Belgium — Cyber Threat Profile
Belgium operates a mature cybersecurity ecosystem anchored in European Union institutional integration and the presence of major international organizations within its territory. National cyber priorities include protecting diplomatic networks, government systems, and critical infrastructure from advanced espionage threats. The country faces sustained targeting from state-sponsored actors seeking political, military, and economic intelligence. Coordinated defense is led through federal cyber authorities working closely with NATO and EU security bodies. Investments in intelligence sharing, supply-chain security, and cyber workforce development reinforce Belgium's strategic cyber resilience.- National CERT/CSIRT: Centre for Cybersecurity Belgium (CCB)
- Data protection authority: Autorité de protection des données (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 0.18 / 100, #76 worldwide
- Secure Internet servers per 1M people (2024): 36,731.9 (source: World Bank)
- Internet users (2024): 95.8% of population (source: World Bank)
Latest Belgium coverage
- Belgian banking ID extension let any site steal your PIN 2026-08-09 · Vulnerabilities
- Extortion crew names Europe's standards bodies as victims 2026-08-01 · Ransomware
- Fake Tomorrowland ticket sites are stealing money and IDs 2026-07-14 · Cyber Incidents
Threat actors targeting Belgium
- APT27 APT
- APT30 APT
- GALLIUM APT
- Mustang Panda APT
- UNC4841 APT
- ZIRCONIUM APT
- Qilin Ransomware · 16 incident(s)
- KillSec Ransomware · 8 incident(s)
- LockBit Ransomware · 8 incident(s)
- 8Base Ransomware · 7 incident(s)
- Akira Ransomware · 7 incident(s)
- RansomHub Ransomware · 7 incident(s)
- Fog Ransomware Ransomware · 5 incident(s)
- The Gentlemen Ransomware · 5 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- SafePay Ransomware · 4 incident(s)
- BlackSuit Ransomware · 3 incident(s)
- Medusa Ransomware Ransomware · 3 incident(s)
- RansomHouse Ransomware · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- Black Basta Ransomware · 2 incident(s)
- Coinbase Cartel Ransomware · 2 incident(s)
- DragonForce Ransomware · 2 incident(s)
- Hunters International Ransomware · 2 incident(s)
- Meow Ransomware · 2 incident(s)
- Play Ransomware Ransomware · 2 incident(s)
- 3AM Ransomware · 1 incident(s)
- ALPHV/BlackCat Ransomware · 1 incident(s)
- Cl0p Ransomware · 1 incident(s)
- Everest Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Lynx Ransomware Ransomware · 1 incident(s)
- NoName057(16) Hacktivist · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- RomCom APT · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- Space Bears Ransomware · 1 incident(s)
- Stormous Hacktivist · 1 incident(s)
- TridentLocker Ransomware · 1 incident(s)
- APT28 APT
Most targeted sectors
- Business & Professional Services 22 incident(s)
- Technology 14 incident(s)
- Manufacturing 12 incident(s)
- Healthcare 7 incident(s)
- Agriculture & Food 6 incident(s)
- Transportation & Logistics 5 incident(s)
- Financial Services 4 incident(s)
- Government & Public Sector 4 incident(s)
- Education & Research 2 incident(s)
- Hospitality & Tourism 2 incident(s)
- Retail & Consumer 2 incident(s)
- Telecommunications 2 incident(s)
Recent claimed incidents
- WEBA Meubelen 2026-08-16 · Retail & E-Commerce
- Connections 2026-08-14
- Université Libre de Bruxelles 2026-08-09 · Education
- LensAss Architecten 2026-08-07 · Professional Services
- Rodschinson Investment 2026-08-05 · Financial Services
- CEN and Cenelec 2026-08-01 · Other
- Orimar 2026-07-30 · Other
- Adpo 2026-07-30 · Transportation
- Sintax 2026-07-09 · Technology
- FTL-Fast Transit Line 2026-06-23 · Transportation/Logistics
- Calipage Humblet 2026-06-15
- ConsulTIC 2026-06-12 · Business Services
- C2O Architects 2026-05-06 · Business Services
- ettp.be 2026-05-06
- Fabritius 2026-05-06 · Manufacturing