57.2% of IT and security professionals in both Germany and the U.K. who experienced a breach report being told to keep it confidential.

Germany leads surveyed countries with 58% adoption of automated validation.

87% of IT and security professionals in the U.S., 85% in the U.K., and 77% in Germany say they would likely switch cybersecurity vendors due to data sovereignty concerns.

German security teams report spending just 27% of their time on low-priority or non-exploitable risks.

In the last 16 months, nearly 70% of Europe's ransomware activity was concentrated in Germany, the United Kingdom, France, Italy, and Spain.

More than half of SafePay's ransomware activity in Europe targeted German organisations.

82% of German leaders say accelerating AI development takes priority over establishing data controls.

Germany increased to 8.74%, becoming the third largest adversary infrastructure hosting location and overtaking both Hong Kong (7.22%) and the Netherlands (6.51%).

German aftermarket parts and distribution business had 1.4 TB of internal data advertised on underground forums in December 2025

Overall visibility over where data is stored, processed and potentially accessible is 97% in Germany and 90% in both the Netherlands and Italy.

Around 60% of US organisations, around 60% of UK organisations and 54% of German organisations say legacy technology still forms a significant part of their operations

70% of German executives express confidence in policy frameworks, compared with 54% of US executives and 51% of UK executives

Ransomware victims concentrate geographically with the U.S. at 3,381, Canada at 374, and Germany at 291.

87% of UK IT decision makers already use agentic AI systems, compared with 91% in France and 90% in Germany.

The regional average agreement across EMEA that public policy should mandate open source principles is 77%, with France at 70% and Germany at 72%.

In 2025, the USA and Germany were #1 and #2 targets for breaches with physical consequences. Russia was #3.

The United States remains the most heavily targeted jurisdiction in leak site activity, followed by Canada, Germany, the UK, and other parts of Europe.

Canada accounted for 6% and Germany accounted for 4% of undisclosed ransomware attacks in 2025.

40% of German employees reported that they have worked on AI-based applications that their employers did not approve

28% of cybersecurity professionals in Germany reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.