EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
Recent Searches
1,984 attacks per organization, per week. That was the average in Europe in Q2 2025, 58% higher than two years ago,1 far outpacing global trends. Europe saw the sharpest regional growth in cyber threats, and Luxembourg is now on the frontlines. And with this surge still recent, we can readily imagine the scale of today’s threat landscape. The message is clear: cyber defense is a strategic imperative.
As Europe fortifies its defenses, cyber defense must change gears. EU bodies are embedding cybersecurity across governance, operations, and culture, transforming it from a technical concern into a pillar of sovereignty, trust, and digital autonomy.
The threat landscape is escalating sharply: state-sponsored cyberattacks on critical infrastructure, hybrid warfare blending disinformation, sabotage, and espionage, alongside increasingly sophisticated ransomware and supply-chain breaches. These challenges demand coordinated, forward-looking responses.
Yet, fragmentation across Member States undermines collective resilience. Disparities in cybersecurity maturity and persistent national silos call for harmonized standards and robust enforcement to strengthen the EU’s digital shield.
Cybersecurity has become a top priority for Europe and its institutions. Swift responses to emerging threats have laid foundation; now it is time to elevate maturity, coordination, and resilience across the Union. In the digital era, nations with superior cyber capabilities will prevail.
Serge Hanssens
Managing Partner European Institutions, EY Luxembourg
Strategic dependency on non-EU technologies adds another layer of vulnerability. Heavy reliance on foreign hyperscalers (companies that provide large-scale cloud computing services), software and core infrastructure raise concerns around vendor lock-in and Europe’s security. Investing in EU-native alternatives is essential to build a secure, scalable infrastructure and safeguard digital sovereignty.
Imagine Europe building its digital castle
Its stones are made of resilience, its drawbridge crafted from seamless cooperation, and its foundation rooted in homegrown tech. This fortress isn’t closed off, it opens its gates to allies but keeps watch for threats. Every part of it reflects Europe’s values, built to stand strong through the storms of the digital world.
Luxembourg is an EU nerve center. When we strengthen resilience here, we protect essential European functions, not just local operations.
Guillaume Carballo
Partner, Cybersecurity Leader, EY Luxembourg
On 23 July 2025, a cyberattack on a Luxembourg telecom operator revealed just how fast things can escalate.
The attack targeted the core network, knocking out mobile internet, saturating 2G, and disrupting emergency services for over three hours. Even fixed internet and digital platforms were hit. The incident exposed critical weak spots, so severe that authorities considered switching to foreign networks just to keep emergency calls online.
What’s your weakest link and have you tested it lately?
Every sector must stress-test continuity plans in real conditions. Pinpoint single points of failure across tech and suppliers and fix them before they become headlines.
Building resilience: skills, regulation, and infrastructure
- mind the skills gap. The EU is investing in training and awareness to build cyber-ready teams.
- regulate without slowing down. Innovation needs room to move, and smart rules enable secure, agile progress.
- stay online, no matter what. Resilience means sovereign infrastructure, tested backups, and crisis plans that actually work.
Collaboration with EU champions, private sector and international allies is fostering co-creation of secure systems and cloud stacks. Europe is evolving from consumer to architect of cybersecurity solutions.
How about the 2030 ambition?
European Cyber Sovereignty. A roadmap is in place to measure progress, evaluate risks and build collective awareness.
EU institutions are also embracing innovation through pilot programs, cross-border cyber exercises and joint research initiatives. The European Cybersecurity Competence Centre (ECCC) was set up to coordinate efforts, pool expertise and accelerate technological development.
Europe’s cybersecurity is about building strategic resilience where institutions anticipate emerging threats, collaborate across borders, and co-create secure digital ecosystems that reflect our values.
Johann Lobo
Senior Manager, Cyber & Digital Risk, EY Luxembourg
These actions reflect a growing confidence in Europe’s ability to shape its own digital destiny.
Summary
As Europe fortifies its defenses, cyber defense must change gears. EU bodies are embedding cybersecurity across governance, operations, and culture, transforming it from a technical concern into a pillar of sovereignty, trust, and digital autonomy.