Data Rooms Live MENA

MENA

Most-targeted: #6 of 6 Responses: #4 of 6 Cyber intensity: #5 of 6 Momentum: #4 of 6
EuRepoC Global Database — Regional profile — 22 countries

MENA aggregates operations against entities across the Middle East and North Africa. This profile resolves the regional record down to individual countries and the responses logged against them.

733 incidents tracked · 22 countries with activity · 3375 responses logged · Maintained by EuRepoC research analysts · Updated 05 Jun 2026 About this profile
21pct
Low
MENA — Monthly Volume RankJun 2026 · 0 incidents · smoothed 4.5
MENA — monthly activity last 18 months · ≈95 coded operations in MENA
Bar height shows how many incidents struck MENA entities that month; colour shows the regional volume rank. Responses are shown below the line. Click a month to anchor the data below.
Volume rank Low Moderate Elevated High Responses
Live · monthly volume rank vs. 2022+ history

All 22 MENA countries with recorded activity, ranked by smoothed monthly volume. Pct rank compares each country to its own monthly history since 2022.

Volume rank Low Moderate Elevated High
# Country Incidents Pct rank Momentum Top sector Responses
01
IL Israel
0
63pct Elevated
−33% Critical infrastructure 294
02
IR Iran, Islamic Republic of
0
52pct Elevated
−25% State institutions / political system 209
03
OM Oman
0
55pct Elevated
−17% State institutions / political system 138
04
QA Qatar
0
60pct Elevated
−29% Critical infrastructure 148
05
TR Turkey EU candidate · NATO
0
19pct Low
−17% State institutions / political system 239
06
AE United Arab Emirates
0
46pct Moderate
−29% Critical infrastructure 158
07
BH Bahrain
0
45pct Moderate
−33% State institutions / political system 139
08
CY Cyprus EU
0
21pct Low
−33% Critical infrastructure 185
09
EG Egypt
0
48pct Moderate
−20% Critical infrastructure 145
10
IQ Iraq
0
45pct Moderate
−20% State institutions / political system 145
11
JO Jordan
0
47pct Moderate
−20% State institutions / political system 141
12
KW Kuwait
0
43pct Moderate
−33% Critical infrastructure 155
13
LB Lebanon
0
44pct Moderate
−33% Critical infrastructure 151
14
PS Palestine
0
47pct Moderate
−20% State institutions / political system 140
15
SA Saudi Arabia
0
38pct Moderate
−20% Critical infrastructure 190
16
SY Syria
0
52pct Elevated
−20% State institutions / political system 176
17
YE Yemen
0
46pct Moderate
−20% State institutions / political system 146
18
TN Tunisia
0
69pct Elevated
— Critical infrastructure 97
19
DZ Algeria
0
47pct Moderate
— Critical infrastructure 91
20
LY Libya
0
50pct Moderate
— State institutions / political system 95
21
MA Morocco
0
34pct Moderate
— Critical infrastructure 102
22
SD Sudan
0
51pct Elevated
— State institutions / political system 91

Publications

0 briefings · MENA
Editorial briefings

All incidents

716 incidents · 85 responses · MENA
Most recent first
31 May2026
Iranian State-Sponsored Hacking Group Handala Breached Holocaust Victim Support Centre in Israel on 31 May 2026unscored
incident_id · 5587
Israel · Iran, Islamic Republic of · Handala/Handala Group/Handala Hack/ Handala Hack Team/Hatef/Hamsa (MOIS)Data theft
24 May2026
Unknown Threat Actor Hijacked Tunisian Telecom Operator and Sent Political Message to Customers in Tunisia on 23 May 2026unscored
incident_id · 5573
Tunisia · UnknownHijacking
04 May2026
Iranian State-Sponsored Hacking Group Handala Stole and Leaked Documents from Fujairah Port in the United Arab Emirates on 4 May 2026unscored
incident_id · 5530
United Arab Emirates · Iran, Islamic Republic of · Handala/Handala Group/Handala Hack/ Handala Hack Team/Hatef/Hamsa (MOIS)Data theft
01 May2026
Cybercriminal Group ShinyHunters Breached Canvas Platform of Instructure and Stole Data of Thousands of Schools and Universities May 2026unscored
incident_id · 5536
United States · Unknown · ShinyHunters/UNC6040/Bing LibraData theft
29 Apr2026
Operational · in-kindSame day
[AI] US Federal Bureau of Investigation and Instructure Released a Joint Statement Regarding the Resolution of the Canvas Platform Cyber Attack by ShinyHunters on 12 May 2026
— → re: Cybercriminal Group ShinyHunters Breached Canvas Platform of Instructure and Stole Data of Thousands of Schools and Universities May 2026
27 Apr2026
Iranian State-Sponsored Hacker Group Handala Breached WhatsApp Business Accounts And Sent Threatening Messages To Residents In Israel On 27 April 2026unscored
incident_id · 5552
Israel · Iran, Islamic Republic of · Handala/Handala Group/Handala Hack/ Handala Hack Team/Hatef/Hamsa (MOIS)Hijacking
08 Apr2026
Unknown Threat Actors Compromised Daemon Tools Installers In Supply-Chain Attack On Users In Over 100 Countries On 8 April 2026unscored
incident_id · 5532
Brazil · Not attributedData theft
Iranian-Nexus Threat Actor Targeted Government Institutions In Oman On 8 April And 10 April 2026unscored
incident_id · 5531
Oman · Iran, Islamic Republic of · UnknownData theft
02 Apr2026
Iran-Linked Handala Claimed Breach of Israeli Defence Contractor PSK Wind Technologies on 2 April 2026unscored
incident_id · 5453
Israel · Iran, Islamic Republic of · Handala/Handala Group/Handala Hack/ Handala Hack Team/Hatef/Hamsa (MOIS)Data theft
31 Mar2026
Iran-Linked Handala Claimed Breach of Exile Media Outlet IranWire on 31 March 20264.0
incident_id · 5448
Iran, Islamic Republic of · Iran, Islamic Republic of · Handala/Handala Group/Handala Hack/ Handala Hack Team/Hatef/Hamsa (MOIS)Data theft
27 Mar2026
Operational · in-kind+3d after incident
[AI] European Commission and CERT-EU Respond to Cybersecurity Incident Involving Supply-Chain Compromise of Trivy, Resulting in Data Exfiltration From Amazon Web Services Cloud Infrastructure on March 25, 2026
Japan Computer Emergency Response Team Coordination Center → re: Unnamed Threat Actors and ShinyHunters Claimed Breach of European Commission Cloud Provider on 24 March 2026
24 Mar2026
Unnamed Threat Actors and ShinyHunters Claimed Breach of European Commission Cloud Provider on 24 March 20266.0
incident_id · 5436
EU (institutions) · Unknown · ShinyHuntersData theft

About this profile

This is the MENA view of the Major Cyber Incidents room — the same coded corpus, scoped to operations against MENA entities and the institutional responses they provoked. MENA is one of the six world regions EuRepoC tracks; this profile resolves the regional record down to individual countries.

Country figures decompose the regional total: incident volume, the severity mix of those incidents, and the momentum of activity against each country's own rolling 12-month baseline. Country-level profiles arrive in a follow-up.

Back to the global room How Cyber Intensity is calculated Browse the full EuRepoC database Coding methodology & sources
EuRepoC Global Database — Updated 05 Jun 2026.