The cyber threat situation in H2 2025: more professional, more data-driven, more destructive
The second half of 2025 shows a clear intensification of the threat situation: cyber criminals are acting in a more professional, coordinated and increasingly data-driven manner. Ransomware and data theft together account for almost two thirds of all incidents, with the number and size of data leaks in particular increasing significantly, with cases in the three-digit gigabyte to terabyte range. It is no longer just industry or critical infrastructures that are affected: education, research, retail, service providers, local authorities and the healthcare sector are also increasingly in the spotlight, often with a massive impact on operations, proximity to citizens and reputation. The perpetrators operate via leak sites, rely on deadlines, psychological pressure and increasingly sophisticated tools, supported by AI, automated attack chains and scalable blackmail mechanisms.
Key findings for organizations and how they can strengthen cyber resilience
The OOPS H2-2025 report analyzes numerous real-world security incidents and clearly shows recurring patterns: lack of segmentation, insufficient monitoring, outdated authorization structures, rarely tested contingency plans and growing technical debt. At the same time, the proportion of attacks facilitated by AI-powered social engineering tactics, automated scouting or supply chain dependencies is increasing. Increasingly, incidents are revealing that while companies have protection mechanisms in place, they are neither consistently monitored nor orchestrated. Our report therefore not only provides a factual classification of incidents, but also key lessons learned: from continuous SOC monitoring to vulnerability management, XDR/EDR technologies, data loss prevention, zero trust models, clear incident response processes and strategic cyber resilience. In this way, the OOPS report helps decision-makers to make a well-founded risk assessment and strengthen their security architecture in the long term.
Cupping chicharrones hexagon vaporware. Helvetica beard taiyaki, DIY drinking vinegar PBR&B tonx vape godard tofu. Meggings echo park taxidermy big mood asymmetrical next level.
John Smith
Director of Marketing
Cupping chicharrones hexagon vaporware. Helvetica beard taiyaki, DIY drinking vinegar PBR&B tonx vape godard tofu. Meggings echo park taxidermy big mood asymmetrical next level.
John Smith
Director of Marketing
Cupping chicharrones hexagon vaporware. Helvetica beard taiyaki, DIY drinking vinegar PBR&B tonx vape godard tofu. Meggings echo park taxidermy big mood asymmetrical next level.
John Smith
Director of Marketing
Cupping chicharrones hexagon vaporware. Helvetica beard taiyaki, DIY drinking vinegar PBR&B tonx vape godard tofu. Meggings echo park taxidermy big mood asymmetrical next level.
John Smith
Director of Marketing
Cupping chicharrones hexagon vaporware. Helvetica beard taiyaki, DIY drinking vinegar PBR&B tonx vape godard tofu. Meggings echo park taxidermy big mood asymmetrical next level.
John Smith
Director of Marketing
Cupping chicharrones hexagon vaporware. Helvetica beard taiyaki, DIY drinking vinegar PBR&B tonx vape godard tofu. Meggings echo park taxidermy big mood asymmetrical next level.
John Smith
Director of Marketing
© 2026 RIEDEL Networks GmbH & Co. KG
tailor-made & secure data communication – RIEDEL Networks is a wholly owned subsidiary of the RIEDEL Communications Gruppe
Supervisory authority: Federal Network Agency for Electricity, Gas, Telecommunications, Post and Railway, Tulpenfeld 4, 53113 Bonn, Reg. No. 12/158
