Report: Romania's energy sector - the most exposed to cyberattacks

Over 14 million cyberattacks are being recorded every month by the Business Internet Security (BIS) service, the most frequent occurrences being ransomware, DDoS and phishing incidents, shows data centralized in the Business Internet Security 2025 report released on Tuesday.According to the 7th edition of the survey conducted by Orange Business, the energy sector remains the most exposed, being the target of 31% of the recorded cyberattacks. It is followed by public administration (27%) and the IT&C industry (25%).Also, Bucharest is the most targeted city in Romania, with over 1.25 million incidents prevented each month."The digitalization of Romanian companies comes not only with benefits, but also with significant security challenges, as attacks are becoming increasingly sophisticated, and the protection of IT infrastructures is turning into an absolute priority for companies all across the board. (...) Ransomware remains the main threat, affecting 32% of the monitored organizations, while DDoS attacks saw an alarming increase, using IoT devices to generate large volumes of malicious traffic," the report states.Predictions for 2025 as far as cyberthreats are concerned highlight the increase in personalized attacks as a result of the use of Artificial Intelligence; the expansion of attacks on critical infrastructures, especially through ransomware; stricter regulations that will compel companies to invest in compliance; the vulnerability of supply chains and Internet of Things devices; increased automation of security processes, amid a lack of experts.Orange Business offers a range of complete threat protection solutions, such as: Business Internet Security (BIS) - protects company data, employees and visitors against cyberattacks; Threats & Exposures Management - AI-based security solution which detects, assesses and reports security vulnerabilities in websites, web applications and resources with public IPs; Security Operations Center (SOC) - protects companies against risks that may affect information, apps, databases, servers, workstations and systems.In a first, this year's edition of the Orange Business Internet Security 2025 report was also written in Romanian.