Ukraine ranked third worldwide and first in Europe among the countries most frequently targeted by cyberattacks, according to the Microsoft Digital Defense Report 2026

11/ 11/ 2026

Listen to online Stop   According to the Microsoft Digital Defense Report 2026, Ukraine ranked third worldwide and first in Europe among the countries most frequently targeted by cyberattacks. The study examined cyberattacks affecting Microsoft customers during the first half of 2026. Overall, 4.8% of all cyberattacks recorded worldwide targeted Ukraine, a significant share of which was linked to russian hacking groups. According to the report, cybercriminals primarily target government agencies and services, the information technology sector, research and academia, communications infrastructure, transportation systems, non-government organizations, the defense industrial base, critical manufacturing and financial services. Small and medium-sized businesses also remain at high risk of cyberattacks. They are particularly vulnerable to ransomware and business contact impersonation (BCI) scams. Key findings from the Microsoft Digital Defense Report 2026: 63% of intrusions involved data theft; the share of observed intrusions involving phishing rose sharply from 7% in 2025 to 23% in the first half of 2026. At the same time, 89-95% of phishing email attachments were intended to steal credentials rather than deliver malware; in 52.2% of intrusions involving valid accounts, attackers also stole credentials belonging to other users. This shows how quickly a single compromised account can allow an attack to spread across an entire organization; artificial intelligence is reducing the time available to respond to cyber threats. AI enables attackers to work faster: the median time from vulnerability discovery in the wild to weaponization has fallen to well under 24 hours. Ukraine ranked second among the countries most frequently targeted by russian state-sponsored hacking groups. russian cyber operations are largely aimed at advancing moscow’s military objectives in its war against Ukraine. The report also notes that russian cyberattacks are becoming stealthier, more adaptive and more effective as the aggressor country increasingly uses AI to make its cyber operations faster and more scalable. Top 10 countries most frequently targeted by russian state-sponsored hacking groups In 2025 alone, The National Cyber Incident Response Team (CERT-UA), which operates under the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), processed 5,927 cyber incidents. russian-origin software products, which are still used by around 90% of Ukrainian businesses, remain among the most common entry points for attackers. That is why Innoware – a consulting company with more than 25 years of experience implementing Microsoft Dynamics 365 ERP, CRM and HR systems, draws Ukrainian business owners’ and executives’ attention to the risks of continued reliance on russian software and recommends planning and starting a migration project to technologically advanced and secure Microsoft solutions as soon as possible. To receive a consultation on migrating from 1C/BAS or any other ERP, CRM or HR system developed in the aggressor country to modern and secure Microsoft Dynamics 365 solutions as well as to get a calculation of the project cost specifically for your company, call +38 044 490 22 20 (UA) or +1(302)4672024 (US), or email [email protected]

According to the Microsoft Digital Defense Report 2026, Ukraine ranked third worldwide and first in Europe among the countries most frequently targeted by cyberattacks. The study examined cyberattacks affecting Microsoft customers during the first half of 2026. Overall, 4.8% of all cyberattacks recorded worldwide targeted Ukraine, a significant share of which was linked to russian hacking groups.

According to the report, cybercriminals primarily target government agencies and services, the information technology sector, research and academia, communications infrastructure, transportation systems, non-government organizations, the defense industrial base, critical manufacturing and financial services. Small and medium-sized businesses also remain at high risk of cyberattacks. They are particularly vulnerable to ransomware and business contact impersonation (BCI) scams.

Key findings from the Microsoft Digital Defense Report 2026:

• 63% of intrusions involved data theft;
• the share of observed intrusions involving phishing rose sharply from 7% in 2025 to 23% in the first half of 2026. At the same time, 89-95% of phishing email attachments were intended to steal credentials rather than deliver malware;
• in 52.2% of intrusions involving valid accounts, attackers also stole credentials belonging to other users. This shows how quickly a single compromised account can allow an attack to spread across an entire organization;
• artificial intelligence is reducing the time available to respond to cyber threats. AI enables attackers to work faster: the median time from vulnerability discovery in the wild to weaponization has fallen to well under 24 hours.

Ukraine ranked second among the countries most frequently targeted by russian state-sponsored hacking groups. russian cyber operations are largely aimed at advancing moscow’s military objectives in its war against Ukraine. The report also notes that russian cyberattacks are becoming stealthier, more adaptive and more effective as the aggressor country increasingly uses AI to make its cyber operations faster and more scalable.

Top 10 countries most frequently targeted by russian state-sponsored hacking groups

In 2025 alone, The National Cyber Incident Response Team (CERT-UA), which operates under the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), processed 5,927 cyber incidents. russian-origin software products, which are still used by around 90% of Ukrainian businesses, remain among the most common entry points for attackers.

That is why Innoware – a consulting company with more than 25 years of experience implementing Microsoft Dynamics 365 ERP, CRM and HR systems, draws Ukrainian business owners’ and executives’ attention to the risks of continued reliance on russian software and recommends planning and starting a migration project to technologically advanced and secure Microsoft solutions as soon as possible.

To receive a consultation on migrating from 1C/BAS or any other ERP, CRM or HR system developed in the aggressor country to modern and secure Microsoft Dynamics 365 solutions as well as to get a calculation of the project cost specifically for your company, call +38 044 490 22 20 (UA) or +1(302)4672024 (US), or email [email protected]