NATO (member states)
Primarily a target
—
28 received·
0 initiated·
0 responses
·Membership at the event date
Member countries over time
Membership is evaluated at each incident’s start date or response date. Countries that later left remain listed for historical records.
- Albania · 01 Apr 2009–present
- Belgium · 04 Apr 1949–present
- Bulgaria · 29 Mar 2004–present
- Canada · 04 Apr 1949–present
- Croatia · 01 Apr 2009–present
- Czechia · 12 Mar 1999–present
- Denmark · 04 Apr 1949–present
- Estonia · 29 Mar 2004–present
- Finland · 04 Apr 2023–present
- France · 04 Apr 1949–present
- Germany · 06 May 1955–present
- Greece · 18 Feb 1952–present
- Hungary · 12 Mar 1999–present
- Iceland · 04 Apr 1949–present
- Italy · 04 Apr 1949–present
- Latvia · 29 Mar 2004–present
- Lithuania · 29 Mar 2004–present
- Luxembourg · 04 Apr 1949–present
- Montenegro · 05 Jun 2017–present
- Netherlands · 04 Apr 1949–present
- North Macedonia · 27 Mar 2020–present
- Norway · 04 Apr 1949–present
- Poland · 12 Mar 1999–present
- Portugal · 04 Apr 1949–present
- Romania · 29 Mar 2004–present
- Slovakia · 29 Mar 2004–present
- Slovenia · 29 Mar 2004–present
- Spain · 30 May 1982–present
- Sweden · 07 Mar 2024–present
- Turkey · 18 Feb 1952–present
- United Kingdom · 04 Apr 1949–present
- United States · 04 Apr 1949–present
This quarter to date, 28 new cyber operations involving NATO (member states) were added to the database: a 17% increase compared to the previous period. The number of operations is currently 44% above the long-term quarter-to-date average. The Intensity of cyber operations involving NATO (member states) over this quarter to date is rising to 5.0, compared with 3.3 in the same elapsed span of the previous quarter. This is above the all-time average for NATO (member states) of 2.8.
Maintained by EuRepoC research analysts · updated 16 Oct 2026
For this quarter to date, this region appears chiefly as a target — 28 incidents directed at it, 0 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02
28 incidents · as targetCyber activity
Incidents directed at targets in NATO (member states), and the responses they drew.
Cyber incident intensity
Mean4.5/15Moderate
Range 4.0–5.0
Drag the ends of the observed range to narrow intensities.
4 coded incidents · This quarter to date
Database additions by weekincidents against NATO (member states)
Bar height shows incidents added during this quarter to date; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration
0.3Moderate
0/16
Corporate Targets
0.8Moderate
0/5
Education
0.0Moderate
0/5
Defence industry
0.0Moderate
0/3
Government / ministries
0.0Moderate
0/2
Research
0.0Moderate
0/2
Telecommunications
0.0Moderate
0/2
Energy
2.5Moderate
0/2
Civil service / administration is the most-targeted sector — 16 of 28 incidents, 0 answered.
By originwho is behind activity against it
02 / 02
Incidents received & responses
Unknown
France
·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
13 Oct 2026
Incident · Unattributed
13 Oct 2026
Unknown
France
·Government / ministries
Unknown Threat Actors Disrupted the Website of the French General Secretariat for Defence and National Security with a DDoS Attack on 13 October 2026
Unknown
FRDK2 countries
·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
12 Oct 2026
Incident · Unattributed
12 Oct 2026
Unknown
FRDK2 countries
·Food +1
Unknown Threat Actors Manipulated Danfoss Refrigeration Systems in French Supermarkets on 12 October 2026
Unknown
Germany
·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
11 Oct 2026
Incident · Unattributed
11 Oct 2026
Unknown
Germany
·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
10 Oct 2026
Incident · Unattributed
10 Oct 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
Unknown
United States
·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
9 Oct 2026
Incident · Unattributed
9 Oct 2026
Unknown
United States
·Civil service / administration
Unknown Threat Actors Disrupted Internet And Phone Services In City Of North Platte And Lincoln County In United States On 9 October 2026
Unknown
France
·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
9 Oct 2026
Incident · Unattributed
9 Oct 2026
Unknown
France
·Election infrastructure / related systems +1
Unidentified Attackers Disrupted Online Voting in the Left-Wing Primary in France with a DDoS Attack on 9 October 2026
Unknown
France
·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
6 Oct 2026
Incident · Unattributed
6 Oct 2026
Unknown
France
·Critical Manufacturing +1
Unknown Threat Actors Breached Electric and Defence Manufacturer Egide in France on 6 October 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
6 Oct 2026
Incident · Unattributed
6 Oct 2026
Unknown
Germany
·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
Showing the 8 most recent of 28
Open all in advanced search