Report by CrowdStrike

CrowdStrike 2025 European Threat Landscape Report

6 FINDINGSPublished Nov 3, 2025
View Original Report →

Key Findings

92% of ransomware cases in Europe involved file encryption and data theft in 2025

RansomwareEuropeData theftFile encryption

260 initial access brokers advertised to over 1,400 European organizations in 2025

Initial access brokersEurope

Chinese state-sponsored adversaries targeted industries in 11 countries in 2025

State-Sponsored AttacksChinaEurope

Ransomware deployment speed increased by 48% as observed in 2025

RansomwareRansomware deploymentEurope

Since January 1, 2024, more than 2,100 victims across Europe were named on extortion leak sites

RansomwareExtortion leak sitesEurope

European organizations accounted for nearly 22% of global ransomware and extortion victims in 2025

RansomwareExtortionEurope