San Marino — Cyber Threat Profile

San Marino is a microstate enclaved within Italy, with cybersecurity structurally tied to Italian frameworks and bilateral cooperation. Its 2018 data protection law (No. 171) broadly mirrors GDPR, and its Garante privacy authority became a permanent member of the Conference of European Data Protection Authorities in 2023. Recent incidents reflect low-sophistication, financially motivated crime rather than state-linked intrusion: in April 2025, hackers compromised a local company's email account and altered an invoice's bank details to redirect payment to a Portuguese account, an attempted fraud that was averted. In July 2026, a software defect briefly exposed pension-related data of 25 users on San Marino's public services portal before officials blocked access within a minute.

Data protection authority: Autorità Garante per la Protezione dei Dati Personali (source: CNIL)
Secure Internet servers per 1M people (2024): 36,024.4 (source: World Bank)
Internet users (2024): 97.4% of population (source: World Bank)

Read the full analysis on IntelFusions