Turkey

Analyse

Primarily a target — 279 received· 53 initiated· 41 responses ·EU candidate · NATO

Across the full record, 312 cyber operations involving Turkey were added to the database. The all-time mean Intensity of cyber operations involving Turkey is 2.4.

Maintained by EuRepoC research analysts · updated 16 Oct 2026

279received initiated53

For all time, this country appears chiefly as a target — 279 incidents directed at it, 53 it is linked to initiating.

Source: EuRepoC Global Database as of 16 Oct 2026.

01 / 02

Cyber activity

279 incidents · as target

As target 279 As actor 53

Incidents directed at Turkey targets, and the responses they drew.

Cyber incident intensity

Mean2.5/15Moderate

Range 1.0–9.0

Drag the ends of the observed range to narrow intensities.

Minimum Maximum

276 coded incidents · All time

Database additions by yearincidents against Turkey

Bar height shows incidents added during all time; select a bar to filter this interval; hover for average intensity.

Most-targeted sectorswhat gets hit

SectorIncidentsIntensityResponded

Government / ministries 110 2.6Moderate 11/110 Corporate Targets 79 2.6Moderate 5/79 Telecommunications 50 2.9Moderate 5/50 Finance 39 2.6Moderate 5/39 Energy 38 3.4Moderate 7/38 Transportation 34 3.0Moderate 6/34 Civil service / administration 33 2.6Moderate 8/33 Media 32 2.8Moderate 5/32

Government / ministries is the most-targeted sector — 110 of 279 incidents, 11 answered.

By originwho is behind activity against it

Iran, Islamic Republic of 43incidents avg 2.7 · Moderate China 42incidents avg 2.5 · Moderate Russia 24incidents avg 3.2 · Moderate Turkey 20incidents avg 1.9 · Moderate Korea, Democratic People's Republic of 12incidents avg 2.5 · Moderate United States 8incidents avg 3.2 · Moderate Palestine 4incidents avg 3.0 · Moderate United Arab Emirates 3incidents avg 2.7 · Moderate

Showing 8 of 29

02 / 02

Incidents received & responses

Unknown Turkey ·Civil service / administration +2 Unknown Threat Actors Launched Ransomware Attack On Yildiz Technical University In Turkey on 1 October 2026 1 Oct 2026

Incident · Unattributed 1 Oct 2026

Unknown Turkey ·Civil service / administration +2

Unknown Threat Actors Launched Ransomware Attack On Yildiz Technical University In Turkey on 1 October 2026

AUUSJPDE4 statesjoint WaterPlum Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026 Official policy 18 Sep 2026

Official policy 18 Sep 2026

AUUSJPDE4 states WaterPlum

Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026

USFederal Bureau of Investigation Mabna Institute US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026 Criminal proceedings 18 Aug 2026

Criminal proceedings 18 Aug 2026

USFederal Bureau of Investigation Mabna Institute

US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026

CACZFRNZ+1216 statesjoint LAUNDRY BEAR (Russian Federation) International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026 Technical disclosure 23 Jul 2026

Technical disclosure 23 Jul 2026

CACZFRNZ+1216 states LAUNDRY BEAR (Russian Federation)

International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026

NLNetherlands Defence Intelligence and Security Service one Russian intelligence and security se… (Russian Federation) Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026 Official policy 10 Jul 2026

Official policy 10 Jul 2026

NLNetherlands Defence Intelligence and Security Service one Russian intelligence and security se… (Russian Federation)

Dutch AIVD and MIVD Issued a Cybersecurity Advisory Related to Russian State Actors Compromising IP Cameras in Europe for Military Purposes , 10 July 2026

INC Ransom USCOCHAE+185189 countries ·Unknown +2 INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026 22 Jun 2026

Incident · Low severity 22 Jun 2026

INC Ransom USCOCHAE+185189 countries ·Unknown +2

INC Ransomware Group Exploited Zero-Day Vulnerability in Remote Access Gateway SonicWall SMA1000 Affecting Private and Governmental Organizations in Multiple Countries since 22 June 2026

USCybersecurity and Infrastructure Security Agency Andorra US CISA Issued an Alert on Hardening Compromised Fortinet Devices after Reports of Credential Exposures, 22 June 2026 Technical disclosure 22 Jun 2026

Technical disclosure 22 Jun 2026

USCybersecurity and Infrastructure Security Agency Andorra

US CISA Issued an Alert on Hardening Compromised Fortinet Devices after Reports of Credential Exposures, 22 June 2026

GBUnited Kingdom’s National Cyber Security Centre Andorra UK National Cyber Security Centre Issued Guidance on Fortinet Firewalls and VPN Gateways Targeting on 19 June 2026 Technical disclosure 19 Jun 2026

Technical disclosure 19 Jun 2026

GBUnited Kingdom’s National Cyber Security Centre Andorra

UK National Cyber Security Centre Issued Guidance on Fortinet Firewalls and VPN Gateways Targeting on 19 June 2026

Showing the 8 most recent of 319 Open all in advanced search