Romania — Cyber Threat Profile
Romania is advancing its national cybersecurity posture through strengthened alignment with EU and NATO defense frameworks, with a focus on critical infrastructure resilience and counter-APT readiness. The National Cybersecurity Directorate (DNSC) leads national threat monitoring, incident response coordination, and public-private intelligence exchange. Strategic priorities include NIS2 implementation, cloud security governance, and supply-chain risk mitigation across energy, finance, healthcare, and government sectors. Romania remains a frequent target of state-sponsored cyber espionage linked to regional geopolitical dynamics, particularly on NATO's Eastern Flank. Ongoing investments in cyber workforce development, joint exercises, and international cooperation position Romania as an active contributor to collective cyber defense and regional stability.- National CERT/CSIRT: National Cyber Security Directorate (DNSC)
- Data protection authority: The National Supervisory Authority for Personal Data Processing (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 14.83 / 100, #6 worldwide
- Secure Internet servers per 1M people (2024): 27,229.6 (source: World Bank)
- Internet users (2024): 91.3% of population (source: World Bank)
Threat actors targeting Romania
- APT28 APT
- Killnet Hacktivist
- NoName057(16) Hacktivist
- Turla APT
- Qilin Ransomware · 7 incident(s)
- KillSec Ransomware · 6 incident(s)
- RansomHub Ransomware · 6 incident(s)
- Akira Ransomware · 3 incident(s)
- INC Ransom Ransomware · 3 incident(s)
- LockBit Ransomware · 3 incident(s)
- SafePay Ransomware · 3 incident(s)
- Fog Ransomware Ransomware · 2 incident(s)
- Lynx Ransomware Ransomware · 2 incident(s)
- ALPHV/BlackCat Ransomware · 1 incident(s)
- APT73 Ransomware · 1 incident(s)
- Cl0p Ransomware · 1 incident(s)
- Coinbase Cartel Ransomware · 1 incident(s)
- DragonForce Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Krybit Ransomware · 1 incident(s)
- Lamashtu Ransomware · 1 incident(s)
- Meow Ransomware · 1 incident(s)
- Cyber Army of Russia Reborn Hacktivist
Most targeted sectors
- Education & Research 6 incident(s)
- Manufacturing 6 incident(s)
- Technology 6 incident(s)
- Agriculture & Food 4 incident(s)
- Energy & Utilities 4 incident(s)
- Business & Professional Services 3 incident(s)
- Construction 2 incident(s)
- Government & Public Sector 2 incident(s)
- Healthcare 1 incident(s)
- Hospitality & Tourism 1 incident(s)
- Retail & Consumer 1 incident(s)
- Transportation & Logistics 1 incident(s)
Recent claimed incidents
- Harplast SRL 2026-08-09 · Manufacturing
- AMATO BESTSELLER S.R.L 2026-08-06
- SMS-SME 2026-08-03 · Professional Services
- Universitatea De Vest Vasile Goldi Din Arad 2026-08-03 · Education
- HOMELUX S.R.L. 2026-07-31
- Universitatea de Vest „Vasile Goldiș” din Arad 2026-07-26 · Education
- Orange România SA 2026-07-17
- STEP Oiltools 2026-07-12 · Energy
- Banca Transilvania S.A. 2026-07-02
- Altex România S.R.L 2026-06-18
- SSG SELECT SOLUTIONS S.R.L 2026-06-15
- fineconsulting 2026-06-11 · Business Services
- Distrigaz Vest S.A. 2026-05-27 · Energy
- BLUE PROJECTS INDUSTRIES S.R.L. 2026-04-30
- netromsoftware.ro 2026-04-27 · Technology