Signal
Submitted
Apr 28, 2026, 15:07 UTC
Germany faced a 28% increase in cyberattacks from abroad in 2023, with Russia explicitly named as a major threat actor by the Interior Minister.
The German Federal Criminal Police Office (BKA) reported a sharp increase in cybercrime cases originating from abroad in 2023, reaching over 800 victim companies and institutions. Foreign-based attacks grew by 28% compared to the previous year, while domestic attacks slightly decreased. Interior Minister Nancy Faeser explicitly named Russia as a key originator of these attacks, alongside warnings about increased Chinese cyber activities. Bitkom's data indicates a doubling of attacks from Russia and a 50% increase from China, with 80% of companies affected by data theft, espionage, or sabotage. The financial impact reached approximately €206 billion in losses, with ransomware attacks demanding significant ransoms. The main attack periods were spring and autumn, with a reported seasonal pause during summer. Law enforcement efforts have successfully disrupted related criminal networks, but the threat remains high.
Confidence: High
The article explicitly describes a significant, discrete increase in cyberattacks originating from foreign actors targeting Germany, with Russia directly named as an aggressor. The data includes precise quantitative increases, monetary damages, and statements from the Federal Interior Minister and Bitkom, making it a clear aggressor hybrid warfare signal.
Source URL
https://www.tagesschau.de/inland/cyberangriffe-anstieg-bka-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "654c9bbd-05f5-415d-a6b9-718d1d0e3eab",
"url": "https://www.tagesschau.de/inland/cyberangriffe-anstieg-bka-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"cyberattacks",
"cybercrime",
"ransomware",
"Russia",
"China",
"BKA",
"Germany",
"data theft",
"espionage",
"sabotage",
"offensive cyber operations",
"digital threats"
],
"nodes": [],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "Significant Increase in Cyberattacks from Abroad in Germany in 2023; Russia Explicitly Named as Threat Actor",
"description": "In 2023, more than 800 companies and institutions in Germany suffered cyberattacks, with foreign-based actors responsible for a rising share, representing a 28% increase in detected cybercrime offenses originating abroad compared to the previous year. The Bundeskriminalamt (BKA) reports a continuous upward trend in both the quantity and quality of cyberattacks, with Russia explicitly named by Federal Interior Minister Nancy Faeser as a primary source of such hostile actions. While domestic cyberattack cases slightly decreased by 1.8%, cybercrime networks have been successfully disrupted. The digital association Bitkom highlighted a surge in attacks from China and a doubling of attacks from Russia, impacting 80% of companies via data theft, espionage, or sabotage. Ransomware remains a severe threat targeting financially strong companies and public institutions. In total, damages in 2023 reached an estimated €205.9 billion, with €16.1 billion extorted via ransomware. These attacks primarily occurred during spring and autumn, with a traditional 'summer pause.'",
"summary_short": "Germany faced a 28% increase in cyberattacks from abroad in 2023, with Russia explicitly named as a major threat actor by the Interior Minister.",
"summary_extended": "The German Federal Criminal Police Office (BKA) reported a sharp increase in cybercrime cases originating from abroad in 2023, reaching over 800 victim companies and institutions. Foreign-based attacks grew by 28% compared to the previous year, while domestic attacks slightly decreased. Interior Minister Nancy Faeser explicitly named Russia as a key originator of these attacks, alongside warnings about increased Chinese cyber activities. Bitkom's data indicates a doubling of attacks from Russia and a 50% increase from China, with 80% of companies affected by data theft, espionage, or sabotage. The financial impact reached approximately €206 billion in losses, with ransomware attacks demanding significant ransoms. The main attack periods were spring and autumn, with a reported seasonal pause during summer. Law enforcement efforts have successfully disrupted related criminal networks, but the threat remains high.",
"actor_primary": "Russia",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.1657,
"location_coordinates_lon": 10.4515,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly describes a significant, discrete increase in cyberattacks originating from foreign actors targeting Germany, with Russia directly named as an aggressor. The data includes precise quantitative increases, monetary damages, and statements from the Federal Interior Minister and Bitkom, making it a clear aggressor hybrid warfare signal.",
"event_time_utc": "2023-12-31T23:59:59.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-28T15:07:00.042Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Dec 31, 2023, 23:59 UTC
Event time confidence
pm24h
Location
Germany
Primary actor
Russia
Country
Germany
Countries
Germany
Tags
cyberattacks, cybercrime, ransomware, Russia, China, BKA, Germany, data theft, espionage, sabotage, offensive cyber operations, digital threats
Signal
Submitted
Apr 28, 2026, 15:07 UTC
Germany faced a 28% increase in cyberattacks from abroad in 2023, with Russia explicitly named as a major threat actor by the Interior Minister.
The German Federal Criminal Police Office (BKA) reported a sharp increase in cybercrime cases originating from abroad in 2023, reaching over 800 victim companies and institutions. Foreign-based attacks grew by 28% compared to the previous year, while domestic attacks slightly decreased. Interior Minister Nancy Faeser explicitly named Russia as a key originator of these attacks, alongside warnings about increased Chinese cyber activities. Bitkom's data indicates a doubling of attacks from Russia and a 50% increase from China, with 80% of companies affected by data theft, espionage, or sabotage. The financial impact reached approximately €206 billion in losses, with ransomware attacks demanding significant ransoms. The main attack periods were spring and autumn, with a reported seasonal pause during summer. Law enforcement efforts have successfully disrupted related criminal networks, but the threat remains high.
Confidence: High
The article explicitly describes a significant, discrete increase in cyberattacks originating from foreign actors targeting Germany, with Russia directly named as an aggressor. The data includes precise quantitative increases, monetary damages, and statements from the Federal Interior Minister and Bitkom, making it a clear aggressor hybrid warfare signal.
Source URL
https://www.tagesschau.de/inland/cyberangriffe-anstieg-bka-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "654c9bbd-05f5-415d-a6b9-718d1d0e3eab",
"url": "https://www.tagesschau.de/inland/cyberangriffe-anstieg-bka-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"cyberattacks",
"cybercrime",
"ransomware",
"Russia",
"China",
"BKA",
"Germany",
"data theft",
"espionage",
"sabotage",
"offensive cyber operations",
"digital threats"
],
"nodes": [],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "Significant Increase in Cyberattacks from Abroad in Germany in 2023; Russia Explicitly Named as Threat Actor",
"description": "In 2023, more than 800 companies and institutions in Germany suffered cyberattacks, with foreign-based actors responsible for a rising share, representing a 28% increase in detected cybercrime offenses originating abroad compared to the previous year. The Bundeskriminalamt (BKA) reports a continuous upward trend in both the quantity and quality of cyberattacks, with Russia explicitly named by Federal Interior Minister Nancy Faeser as a primary source of such hostile actions. While domestic cyberattack cases slightly decreased by 1.8%, cybercrime networks have been successfully disrupted. The digital association Bitkom highlighted a surge in attacks from China and a doubling of attacks from Russia, impacting 80% of companies via data theft, espionage, or sabotage. Ransomware remains a severe threat targeting financially strong companies and public institutions. In total, damages in 2023 reached an estimated €205.9 billion, with €16.1 billion extorted via ransomware. These attacks primarily occurred during spring and autumn, with a traditional 'summer pause.'",
"summary_short": "Germany faced a 28% increase in cyberattacks from abroad in 2023, with Russia explicitly named as a major threat actor by the Interior Minister.",
"summary_extended": "The German Federal Criminal Police Office (BKA) reported a sharp increase in cybercrime cases originating from abroad in 2023, reaching over 800 victim companies and institutions. Foreign-based attacks grew by 28% compared to the previous year, while domestic attacks slightly decreased. Interior Minister Nancy Faeser explicitly named Russia as a key originator of these attacks, alongside warnings about increased Chinese cyber activities. Bitkom's data indicates a doubling of attacks from Russia and a 50% increase from China, with 80% of companies affected by data theft, espionage, or sabotage. The financial impact reached approximately €206 billion in losses, with ransomware attacks demanding significant ransoms. The main attack periods were spring and autumn, with a reported seasonal pause during summer. Law enforcement efforts have successfully disrupted related criminal networks, but the threat remains high.",
"actor_primary": "Russia",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.1657,
"location_coordinates_lon": 10.4515,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly describes a significant, discrete increase in cyberattacks originating from foreign actors targeting Germany, with Russia directly named as an aggressor. The data includes precise quantitative increases, monetary damages, and statements from the Federal Interior Minister and Bitkom, making it a clear aggressor hybrid warfare signal.",
"event_time_utc": "2023-12-31T23:59:59.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-28T15:07:00.042Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Dec 31, 2023, 23:59 UTC
Event time confidence
pm24h
Location
Germany
Primary actor
Russia
Country
Germany
Countries
Germany
Tags
cyberattacks, cybercrime, ransomware, Russia, China, BKA, Germany, data theft, espionage, sabotage, offensive cyber operations, digital threats