One in six German firms report AI-linked cyber attacks or fraud attempts
A recent study shows that roughly every sixth company in Germany has experienced confirmed or suspected cyber incidents involving artificial intelligence in the last twelve months.
According to a study by the opinion research institute Forsa commissioned by the TÜV Association and the Federal Office for Information Security (BSI), about one in six German enterprises reported either confirmed or suspected cyber attacks or fraud attempts linked to artificial intelligence over the past year. The most common tactics involve AI-generated phishing messages tailored to victims and automated programs that probe for system weaknesses.
Experts warned that AI tools are hard to detect and can act autonomously once instructed. Yet only about one in ten firms using or planning to use AI have specific response processes for such incidents, and a quarter of them have no rules at all. Nearly half of all companies already employ AI, primarily through third-party services like ChatGPT and Microsoft Copilot, while a sizable share plans to adopt it soon. The German government has responded by establishing the AI Safety and Security Institute Deutschland (AISI) to evaluate models and advise policymakers, with involvement from BSI and the TÜV Association.
Why it matters
AI-driven cyber threats are rising, and many German companies lack the safeguards to defend against them.
In this story
