Cyberattacks cost Germany 202 billion euros—experts warn of a national threat
Germany is facing a severe shortage of cybersecurity specialists, leaving both private and public institutions increasingly vulnerable to cyberattacks. A study conducted by Strategy&, the global unit of PwC, showed that nine out of ten German institutions are suffering from a lack of qualified personnel in the field of cybersecurity, a sharp increase compared to two-thirds of institutions in 2023. In 2024 alone, cyberattacks caused record damages estimated at 202.4 billion euros.
The attacks targeted prominent institutions such as the German air traffic control, the Federal Statistical Office, and the Eastern European Studies Association, all of which were subjected to attacks from abroad. Sinan Selen, the head of the Federal Office for the Protection of the Constitution (BfV), warned that Germany has been a target for Russian operatives for years, with attacks increasing in frequency and complexity.
The shortage is particularly acute in critical security positions, such as risk management, where 57% of study participants indicated gaps in roles responsible for detecting and responding to cyber threats. Strategy& noted that half of the vacancies in the public sector aimed at attracting cybersecurity specialists received more than ten applications only, while more than a quarter of organizations reported a decrease in the number of applicants. Many candidates lack sufficient knowledge of cybersecurity standards and data protection.
Financial constraints exacerbate the problem, with 78% of public institutions indicating that limited budgets represent a major obstacle to hiring, compared to 48% in the private sector. Low salaries lead many experts to move to private tech companies that offer better rewards, leaving public institutions vulnerable. Currently, only about 20% of institutions use artificial intelligence strategically to alleviate workforce shortages, placing the greater burden on human experts.
Experts warned that without immediate action—such as targeted bonuses, improving salary structures, and international recruitment—Germany's ability to maintain digital resilience could be significantly jeopardized. Lukas C., a partner at Strategy& Germany, emphasized the need for urgent measures to secure the country's cybersecurity infrastructure. Andreas Lang, director at Strategy& Germany, suggested that automating routine tasks in cybersecurity could allow specialized experts to focus on critical tasks, helping to bridge the growing skills gap before greater damage occurs.