Study: About a quarter of companies with high cybersecurity preparedness reported at least one incident in 2025

 Nearly a quarter (22%) of Romanian companies with the highest level of cybersecurity preparedness reported at least one incident in 2025, according to the results of a specialist study released on Wednesday.According to the Fort study, more than 80% of participating organisations use antivirus and firewall protection, multi-factor authentication and backup solutions. At the same time, the data show that a high level of technical protection does not automatically mean preparedness for an incident: 15% of organisations have implemented eight or nine of the nine technical measures analysed but have never tested their response plan to see how they would react in the event of an attack.Another apparently paradoxical finding is that better-prepared organisations report more security incidents: 22% of those in the highest preparedness category reported at least one incident in 2025, compared with only 4% of those in the lowest category."The difference does not mean that mature organisations are attacked more often. The data suggest that they have a greater capacity to identify and report incidents. A low number of reported incidents is not necessarily a sign of better security," the authors of the study noted.Against this backdrop, more than half of companies with a high level of maturity (54%) plan to increase their cybersecurity budgets in 2026, compared with 4% of vulnerable organisations.Organisations that provide regular training report phishing incidents at a rate of 14.6%, compared with 1.9% among those that do not regularly train their employees. In this context, 52% of respondents cited employee training as their most common cybersecurity priority for this year.The study also examined the adoption of Artificial Intelligence (AI) and the security measures companies are taking alongside it: 94% use the new technology in one form or another, while only 37% have written policies governing its use that have been communicated to employees.According to the cited source, the gap is also significant from a risk perspective, with around 70% of respondents saying they are concerned that employees could enter sensitive company information into AI tools.The study "Cybersecurity in Romania in 2026: An Overview", conducted together with Data Diggers and Promocrat between May and July 2026 among 211 organisations, examined cybersecurity practices, incident detection and response capabilities, investment and organisational priorities, the use of AI, as well as preparedness for NIS2 and DORA requirements.Fort S.A. is a Romanian company specialising in advanced cybersecurity solutions, established in 2015 and listed on the AeRO market of the Bucharest Stock Exchange (BVB).