A Bitkom study shows German companies are increasingly targeted by cyberattacks tied to foreign intelligence, with 37% of affected firms reporting at least one incident in the past year, up from 28% the year before and 7% in 2023.

Attribution points to China (52%) and Russia (49%), though state actors may use criminal networks or proxy attackers, complicating how attacks are attributed.

Estimated damages from data theft, espionage, or sabotage range from €211 billion to €270.8 billion, encompassing direct costs, legal issues, and lost competitive edge, with 58% of firms reporting a cyberattack-related loss in the past year.

A disclaimer notes the article is informational and not a buy/sell recommendation.

While attribution has somewhat improved, the report leaves the optimal security measures for firms unresolved.

An advocate argues for a “little more zero-trust” and a country-agnostic approach to vulnerabilities and backdoors, with resilience and software security at the core of corporate strategy.

The threat landscape is evolving rapidly with AI-enabled social engineering, more sophisticated attackers, and policy efforts to bolster defense amid budget and dependency challenges.

Germany’s security chief warns of high cyber threat levels and urges stronger, multi-layered defense, faster patch management, and preventive measures rather than reactive responses.

Proposed reforms to the German combined intelligence law would grant broader powers to BND and BfV to deter and disrupt attacker infrastructure, not just expand surveillance.

Vulnerabilities highlighted include software misconfigurations, poor preparation to detect attacks, and weak identity and access management.

Investors should monitor management commentary on IT infrastructure protection and supply chain resilience as indicators of long-term performance for German-exposed firms.

Experts stress early detection, securing evidence, rapid reporting to authorities, and embedding cybersecurity into digital strategy as essential defenses against espionage and sabotage.