Economic aggression from Russia and China towards Germany
In the digital age, the importance of IT security for businesses has never been more evident. A recent study shows that the share of IT security in the IT budget of companies has slightly increased to 18 percent, reflecting a growing awareness of the need for robust cyber defenses.
However, this increased investment has not been enough to fully protect companies from cyber threats. According to the report, 25 percent of companies have suffered damage from Distributed Denial of Service (DDoS) attacks, while 24 percent were infected with other malware, 22 percent were victims of phishing attacks, and 21 percent were affected by password attacks.
The damage from these attacks is significant. The share of cyber attack damage in the total damage to the German economy has risen to 70 percent, equivalent to 202.4 billion euros. This figure has further increased to 289.2 billion euros, as the damage from newer attack methods like deepfakes and robocalls has also risen.
Organized crime is the most frequent perpetrator of cyberattacks, with 68 percent of cases. Foreign intelligence services are also a growing concern, with 28 percent of affected companies attributing at least one attack to a foreign intelligence service. Among the most important source countries for cyberattacks on German companies in 2025 are Russia and China, each accounting for attacks on 46 percent of affected companies.
The Vice President of the Federal Office for the Protection of the Constitution, Sinan Selen, emphasizes the need for stronger cooperation between national and international security agencies and German economic companies. Dr. Ralf Wintergerst, President of Bitkom, also stresses the importance of comprehensive protection as an essential part of digitalizing companies.
Two-thirds (66 percent) of all companies believe that AI is increasingly being used in attacks, and 67 percent consider their company too dependent on security solutions from the USA. Three-quarters (74 percent) want politics to support German providers of cybersecurity solutions more strongly.
Ransomware attacks have seen a significant increase, affecting 34 percent of companies, almost three times as many as in 2022 (12 percent). Companies that fell victim to ransomware attacks paid between 100,000 and 500,000 euros, and 12 percent paid between 500,000 euros and 1 million euros.
Despite these challenges, there are signs of progress. More than 35 percent of companies now receive indications of the respective attackers from authorities due to increased cooperation. Nearly 9 out of 10 companies report data and IT equipment theft, digital and analog industrial espionage, or sabotage. Intellectual property such as patents or research and development information is the most commonly stolen data in 29 percent of affected companies.
As the digital landscape continues to evolve, it is clear that cybersecurity will remain a critical concern for businesses in Germany and beyond. The need for robust defenses, increased cooperation, and support for domestic cybersecurity solutions is more important than ever.
