EU workplace cybersecurity threats and awareness

A Flash Eurobarometer report commissioned by the European Commission indicates that cybersecurity threats have become a routine aspect of professional life for workers across the European Union. The study found that two-thirds of European companies experienced at least one cybersecurity incident within a six-month period. Phishing was identified as the most prevalent threat, affecting 39% of employees, followed by personal data theft, malware, and AI-driven scams.

The report noted a gap between employee awareness and actual practice; while many workers view cyberattacks as serious, many fail to follow basic hygiene, such as consistently checking email senders.

In response to these ongoing risks, the European Union launched its annual Cybersecurity Month. Coordinated by the European Union Agency for Cybersecurity (ENISA), the European Commission, and member states, the campaign utilizes workshops and webinars to promote digital safety. This year’s initiative places a heavy focus on phishing and smishing, specifically targeting fraudulent SMS messages designed to harvest sensitive information like bank credentials and digital identities.