MENA

Analyse

Primarily a target — 64 received· 38 initiated· 14 responses ·22 countries

This year to date, 76 new cyber operations involving MENA were added to the database: a 19% increase compared to the previous period. The number of operations is currently 3% below the long-term year-to-date average. The Intensity of cyber operations involving MENA over this year to date is declining to 3.2, compared with 3.3 in the same elapsed span of the previous year. This is above the all-time average for MENA of 2.4.

Maintained by EuRepoC research analysts · updated 05 Oct 2026

64received initiated38

For this year to date, this region appears chiefly as a target — 64 incidents directed at it, 38 it is linked to initiating.

Source: EuRepoC Global Database as of 05 Oct 2026.

01 / 02

Cyber activity

38 incidents · as actor

As target 64 As actor 38

Operations EuRepoC links to actors based in MENA, and the international responses they drew.

Cyber incident intensity

Mean3.5/15Moderate

Range 1.0–8.0

Drag the ends of the observed range to narrow intensities.

Minimum Maximum

36 coded incidents · This year to date

Database additions by monthincidents linked to MENA

Bar height shows incidents added during this year to date; select a bar to filter this interval; hover for average intensity.

Most-targeted sectorswhat its operations hit

SectorIncidentsIntensityResponded

Transportation 8 3.1Moderate 1/8 Unknown 7 2.9Moderate 0/7 Corporate Targets 5 3.6Moderate 1/5 Government / ministries 5 2.6Moderate 0/5 Energy 4 2.2Moderate 2/4 Defence industry 4 4.2Moderate 0/4 Water 3 3.3Moderate 2/3 Finance 3 4.0Moderate 0/3

Its operations concentrate on Transportation — 8 of 38 incidents.

By targetwho its operations hit

Israel 17incidents avg 3.1 · Moderate United States 8incidents avg 3.9 · Moderate Iran 7incidents avg 3.9 · Moderate United Arab Emirates 6incidents avg 3.3 · Moderate Bahrain 5incidents avg 3.4 · Moderate Jordan 5incidents avg 3.0 · Moderate Kuwait 5incidents avg 3.4 · Moderate Oman 5incidents avg 3.6 · Moderate

Showing 8 of 190

02 / 02

Operations initiated & responses drawn

"Iranian-backed hackers" United States ·Water Iran-Affiliated Threat Actors Breached Two New Jersey Municipal Water Systems In United States on 27 July 2026 27 Jul 2026

Incident · Low severity 27 Jul 2026

"Iranian-backed hackers" United States ·Water

Iran-Affiliated Threat Actors Breached Two New Jersey Municipal Water Systems In United States on 27 July 2026

(Iran) United States ·Water Iran-Affiliated Threat Actor Suspected Of Breaching Multiple Water Utilities Minnesota In United States On 26 and 27 July 2026 26 Jul 2026

Incident · Low severity 26 Jul 2026

(Iran) United States ·Water

Iran-Affiliated Threat Actor Suspected Of Breaching Multiple Water Utilities Minnesota In United States On 26 and 27 July 2026

RONational Cyber Security Directorate Romania Romanian Government Coordinated Response to Ransomware Attack on National Agency for Cadastre and Land Registration (ANCPI) on 14 July 2026 Operational action 14 Jul 2026

Operational action 14 Jul 2026

RONational Cyber Security Directorate Romania

Romanian Government Coordinated Response to Ransomware Attack on National Agency for Cadastre and Land Registration (ANCPI) on 14 July 2026

Unspecified Iran-linked threat actor (possibly IRGC-affiliated) United Kingdom ·Energy Iran-Linked Threat Actor Disrupted Small Gas-Fired Power Plant in the United Kingdom for Four Days in July 2026 1 Jul 2026

Incident · Low severity 1 Jul 2026

Unspecified Iran-linked threat actor (possibly IRGC-affiliated) United Kingdom ·Energy

Iran-Linked Threat Actor Disrupted Small Gas-Fired Power Plant in the United Kingdom for Four Days in July 2026

Zakaria Mahdjoub Romania ·Civil service / administration ByteToBreach Wiped Romania's Land Registry Data at National Agency for Cadastre and Real Estate Publicity in July 2026 1 Jul 2026

Incident · Moderate severity 1 Jul 2026

Zakaria Mahdjoub Romania ·Civil service / administration

ByteToBreach Wiped Romania's Land Registry Data at National Agency for Cadastre and Real Estate Publicity in July 2026

Black Wolves IR#N/A2 countries ·Finance +1 Hacktivist Group Black Wolves Disrupted Electronic Banking Services Of State-Owned Banks In Iran On 14 June 2026 14 Jun 2026

Incident · Low severity 14 Jun 2026

Black Wolves IR#N/A2 countries ·Finance +1

Hacktivist Group Black Wolves Disrupted Electronic Banking Services Of State-Owned Banks In Iran On 14 June 2026

Handala (MOIS) United States ·Water Iran-Linked Handala Breached And Leaked Data Of Water Utility Provider California Water Service In United States On 11 June 2026 11 Jun 2026

Incident · Low severity 11 Jun 2026

Handala (MOIS) United States ·Water

Iran-Linked Handala Breached And Leaked Data Of Water Utility Provider California Water Service In United States On 11 June 2026

Handala (MOIS) Turkey ·Media Iranian State-Sponsored Hacking Group Handala Disrupted Broadcast And Deleted Materials Of News Agency NûJINHA In Türkiye On 6 June 2026 6 Jun 2026

Incident · Low severity 6 Jun 2026

Handala (MOIS) Turkey ·Media

Iranian State-Sponsored Hacking Group Handala Disrupted Broadcast And Deleted Materials Of News Agency NûJINHA In Türkiye On 6 June 2026

Showing the 8 most recent of 43 Open all in advanced search