German firms see surge in cyber attacks during summer holidays

A ManageEngine study of 302 German executives finds that three‑quarters of companies suffered a cyber incident in the past year, with phishing and social‑engineering accounting for 56 % of reported events. Nearly half (45 %) view AI‑driven attacks as the biggest risk for the next twelve months, and 35 % plan to prioritize investments to counter such threats.

Seasonal staffing gaps further amplify the threat. Analysis by cyber‑insurance provider Stoïk shows that July and August experience the highest damage rates, especially in the hotel sector, where the share of losses rose from 2.67 % to 7.04 %. Over 44 % of summer incidents involve manipulated emails, 36 % involve data theft, and 69 % of reported damages stem from email fraud. Reduced oversight during vacations prolongs detection, extending ransomware dwell time from an average of 22 days to 31 days in the summer months.

The combined findings highlight ongoing operational challenges for German IT and security teams, the growing concern over AI‑enhanced attacks, and the need for stronger governance during periods of reduced personnel.