Ransomware Doubles: Belgium Rises in Top Ten most Affected Countries

Inetum sees an explosive increase in the number of ransomware attacks in Belgium. Globally, Belgium ranks in the top ten most affected countries.

The number of ransomware attacks in the first half of 2025 has doubled compared to the same period last year. As a result, Belgium climbs to eighth place in the list of most frequently affected countries. This is according to figures from Inetum LiveSOC, the Security Operation Center of IT service company Inetum.

In total, Inetum processed 77,093 cybersecurity alerts and 25,171 incidents in the first six months of 2025. Of these, 2,406 alerts were related to ransomware. Being attacked once is absolutely no guarantee that hackers will leave you alone afterward. Other forms of cyber threats also continued to rise. The Belgian Center for Cybersecurity confirms an 80 percent increase in the number of reported incidents.

Increasing Cyber Threat Due to Geopolitical Tensions

According to Inetum, geopolitical tensions are causing a deteriorating situation. Digital retaliation from pro-Russian action groups is targeting Belgian targets, such as government institutions, media companies, and the Port of Antwerp-Bruges. Conflicts in the Middle East, India, and Pakistan also impact global cybersecurity.

In addition to geopolitical actors, financially motivated groups such as Medusa, RansomHub, and Lockbit remain active. The LiveSOC teams also report an increase in APT attacks, where attackers remain undetected in networks for longer periods to collect sensitive data.

AI as a Weapon for Cybercriminals

Cybercriminals are increasingly using AI to refine attacks and avoid detection. Especially remote access trojans and infostealers benefit from this automation. Popular attack techniques remain phishing, brute force attacks, and the misuse of leaked passwords. Inetum expects a further increase in ransomware, DDoS attacks, and the exploitation of zero-day vulnerabilities in the second half of the year.

Vigilance therefore remains necessary. Companies must update their security measures, scan for vulnerabilities, and regularly update software. The use of strong passwords, passkeys, and multi-factor authentication is essential. According to Inetum, training and simulations also remain crucial to make employees aware of the risks.