Prolonged cyberattack highlights risks to Cyprus financial sector

A distributed denial-of-service (DDoS) attack targeting a financial institution in Cyprus lasted 200 hours during the third quarter of 2026, marking a significant escalation in cyber threats. According to a report by cybersecurity firm Qrator Labs, the incident persisted for over eight days, making it more than 2.5 times longer than the most extensive attack recorded in the previous quarter and surpassing any incident documented by the firm in 2025.

The global data provided by Qrator Labs indicates that the fintech sector remains the primary target for such attacks, accounting for 31.3 per cent of all recorded incidents. Other high-risk areas include e-commerce at 19 per cent and information and communication technology at 18.2 per cent. Combined, these three sectors represent over two-thirds of global DDoS activity during the period.

These developments are of particular concern for Cyprus, which has become an established regional hub for brokerage, online trading, and financial services. Industry experts emphasize that financial firms in the country now face heightened expectations to prove the resilience of their digital infrastructure against prolonged disruptions to ensure the continuity of critical financial services.