As cited
Citation snapshot as of .
ransomware
The German Cyber Criminal Überfall: Shifts in Europe's Data Leak Landscape
Germany has become the primary target for cyber extortion in Europe during 2025, experiencing a 92% surge in data leak site posts compared to 2024, significantly outpacing regional neighbors. This shift reflects threat actors pivoting away from saturated North American and UK markets toward German mid-market companies (Mittelstand), enabled by improved AI-driven localization and a more fragmented ransomware ecosystem following major law enforcement takedowns. The surge should be contextualized cautiously, as data leak site metrics represent only refused extortion demands and may partially reflect lower ransom payment rates driving increased public shaming tactics.
Why it matters: German organizations across all sectors face dramatically elevated extortion risk as cybercriminals explicitly seek access to German targets; practitioners should strengthen incident response plans, threat intelligence monitoring for German-focused campaigns, and extortion defense strategies to avoid becoming primary targets in this newly competitive market.
- Source published
- First seen by Cybersecurity Tracker