21.5% of EU enterprises had ICT security incidents in 2023
The highest shares of enterprises experiencing ICT security incidents with consequences were found in Finland, with more than two-fifths (42.2%), followed by Poland (32.5%) and Malta (28.7%). At the other end of the scale, the lowest shares were in Austria (11.5%), Slovenia (11.6%) and Bulgaria (12.1%).
Source dataset: isoc_cisce_ic
The enterprises which dealt the most with ICT-related security incidents in 2023 were in the electricity, gas, steam and air conditioning supply sector (28.8%), information and communication (27.9%), professional, scientific and technical activities (26.8%), real estate activities (25.0%) and water supply including sewerage, waste management and remediation activities (24.1%).
Source dataset: isoc_cisce_icn2
This article marks European Cybersecurity Month, raising awareness of and promoting cybersecurity each year for the entire month of October.
For more information
- Statistics Explained on ICT security in enterprises
- Thematic section on digital economy and society
- Database on digital economy and society
- Digitalisation in Europe – 2025 edition
- Digitalisation dashboard
Methodological notes
-
The types of consequences resulting from ICT security incidents are:
- unavailability of ICT services due to hardware or software failures
- unavailability of ICT services due to Ransomware attacks and/or Denial of Service attack
- destruction or corruption of data due to hardware or software failures
- destruction or corruption of data due to infection of malicious software or unauthorised intrusion
- disclosure of confidential data due to unintentional actions by own employees
- disclosure of confidential data due to intrusion, pharming, phishing attack, intentional actions by own employees
- EU enterprises: at least 10 employees and self-employed persons.
- Data come from the 2024 Community survey on ICT usage and e-commerce in enterprises and refer to all enterprises with at least 10 employees (in NACE Rev. 2 sections C to J, L to N and group 95.1). Further methodological information related to the survey can be found here.
- 2024 data on the consequences from ICT security incidents refer to the preceding calendar year (2023).
For information on upcoming releases visit our release calendar. If you have any queries, please visit our contact us page.
