Unknown NLFRALAD+4145 countries ·Corporate Targets +1

Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026

Laundry Bear USATBEBG+2428 countries ·Government / ministries +4 Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026 22 Jul 2026

Incident · Low severity 22 Jul 2026

Laundry Bear USATBEBG+2428 countries ·Government / ministries +4

Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026

NLNetherlands Defence Intelligence and Security Service one Russian intelligence and security se… (Russian Federation) Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026 Official policy 10 Jul 2026

Official policy 10 Jul 2026

NLNetherlands Defence Intelligence and Security Service one Russian intelligence and security se… (Russian Federation)

Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026

APT 73 Austria ·Transportation The Ransomware-Group APT73 Stole Freight Documents From Vienna Airport In Austria On 24 June 2026 24 Jun 2026

Incident · Low severity 24 Jun 2026

APT 73 Austria ·Transportation

The Ransomware-Group APT73 Stole Freight Documents From Vienna Airport In Austria On 24 June 2026

INC Ransom USCOCHAE+185189 countries ·Unknown +2 INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026 22 Jun 2026

Incident · Low severity 22 Jun 2026

INC Ransom USCOCHAE+185189 countries ·Unknown +2

INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026

Showing the 8 most recent of 250 Open all in advanced search