RESEARCH PREVIEW — Attention: Data Spaces may hack the planet.
Data Spaces

NATO (member states)

Analyse
Primarily a target — 379 received· 7 initiated· 147 responses ·Membership at the event date
Member countries over time

Membership is evaluated at each incident’s start date or response date. Countries that later left remain listed for historical records.

This year to date, 381 new cyber operations involving NATO (member states) were added to the database: a 3% increase compared to the previous period. The number of operations is currently 7% below the long-term year-to-date average. The Intensity of cyber operations involving NATO (member states) over this year to date is declining to 3.2, compared with 3.3 in the same elapsed span of the previous year. This is above the all-time average for NATO (member states) of 2.8.

Maintained by EuRepoC research analysts · updated 16 Oct 2026
379received initiated7
For this year to date, this region appears chiefly as a target — 379 incidents directed at it, 7 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02

Cyber activity

379 incidents · as target
As target 379 As actor 7

Incidents directed at targets in NATO (member states), and the responses they drew.

Cyber incident intensity
Mean3.3/15Moderate
Range 1.0–9.0

Drag the ends of the observed range to narrow intensities.

351 coded incidents · This year to date
Database additions by monthincidents against NATO (member states)
Bar height shows incidents added during this year to date; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration 128 2.9Moderate 37/128 Health 70 3.4Moderate 15/70 Government / ministries 45 2.9Moderate 19/45 Corporate Targets 40 2.9Moderate 5/40 Finance 39 3.0Moderate 5/39 Education 37 3.0Moderate 6/37 Transportation 25 3.3Moderate 2/25 Energy 22 3.5Moderate 6/22
Civil service / administration is the most-targeted sector — 128 of 379 incidents, 37 answered.
By originwho is behind activity against it
Russia 25incidents avg 3.2 · Moderate China 19incidents avg 3.3 · Moderate Iran, Islamic Republic of 18incidents avg 3.3 · Moderate Korea, Democratic People's Republic of 4incidents avg 3.0 · Moderate United States 2incidents avg 2.5 · Moderate Russia, Belarus 1incident avg 3.0 · Moderate Serbia 1incident avg 1.0 · Moderate Algeria 1incident avg 5.0 · Elevated
Showing 8 of 14
02 / 02

Incidents received & responses

Unknown France ·Government / ministries Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026 13 Oct 2026
Incident · Unattributed 13 Oct 2026
Unknown France ·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
Unknown FRDK2 countries ·Food +1 Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026 12 Oct 2026
Incident · Unattributed 12 Oct 2026
Unknown FRDK2 countries ·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
Unknown Germany ·Civil service / administration Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026 11 Oct 2026
Incident · Unattributed 11 Oct 2026
Unknown Germany ·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
Unknown Germany ·Civil service / administration Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026 10 Oct 2026
Incident · Unattributed 10 Oct 2026
Unknown Germany ·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
Unknown United States ·Civil service / administration Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026 9 Oct 2026
Incident · Unattributed 9 Oct 2026
Unknown United States ·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
Unknown France ·Election infrastructure / related systems +1 Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026 9 Oct 2026
Incident · Unattributed 9 Oct 2026
Unknown France ·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
Unknown France ·Critical Manufacturing +1 Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026 6 Oct 2026
Incident · Unattributed 6 Oct 2026
Unknown France ·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
Unknown Germany ·Civil service / administration Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026 6 Oct 2026
Incident · Unattributed 6 Oct 2026
Unknown Germany ·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
Showing the 8 most recent of 383 Open all in advanced search
Search