Spain faces record cyberattacks amid legislative delays

Cyberattacks in Spain have reached record highs. The National Cybersecurity Institute (INCIBE) managed 122,223 incidents in 2025, representing a 26% increase from 2024. Additionally, the institute identified 237,028 vulnerable systems that could be exploited by criminals.

Malware was the primary threat with 55,411 incidents, followed by online fraud involving 45,445 cases, where phishing was the dominant technique. Experts note that artificial intelligence is making phishing more effective by eliminating the linguistic errors that previously helped identify fraudulent communications.

Compounding these technical threats, the implementation of the European NIS2 Directive faces delays. The dissolution of the Spanish Parliament due to early elections is expected to further stall the transposition of this directive into national law. Experts warn that this legislative paralysis leaves companies and public administrations more vulnerable and weakens the country's overall cybersecurity model.