ENISA Threat Landscape 2025: public administration is the leading target across 4,875 incidents

Seven prime threats

• Threats against availability
• Ransomware
• Threats against data
• Malware
• Social engineering
• Information manipulation and interference
• Supply chain attacks

The sectors taking the most of it

Public administration leads clearly at 38.2 per cent of recorded incidents, followed by transport at 7.5 per cent, digital infrastructure and services at 4.8 per cent, finance at 4.5 per cent and manufacturing at 2.9 per cent.

A change in the shape of the attacks

The edition's more interesting observation is that the picture is shifting away from single high-impact events and towards continuous, diversified campaigns that together wear down an organisation's ability to recover. That matters for measurement: judging your readiness by the number of major incidents you have survived will understate the risk.

How to use a report like this

A threat landscape is most useful as input to prioritisation, not as a forecast. If your sector appears high on the list, that is a good reason to review the controls that match those specific threats first — ransomware readiness and third-party risk being the obvious two.