⚠️ Since the reporting obligation came into force in April 2025, 264 cyberattacks have been reported to the Federal Office for Cybersecurity. Banks, public administrations, energy providers, hospitals and telecoms operators must now report any attack within 24 hours. The incidents mainly affect the public sector, IT and telecommunications, as well as finance and insurance. In most cases, they involve data theft, website outages or malware infections.
🏢 This transparency aims to better gauge the level of threat and strengthen prevention. At this stage, no failure to comply with the reporting obligation (punishable by a heavy fine) has been observed. Interestingly, although large organisations are targeted, individuals and SMEs remain, in terms of volume, even more exposed.
✨ At Awareness Expert, we help you better understand the risks and protect yourself against them.