NATO (member states)
Primarily a target
—
92 received·
1 initiated·
13 responses
·Membership at the event date
Member countries over time
Membership is evaluated at each incident’s start date or response date. Countries that later left remain listed for historical records.
- Albania · 01 Apr 2009–present
- Belgium · 04 Apr 1949–present
- Bulgaria · 29 Mar 2004–present
- Canada · 04 Apr 1949–present
- Croatia · 01 Apr 2009–present
- Czechia · 12 Mar 1999–present
- Denmark · 04 Apr 1949–present
- Estonia · 29 Mar 2004–present
- Finland · 04 Apr 2023–present
- France · 04 Apr 1949–present
- Germany · 06 May 1955–present
- Greece · 18 Feb 1952–present
- Hungary · 12 Mar 1999–present
- Iceland · 04 Apr 1949–present
- Italy · 04 Apr 1949–present
- Latvia · 29 Mar 2004–present
- Lithuania · 29 Mar 2004–present
- Luxembourg · 04 Apr 1949–present
- Montenegro · 05 Jun 2017–present
- Netherlands · 04 Apr 1949–present
- North Macedonia · 27 Mar 2020–present
- Norway · 04 Apr 1949–present
- Poland · 12 Mar 1999–present
- Portugal · 04 Apr 1949–present
- Romania · 29 Mar 2004–present
- Slovakia · 29 Mar 2004–present
- Slovenia · 29 Mar 2004–present
- Spain · 30 May 1982–present
- Sweden · 07 Mar 2024–present
- Turkey · 18 Feb 1952–present
- United Kingdom · 04 Apr 1949–present
- United States · 04 Apr 1949–present
In the last 60 days, 93 new cyber operations involving NATO (member states) were added to the database: a 3% decrease compared to the previous period. The number of operations is currently 18% above the long-term 60-day average. The Intensity of cyber operations involving NATO (member states) over the last 60 days is rising to 3.5, compared with 3.2 in the preceding 60-day period. This is above the all-time average for NATO (member states) of 2.8.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For last 60 days, this region appears chiefly as a target — 92 incidents directed at it, 1 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
92 incidents · as targetCyber activity
Incidents directed at targets in NATO (member states), and the responses they drew.
Cyber incident intensity
Mean3.5/15Moderate
Range 1.0–6.0
Drag the ends of the observed range to narrow intensities.
68 coded incidents · Last 60 days
Database additions by weekincidents against NATO (member states)
Bar height shows incidents added during last 60 days; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration
2.2Moderate
6/37
Health
3.5Moderate
4/19
Corporate Targets
2.3Moderate
1/13
Education
2.1Moderate
2/11
Finance
3.1Moderate
1/10
Government / ministries
2.9Moderate
1/7
Defence industry
1.8Moderate
1/5
Digital Provider
1.8Moderate
2/5
Civil service / administration is the most-targeted sector — 37 of 92 incidents, 6 answered.
02 / 02
Incidents received & responses
Unknown
France
·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
13 Oct 2026
Incident · Unattributed
13 Oct 2026
Unknown
France
·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
Unknown
FRDK2 countries
·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
12 Oct 2026
Incident · Unattributed
12 Oct 2026
Unknown
FRDK2 countries
·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
Unknown
Germany
·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
11 Oct 2026
Incident · Unattributed
11 Oct 2026
Unknown
Germany
·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
10 Oct 2026
Incident · Unattributed
10 Oct 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
Unknown
United States
·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
9 Oct 2026
Incident · Unattributed
9 Oct 2026
Unknown
United States
·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
Unknown
France
·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
9 Oct 2026
Incident · Unattributed
9 Oct 2026
Unknown
France
·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
Unknown
France
·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
6 Oct 2026
Incident · Unattributed
6 Oct 2026
Unknown
France
·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
6 Oct 2026
Incident · Unattributed
6 Oct 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
Showing the 8 most recent of 92
Open all in advanced search