Portugal
Primarily a target
—
198 received·
2 initiated·
53 responses
·EU · NATO
Across the full record, 200 cyber operations involving Portugal were added to the database. The all-time mean Intensity of cyber operations involving Portugal is 2.7.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For all time, this country appears chiefly as a target — 198 incidents directed at it, 2 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
198 incidents · as targetCyber activity
Incidents directed at Portugal targets, and the responses they drew.
Cyber incident intensity
Mean2.7/15Moderate
Range 1.0–8.0
Drag the ends of the observed range to narrow intensities.
194 coded incidents · All time
Database additions by yearincidents against Portugal
Bar height shows incidents added during all time; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Government / ministries
2.6Moderate
8/60
Corporate Targets
2.9Moderate
7/55
International / supranational organization
2.4Moderate
8/40
Energy
3.4Moderate
8/30
Defence industry
2.9Moderate
2/26
Transportation
2.8Moderate
5/26
Telecommunications
3.0Moderate
4/24
Finance
3.1Moderate
4/24
Government / ministries is the most-targeted sector — 60 of 198 incidents, 8 answered.
By originwho is behind activity against it
China
41incidents
avg 2.6 · Moderate
Russia
39incidents
avg 2.8 · Moderate
Iran, Islamic Republic of
19incidents
avg 3.0 · Moderate
Korea, Democratic People's Republic of
12incidents
avg 2.4 · Moderate
United States
6incidents
avg 2.5 · Moderate
Lebanon
2incidents
avg 2.5 · Moderate
Ukraine
2incidents
avg 1.0 · Moderate
United Kingdom
2incidents
avg 1.5 · Moderate
Australia
1incident
avg 0.0 · Moderate
Belarus
1incident
avg 1.0 · Moderate
Brazil
1incident
avg 4.0 · Moderate
Russia, Belarus
1incident
avg 3.0 · Moderate
Kazakhstan
1incident
avg 3.0 · Moderate
Russia, China
1incident
avg 4.0 · Moderate
Vietnam
1incident
avg 3.0 · Moderate
United Arab Emirates
1incident
avg 1.0 · Moderate
India
1incident
avg 1.0 · Moderate
Turkey
1incident
avg 1.0 · Moderate
Showing 8 of 18
02 / 02
Incidents received & responses
Unknown
Portugal
·Intelligence agencies +1
Unknown Threat Actors Breached Third-Party Provider of Portuguese Intelligence Services in October 2026
1 Oct 2026
Incident · Unattributed
1 Oct 2026
Unknown
Portugal
·Intelligence agencies +1
Unknown Threat Actors Breached Third-Party Provider of Portuguese Intelligence Services in October 2026
AUUSJPDE4 statesjoint
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Official policy
18 Sep 2026
Official policy
18 Sep 2026
AUUSJPDE4 states
WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Unknown
Portugal
·Civil service / administration
Unknown Threat Actor Deployed Ransomware Against Intermunicipal Community Of The Leiria Region In Portugal On 15 September 2026
15 Sep 2026
Incident · Unattributed
15 Sep 2026
Unknown
Portugal
·Civil service / administration
Unknown Threat Actor Deployed Ransomware Against Intermunicipal Community Of The Leiria Region In Portugal On 15 September 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Criminal proceedings
18 Aug 2026
Criminal proceedings
18 Aug 2026
USFederal Bureau of Investigation
Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
Unknown
Portugal
·Water
Unknown Threat Actor Breached Administrative Systems Of State-Owned Water Provider Águas De Portugal In Portugal On 31 July 2026
31 Jul 2026
Incident · Unattributed
31 Jul 2026
Unknown
Portugal
·Water
Unknown Threat Actor Breached Administrative Systems Of State-Owned Water Provider Águas De Portugal In Portugal On 31 July 2026
Unknown
NLFRALAD+4145 countries
·Corporate Targets +1
Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026
29 Jul 2026
Incident · Unattributed
29 Jul 2026
Unknown
NLFRALAD+4145 countries
·Corporate Targets +1
Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026
CACZFRNZ+1216 statesjoint
LAUNDRY BEAR (Russian Federation)
International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026
Technical disclosure
23 Jul 2026
Technical disclosure
23 Jul 2026
CACZFRNZ+1216 states
LAUNDRY BEAR (Russian Federation)
International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026
Laundry Bear
USATBEBG+2428 countries
·Government / ministries +4
Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026
22 Jul 2026
Incident · Low severity
22 Jul 2026
Laundry Bear
USATBEBG+2428 countries
·Government / ministries +4
Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026
Showing the 8 most recent of 251
Open all in advanced search