NATO (member states)
Primarily a target
—
2613 received·
188 initiated·
544 responses
·Membership at the event date
Member countries over time
Membership is evaluated at each incident’s start date or response date. Countries that later left remain listed for historical records.
- Albania · 01 Apr 2009–present
- Belgium · 04 Apr 1949–present
- Bulgaria · 29 Mar 2004–present
- Canada · 04 Apr 1949–present
- Croatia · 01 Apr 2009–present
- Czechia · 12 Mar 1999–present
- Denmark · 04 Apr 1949–present
- Estonia · 29 Mar 2004–present
- Finland · 04 Apr 2023–present
- France · 04 Apr 1949–present
- Germany · 06 May 1955–present
- Greece · 18 Feb 1952–present
- Hungary · 12 Mar 1999–present
- Iceland · 04 Apr 1949–present
- Italy · 04 Apr 1949–present
- Latvia · 29 Mar 2004–present
- Lithuania · 29 Mar 2004–present
- Luxembourg · 04 Apr 1949–present
- Montenegro · 05 Jun 2017–present
- Netherlands · 04 Apr 1949–present
- North Macedonia · 27 Mar 2020–present
- Norway · 04 Apr 1949–present
- Poland · 12 Mar 1999–present
- Portugal · 04 Apr 1949–present
- Romania · 29 Mar 2004–present
- Slovakia · 29 Mar 2004–present
- Slovenia · 29 Mar 2004–present
- Spain · 30 May 1982–present
- Sweden · 07 Mar 2024–present
- Turkey · 18 Feb 1952–present
- United Kingdom · 04 Apr 1949–present
- United States · 04 Apr 1949–present
Across the full record, 2685 cyber operations involving NATO (member states) were added to the database. The all-time mean Intensity of cyber operations involving NATO (member states) is 2.8.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For all time, this region appears chiefly as a target — 2613 incidents directed at it, 188 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
2613 incidents · as targetCyber activity
Incidents directed at targets in NATO (member states), and the responses they drew.
Cyber incident intensity
Mean2.8/15Moderate
Range 1.0–9.0
Drag the ends of the observed range to narrow intensities.
2577 coded incidents · All time
Database additions by yearincidents against NATO (member states)
Bar height shows incidents added during all time; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration
3.0Moderate
306/676
Government / ministries
2.2Moderate
110/444
Corporate Targets
2.6Moderate
65/389
Health
3.6Moderate
108/373
Education
3.4Moderate
74/232
Finance
2.8Moderate
61/229
Telecommunications
2.9Moderate
33/180
Transportation
2.8Moderate
57/170
Civil service / administration is the most-targeted sector — 676 of 2613 incidents, 306 answered.
By originwho is behind activity against it
Russia
320incidents
avg 2.4 · Moderate
China
241incidents
avg 2.4 · Moderate
Iran, Islamic Republic of
101incidents
avg 2.7 · Moderate
Korea, Democratic People's Republic of
50incidents
avg 2.3 · Moderate
United States
34incidents
avg 2.5 · Moderate
Turkey
32incidents
avg 1.8 · Moderate
Syria
14incidents
avg 1.1 · Moderate
United Kingdom
11incidents
avg 1.7 · Moderate
Spain
7incidents
avg 3.1 · Moderate
Germany
6incidents
avg 1.8 · Moderate
Ukraine
6incidents
avg 1.7 · Moderate
Sudan
6incidents
avg 1.0 · Moderate
India
6incidents
avg 1.7 · Moderate
Palestine
5incidents
avg 3.0 · Moderate
Pakistan
4incidents
avg 1.5 · Moderate
Netherlands
4incidents
avg 3.5 · Moderate
Italy
4incidents
avg 3.0 · Moderate
Brazil
4incidents
avg 3.0 · Moderate
Vietnam
4incidents
avg 1.8 · Moderate
Lebanon
4incidents
avg 2.2 · Moderate
Russia, Belarus
3incidents
avg 2.3 · Moderate
Belarus
3incidents
avg 1.7 · Moderate
Romania
3incidents
avg 2.3 · Moderate
Eastern Europe
3incidents
avg 5.0 · Elevated
France
3incidents
avg 3.3 · Moderate
Bangladesh
3incidents
avg 1.0 · Moderate
Saudi Arabia
3incidents
avg 3.3 · Moderate
United Arab Emirates
3incidents
avg 2.7 · Moderate
China, Russia
3incidents
avg 1.3 · Moderate
Serbia
2incidents
avg 1.0 · Moderate
Algeria
2incidents
avg 3.5 · Moderate
Korea, Republic of
2incidents
avg 1.5 · Moderate
Malaysia
2incidents
avg 2.5 · Moderate
Israel
2incidents
avg 1.5 · Moderate
South Asia (region)
2incidents
avg 3.0 · Moderate
Indonesia
2incidents
avg 2.5 · Moderate
Yemen
2incidents
avg 1.0 · Moderate
Poland
2incidents
avg 4.5 · Moderate
Asia (region)
2incidents
avg 3.5 · Moderate
Greece
2incidents
avg 2.5 · Moderate
Qatar
2incidents
avg 1.0 · Moderate
Tunisia
2incidents
avg 1.0 · Moderate
Czech Republic
2incidents
avg 1.0 · Moderate
Not available, Bulgaria
1incident
avg 5.0 · Elevated
China, South China Sea (region)
1incident
avg 3.0 · Moderate
Australia
1incident
avg 0.0 · Moderate
Eastern Europe, Russia
1incident
avg 3.0 · Moderate
Kazakhstan
1incident
avg 3.0 · Moderate
South America
1incident
avg 3.0 · Moderate
Russia, China
1incident
avg 4.0 · Moderate
Switzerland
1incident
avg 4.0 · Moderate
Middle East (region)
1incident
avg 2.0 · Moderate
Gulf Countries (region)
1incident
avg 1.0 · Moderate
Philippines
1incident
avg 1.0 · Moderate
Ethiopia
1incident
avg 3.0 · Moderate
Mena Region (region)
1incident
avg 3.0 · Moderate
Armenia
1incident
avg 1.0 · Moderate
Bahrain
1incident
avg 2.0 · Moderate
Canada
1incident
avg 2.0 · Moderate
Egypt
1incident
avg 1.0 · Moderate
Portugal
1incident
avg 1.0 · Moderate
Latvia
1incident
avg 1.0 · Moderate
Iraq
1incident
avg 1.0 · Moderate
Sweden
1incident
avg 1.0 · Moderate
Showing 8 of 64
02 / 02
Incidents received & responses
Unknown
France
·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
13 Oct 2026
Incident · Unattributed
13 Oct 2026
Unknown
France
·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
Unknown
FRDK2 countries
·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
12 Oct 2026
Incident · Unattributed
12 Oct 2026
Unknown
FRDK2 countries
·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
Unknown
Germany
·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
11 Oct 2026
Incident · Unattributed
11 Oct 2026
Unknown
Germany
·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
10 Oct 2026
Incident · Unattributed
10 Oct 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
Unknown
United States
·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
9 Oct 2026
Incident · Unattributed
9 Oct 2026
Unknown
United States
·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
Unknown
France
·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
9 Oct 2026
Incident · Unattributed
9 Oct 2026
Unknown
France
·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
Unknown
France
·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
6 Oct 2026
Incident · Unattributed
6 Oct 2026
Unknown
France
·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
6 Oct 2026
Incident · Unattributed
6 Oct 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
Showing the 8 most recent of 2628
Open all in advanced search