Cyber threats in 2025 hit government sector hard as Kaspersky reports 19% share

Industrial and IT sectors also sit at the top spot.

The government sector is amongst the most targeted industries for high-severity cyber incidents in 2025, accounting for 19% of incidents for two consecutive years, according to a Kaspersky report.

Advanced persistent threats (APTs) made up 33.3% of incidents in the government sector, the largest share amongst attack types. Social engineering accounted for 18.9%, pointing to continued reliance on employee access as an entry point.

Other affected sectors include industrial, with 17% of high-severity incidents, and IT, with 15%. APTs accounted for 17.8% of incidents in industrial and 41% in IT, whilst social engineering made up 13.9% in the industrial sector and 11% in IT.

Sergey Soldatov, Head of Security Operations at Kaspersky, said government, industrial, and IT organisations attract targeted attacks due to their links to geopolitical intelligence, critical infrastructure, and supply chains.

He added that attackers aim to establish persistent access and that organisations should focus on early detection, containment, and reducing exposure.

Kaspersky said organisations should strengthen detection and response capabilities, align internal processes with current threats, and use centralised tools to improve threat detection and response.