Bhutan — Cyber Threat Profile
Bhutan pairs high connectivity with a small institutional footprint: 91.3 per cent of its population was online in 2024, yet BtCIRT, the national incident response team, operates as part of the Government Technology Agency rather than as a standalone authority, and no data protection authority is on record. Its exposure is dominated by India-nexus espionage rather than by crime. Patchwork used a decoy Adaptation Fund document to deliver the Brute Ratel C4 framework against Bhutan-linked organisations in July 2024, and Sidewinder has sustained targeting of Bhutanese government and military networks. Bhutan drew no expert nominations at all in the World Cybercrime Index 2024.- National CERT/CSIRT: BtCIRT
- Secure Internet servers per 1M people (2024): 1,339.2 (source: World Bank)
- Internet users (2024): 91.3% of population (source: World Bank)
Threat actors targeting Bhutan
Most targeted sectors
Recent claimed incidents
Read the full analysis on IntelFusions