Despite the growing number of cyber threats, the proportion of companies in Estonia with poor cybersecurity measures has not decreased in the last six years. Particularly concerning is the situation among industrial and construction companies, which are increasingly targeted each year. More alarming is the observation that smaller companies, often operating with limited IT budgets, are especially vulnerable as they struggle to implement necessary cybersecurity measures.

Estonian businesses seem to be living in a dual reality: while cyberattacks are becoming more frequent, many firms have neglected their defensive capabilities in recent years. The shock of the pandemic, which once prompted firms to reassess their IT security, is now fading, leaving their defenses weakened. This complacency raises concerns about the preparedness of these companies in the face of growing digital threats.

The extensive new study calls into question the lack of action following increased awareness of the risks, particularly as smaller companies struggle to find the resources to improve their cybersecurity. It also ponders which sectors might emerge as the next targets for cyberattacks, shedding light on the urgent need for companies to bolster their defenses in an era where cyber threats loom large.