Baltic countries are not among most prone to cyber-attacks - Microsoft

RIGA - The Baltic States are not among the countries most frequently affected by cyber-attacks, Renate Strazdina from the Microsoft NTO Europe North Multi-country Cluster told LETA.

However, Strazdina points out that attackers are not resting - they are rapidly learning the latest technologies, including artificial intelligence, to improve and speed up their methods of operation.

According to Microsoft's first-half 2025 Digital Defense Report, Latvia ranked 64th globally among the countries whose users are most often targeted by cyber-attacks. Estonia ranks 63rd and Lithuania 53rd.

Strazdina said that there is a change - not only public institutions, but also small and medium-sized enterprises are increasingly being targeted by cyber-attackers, often through activities carried out by state-sponsored groups.

Microsoft points out that hospitals, educational institutions and municipalities are increasingly becoming targets of cyber-attacks because they have access to sensitive data and often limited cybersecurity resources. The consequences of such attacks can delay medical care, disrupt education and bring public transport to a standstill. Ransomware developers exploit these vulnerabilities, as these industries often pay the ransom quickly to restore services as quickly as possible.

The Digital Defense Report reveals that more than 52 percent of targeted cyber-attacks are carried out through extortion and ransomware, while espionage attacks account for 4 percent of cybercrime.

Today's cyber criminals are predominantly criminals of opportunity seeking financial gain, not state-sponsored cyber criminals. In 80 percent of cases, attackers seek to obtain personal data, underlining the universal nature of the threat, the company said.

Microsoft points out that while criminals are the most common perpetrators of cyber attacks, state-sponsored groups continue to target strategic industries and regions, mainly for espionage but often also for financial gain.

Artificial intelligence is increasingly being used by both attackers and security professionals. Cyber criminals are using it to automate phishing and create artificial content, while security professionals are using it to close attack detection gaps and protect users, according to the company.

Microsoft says that as cyber threats become more sophisticated, organizations need to continuously improve their protection solutions and share the information they learn. In turn, countries need to develop clear frameworks that provide real consequences for malicious activities and promote greater transparency among those involved.

The report also shows that outdated security solutions are no longer effective enough. Modernization of security systems and close cooperation between industry and public authorities are critical to strengthening cybersecurity.

At an individual level, the use of multi-factor authentication, especially phishing-resistant solutions, can prevent more than 99 percent of identity thefts and related attacks, according to Microsoft.