BKA Report Estimates €202.4 Billion in Cybercrime Damage in Germany

Summary
The BKA’s 2025 report estimates €202.4 billion in cybercrime damage in Germany and records about 335,000 cases. Ransomware and DDoS increased; the report also details law-enforcement operations and growing criminal use of AI.
Key points
- The report estimates cybercrime damage to Germany’s economy at €202.4 billion, about 4.5% of GDP.
- About 335,000 cybercrime cases were recorded in 2025; 207,888 were attributed to activity abroad or an unknown location. The BKA says the actual total is likely higher because many cases go unreported.
- Reported ransomware attacks rose 10% to 1,041. The report says average ransom payments increased, while total payments were about $15.5 million and fewer victims paid.
- DDoS cases increased 25% to 36,706. The report identifies NoName057(16) as a prominent hacktivist group targeting German organizations.
- Operation Endgame targeted malware families used as gateways to ransomware attacks; authorities identified suspects.
- Operation Eastwood disrupted parts of NoName057(16)’s infrastructure, while Operation PowerOFF targeted stresser services used for DDoS attacks.
- The BKA says cybercriminals are increasingly using AI tools to make attacks faster, more targeted, and more professional.
Article Details
- Publisher
- Bundeskriminalamt (BKA)
- Report Period
- 2025
- Scope
- Cybercrime in Germany, including recorded cases, estimated damage, ransomware and DDoS activity, and law-enforcement operations.
- Sample Size
- Approximately 335,000 recorded cybercrime cases.
- Key Statistics
- Estimated damage to the German economy was €202.4 billion, approximately 4.5% of GDP.
- Approximately 335,000 cybercrime cases were recorded; 207,888 (about two-thirds) were attributed to locations abroad or unknown locations.
- There were 1,041 reported ransomware attacks, a 10% increase from the previous year; total ransom payments were approximately US$15.5 million.
- There were 36,706 DDoS cases, a 25% increase from the previous year.
MITRE ATT&CK
People
Threat Actors
Countries
GermanyCybercrime in Germany remains at a very high level, with major attacks on companies, public authorities, and critical infrastructure causing estimated damage of 202.4 billion euros.UkraineEine zentrale Rolle spielte die hacktivistische Gruppierung âNoName057(16)“, die insbesondere im Zusammenhang mit der Unterstützung Deutschlands für die Ukraine Angriffe auf deutsche Einrichtungen ausführte.
