German industry association Bitkom reports that 87% of German companies suffered data theft or sabotage in the past year, resulting in estimated economic damages totaling €289.2 billion.

Key Points

• Total damages from cyberattacks and industrial espionage rose to €289.2 billion, up from €267 billion in the previous year.
• Russia and China are each responsible for 46% of externally attributed cyber incidents, with Russian activity showing a significant annual increase.
• Malware, ransomware, and phishing remain the primary attack vectors, highlighting a persistent failure to defend against well-known security threats.
• Approximately 59% of surveyed firms now view cyber incidents as an existential economic threat rather than a standard IT issue.
• Bitkom’s report uniquely combines private sector survey data with assessments from Germany’s domestic intelligence services to improve incident attribution.

Why it Matters

The shift toward viewing cyber threats as existential risks is forcing German boards to rethink security spending and prioritize defensive investments. This trend also highlights a growing geopolitical tension as European firms struggle to balance necessary cybersecurity upgrades with an increasing, and often uncomfortable, reliance on American cloud providers.