# German firms' cloud adoption & rising hybrid threats > Live situation record from CLSTR: https://clstr.news/situations/german-firms-cloud-adoption-and-outage-risk > Updated: 2026-09-12T18:17:49.000Z. Sources: 38. Developments: 15. German firms continue to prioritize digital sovereignty, often accepting higher costs and complexity to maintain data control and reduce dependence on global hyperscalers. A Plusserver study found 71.1% of respondents view digital sovereignty as business-critical, though 59% of companies report that technical challenges like data migration prevent them from switching providers. This shift is driven by IT security, cybersecurity, and regulatory frameworks such as NIS2 and DORA, which push sectors like finance and healthcare toward data residency and architectural sovereignty. To manage these threats, German, Austrian, and Swiss SMEs are increasingly outsourcing to external providers. According to the ‘Stand der IT-Sicherheit 2026’ study, companies are opting for managed services, such as Managed Detection and Response (MDR), due to rising risks and internal resource shortages. Despite this outsourcing trend, internal expertise is improving, with the proportion of organizations possessing specialized security staff rising from under 50% in 2023 to over 70% in 2026. The threat landscape is expanding into hybrid warfare. A survey by the Institut der deutschen Wirtschaft (IW) involving 1,041 companies reveals that one in five German businesses is experiencing the effects of hybrid threats from abroad, including cyberattacks, espionage, sabotage, and disinformation campaigns. Large companies with more than 250 employees report being more frequently targeted, with the information, communication, energy, and water sectors facing the highest risks. While IT security investments have increased, the IW notes a lack of preparedness regarding energy supply security and emergency plans for critical infrastructure. Siemens Energy CEO Christian Bruch has called for a civilian operations plan to protect essential services like electricity, water, and food supplies to ensure a coordinated response during crises. Adding to the complexity of digital sovereignty, privacy advocate Max Schrems has warned that the physical location of data centers may not guarantee protection from foreign surveillance. ## Claims - One in five German companies report experiencing effects from hybrid threats originating from abroad. (corroborated by 5 sources) - The IW survey included 1,041 companies. (corroborated by 5 sources) - Companies with more than 250 employees are more likely to experience hybrid threats. (corroborated by 5 sources) - The information and communication sectors perceive the highest risks from hybrid threats. (corroborated by 5 sources) - Siemens Energy CEO Christian Bruch stated that the threat level has increased significantly over the past 12 to 18 months. (corroborated by 5 sources) - Christian Bruch has called for a civilian operations plan to protect critical infrastructure like electricity, water, and food supplies. (corroborated by 5 sources) - Genetec Inc. is a leading global provider of physical security software for enterprises. (corroborated by 3 sources) - Genetec will showcase its cloud-based Security Center SaaS platform at the Security Essen trade fair. (corroborated by 3 sources) - The Security Essen trade fair is scheduled for September 22 to September 25, 2026. (corroborated by 3 sources) - According to a 2026 report, 75 percent of companies no longer operate IT and physical security as separate domains. (corroborated by 3 sources) ## Timeline ### 2026-09-12: Max Schrems warns US data access risks regardless of server location Privacy expert Max Schrems warns that storing data in European facilities like Google’s Kronstorf center does not prevent US intelligence access if the operator is a US-based corporation. 2 sources. https://clstr.news/cluster/max-schrems-warns-us-data-access-risks-regardless-of-server-location ### 2026-09-05: German companies face rising hybrid threats, survey shows One in five German companies reports facing hybrid threats such as cyberattacks and espionage, according to an IW survey. Siemens Energy CEO Christian Bruch is calling for a civilian operations plan to protect. 8 sources. https://clstr.news/cluster/german-companies-face-rising-hybrid-threats-iw-survey-finds ### 2026-09-03: SMEs increasingly adopt external cybersecurity services A 2026 study shows SMEs in Germany, Austria, and Switzerland are increasingly using external managed services to address cybersecurity risks and personnel shortages. 2 sources. https://clstr.news/cluster/smes-increasingly-adopt-external-cybersecurity-services ### 2026-09-01: German companies launch new cybersecurity and digital sovereignty tools German firms are launching new cybersecurity initiatives, including a cost-calculation tool for SMEs, industrial machine security services from Pilz, and research highlighting digital sovereignty priorities. 8 sources. https://clstr.news/cluster/genetec-to-showcase-security-center-saas-at-security-essen ### 2026-09-01: Data protection becomes a competitive advantage for digital businesses DM Solutions GmbH reports that data protection is becoming a key competitive factor, with server location playing a vital role in GDPR compliance and customer trust. 2 sources. https://clstr.news/cluster/data-protection-becomes-a-competitive-advantage-for-digital-businesses ### 2026-08-24: German companies seek digital sovereignty despite US provider reliance German companies are increasingly prioritizing digital sovereignty and data control, yet many remain hesitant to reduce their heavy reliance on US-based digital service providers due to costs and uncertainty. 3 sources. https://clstr.news/cluster/german-companies-seek-digital-sovereignty-despite-us-provider-reliance ### 2026-08-18: German companies prioritize cyber security and IT modernization A Lünendonk study shows 55% of German companies will increase IT budgets in 2026, prioritizing cyber security and IT modernization to combat AI-based threats and legacy system limitations. 2 sources. https://clstr.news/cluster/german-companies-prioritize-cyber-security-and-it-modernization ### 2026-08-16: European businesses face data sovereignty and cybersecurity gaps Studies show European companies face data sovereignty risks due to non-European email provider dependency, while German firms show high contingency planning but gaps in technical cyberattack mitigation. 5 sources. https://clstr.news/cluster/european-businesses-face-data-sovereignty-and-cybersecurity-gaps ### 2026-08-13: German companies prioritize digital sovereignty over cost German companies are increasingly prioritizing digital sovereignty and data control, even if it means higher costs and technical complexity, to reduce dependence on global hyperscalers. 2 sources. https://clstr.news/cluster/german-companies-prioritize-digital-sovereignty-over-cost ### 2026-07-29: German Companies Shift AI Workloads from Public Cloud to On-Premises Around 80% of German firms have moved AI workloads from public clouds to on‑premises, citing data sovereignty, cost, performance and EU regulations, while warning of US CLOUD Act risks. 3 sources. https://clstr.news/cluster/german-companies-shift-ai-workloads-from-public-cloud-to-on-premises ### 2026-07-24: German firms push for domestic data centers amid cloud‑security concerns German firms overwhelmingly prefer domestic data centres, citing sovereignty, cost and compliance, as cloud‑first strategies shift amid AI growth and geopolitical tensions. 2 sources. https://clstr.news/cluster/german-firms-push-for-domestic-data-centers-amid-cloudsecurity-concerns ### 2026-07-22: German firms' cloud dependence risks laid bare by Bitkom study Bitkom study of 603 German firms finds 46% would halt operations after a cloud outage, 9% would stop immediately; average resilience is 78 hours and few have true redundancy. 2 sources. https://clstr.news/cluster/german-firms-cloud-dependence-risks-laid-bare-by-bitkom-study ### 2026-07-06: Germany's Cloud Reliance Raises Outage Risks, Survey Finds German firms rely heavily on hybrid‑cloud, with 73 % using mixed models. Bitkom warns 46 % would halt work after a cloud outage, and 28 % have already faced major failures. 3 sources. https://clstr.news/cluster/germanys-cloud-reliance-raises-outage-risks-survey-finds ### 2026-07-02: German companies risk shutdown as cloud outage could affect nearly half A Bitkom survey shows 46% of German firms would eventually halt operations after a cloud outage, with many having emergency plans and data backups. 2 sources. https://clstr.news/cluster/german-companies-risk-shutdown-as-cloud-outage-could-affect-nearly-half ### 2026-06-09: German service firms lag in cloud adoption, study shows A study finds German service firms have the lowest cloud platform adoption in Europe, leading to higher overtime, while US firms lead. 2 sources. https://clstr.news/cluster/german-service-firms-lag-in-cloud-adoption-study-shows --- Cite as: German firms' cloud adoption & rising hybrid threats. CLSTR, https://clstr.news/situations/german-firms-cloud-adoption-and-outage-risk