Kuwait — Cyber Threat Profile
Kuwait is accelerating cybersecurity investment alongside its national digital transformation agenda, with the National Cyber Security Center (NCSC) leading strategy and coordination. The energy sector , particularly oil and gas infrastructure , is the primary high-value target, attracting Iranian and other regional threat actors. Financial institutions face persistent fraud and phishing campaigns. Kuwait participates in Gulf Cooperation Council (GCC) cyber cooperation frameworks, enabling shared threat intelligence. Despite progress, regulatory enforcement and incident reporting remain inconsistent across the private sector. The workforce gap is a structural challenge, with reliance on expatriate technical talent creating continuity risks. Cloud adoption is outpacing the maturity of associated security controls.- National CERT/CSIRT: National Cyber Security Center of Kuwait (NCSC-KW)
- Secure Internet servers per 1M people (2024): 384.3 (source: World Bank)
- Internet users (2025): 100.0% of population (source: World Bank)
Threat actors targeting Kuwait
- APT38 APT
- MuddyWater APT
- LockBit Ransomware · 4 incident(s)
- Cl0p Ransomware · 2 incident(s)
- Everest Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- APT39 APT
- Cleaver APT
- OilRig APT
Most targeted sectors
- Business & Professional Services 2 incident(s)
- Construction 1 incident(s)
- Healthcare 1 incident(s)
- Hospitality & Tourism 1 incident(s)
- Retail & Consumer 1 incident(s)
- Technology 1 incident(s)
- Telecommunications 1 incident(s)
Recent claimed incidents
- Sidra Kuwait Hospital 2026-05-28 · Healthcare
- Specialised Security Systems Co. (SSS) 2026-03-30 · Business Services
- index-precast.com 2026-03-30 · Construction
- Union Trading Company W.L.L. (UTC) 2026-02-23 · Technology
- ZAIN.COM 2025-11-21 · Telecommunication
- ALSHAYA.COM 2025-11-21
- Costa Del Sol Hotels 2024-10-09 · Hospitality and Tourism
- Kharafi Global 2024-05-25 · Business Services