Cyber incidents publicly known, by country affected
EuRepoC coded 700 publicly known cyber incidents that started in 2024, affecting organisations or people in 106 countries and territories.
Source: EuRepoC Global Dataset of Cyber Incidents 1.3.2 (4 Mar 2025), CC BY-NC 4.02024Updated 3 Nov 2026
Map. Arrow keys move the map, plus and minus zoom, N and P step through the countries with data, Enter opens the one shown, Escape clears the selection.
Loading the map…
The map could not load.
Borders show who controls an area in practice, as drawn by Natural Earth. Disputed borders are dashed. Borders shown do not imply endorsement. How we treat borders
Summary
EuRepoC coded 700 publicly known cyber incidents that started in 2024, 3.2% less than in 2023. Of these, 28 were attributed to a state, 47 only to groups EuRepoC links to a state, 207 only to other non-state groups, and 388 were not attributed.
106 countries and territories have a figure for 2024. Attributions are as EuRepoC records them, each with who made it: a government, IT-security firms, the media, or a claim by the actor itself. An incident can have several, and all are shown. Groups EuRepoC codes as state-affiliated have their own rows, apart from the state it links them to, and are not in the state arcs or the pairs table; other non-state groups are shown by their kind. EuRepoC’s file has 3,414 incidents; 92 have no start date, so they are left off the map.
Source: EuRepoC Global Dataset of Cyber Incidents 1.3.2 (4 Mar 2025), CC BY-NC 4.02024Updated 3 Nov 2026
Countries and territories with data
Source: EuRepoC Global Dataset of Cyber Incidents 1.3.2 (4 Mar 2025), CC BY-NC 4.02023 and 2024Updated 3 Nov 2026
Attributions to states
| Attributed to | Country affected | Incidents |
|---|---|---|
| Ukraine | Russiaby media reports (1); claimed by the actor itself (11) | 12 |
| North Korea | United Statesby IT-security firms or researchers (1) and another government or third party (1) | 2 |
| Russia | Ukraineby the affected country’s government (1) and IT-security firms or researchers (1) | 2 |
| United States | Chinaby the affected country’s government (1); claimed by the actor itself (1) | 2 |
| China | United Kingdomby media reports (1) and the affected country’s government (1) | 1 |
| China | United Statesby the affected organisation (1) | 1 |
| Israel | Lebanonby the affected country’s government (1) | 1 |
| North Korea | South Koreaby the affected country’s government (1) | 1 |
| Russia | Polandby the affected country’s government (1) | 1 |
Publicly known incidents that EuRepoC coded from public reports. Many operations are never disclosed or attributed. Differences in public reporting and attribution affect the counts. Counts compare documented incidents, not how often a country is targeted.
Source: EuRepoC Global Dataset of Cyber Incidents 1.3.2 (4 Mar 2025), CC BY-NC 4.02024Updated 3 Nov 2026