Cyber threats are intensifying in Romania, with account compromises increasing by 353%, ransomware attacks by 153% and phishing incidents by 70.6% between 2025 and 2026, according to data analyzed by Aon. More than 25 million security events were reported during this period, highlighting the growing exposure of businesses to cyber risks.

According to Aon, 42% of incidents reported in the first half of 2026 involved phone scams and social engineering techniques, emphasizing the increasing importance of human vulnerabilities. At European level, ransomware incidents rose by 55.1% in the first four months of 2026 compared with the same period of 2025.

The financial impact is also increasing. According to Verizon data cited by Aon, ransomware was involved in 44% of analyzed data breaches in 2025, while the share of breaches involving third parties doubled from 15% to 30%. For SMEs, ransomware and Business Email Compromise (BEC) account for more than half of cyber insurance claims and associated costs, with the average incident cost reaching USD 264,000, almost 30% higher year-on-year.

"Cyber risk can no longer be viewed as an exclusively technical issue. A company may have well-protected systems and still be vulnerable through a supplier, a cloud service or the compromise of an employee's identity," said Eugen ANICESCU, CEO of Aon Romania.

Aon emphasizes that businesses need to move beyond cyber protection towards cyber resilience, focusing on business continuity, supply chain vulnerabilities and rapid recovery following an incident. Cyber insurance can complement these measures by covering, depending on policy terms, incident response and recovery expenses, business interruption losses and disruptions involving critical suppliers.

Source: Aon Romania