Cybercrime is a growing phenomenon in Euskadi. Specifically, in Gipuzkoa, one in four criminal offenses are now computer-related, while in Bizkaia they represent 20% and in Araba 19%. According to the latest report from ZIUR, the Industrial Cybersecurity Center of Gipuzkoa, cyberattacks have increased by 29% globally in the first quarter of 2026.
María Penilla, director of ZIUR, states that these figures confirm the trend of previous years. Penilla emphasizes that the current geopolitical situation is a key factor, as conflicts are no longer confined to physical territory. "All these countries with conflicts have their cyber armies and use these digital attacks as another weapon to exert pressure," she explained.
Attacks are becoming increasingly sophisticated, with artificial intelligence (AI) playing a crucial role. Penilla warns that while AI is a valuable defense tool, "cybercriminals are very quick to incorporate these techniques." AI enables more powerful and realistic attacks, such as identity impersonations using video or audio, making detection extremely difficult.
“"With AI, it will become increasingly difficult for me to know if an identity impersonation attempt is genuine or not."
"When I receive an identity impersonation attempt with an image or video, it will become increasingly difficult for me to know if it's genuine or not," Penilla affirms. This technology makes it easier for individuals with limited knowledge to develop effective attacks.
An example of the reach of these attacks is the hacking of large services, where criminals steal databases containing personal information. According to Penilla, they first attempt to extort the company and, in parallel, sell the data on the black market, multiplying the number of potential attacks.
The public sector remains a primary target, as attacking essential services is a direct way to "exert pressure on a country." Furthermore, Penilla highlights the rise in attacks on the industrial and manufacturing sectors, which, due to rapid digitalization, are opening new avenues for attackers.
Suddenly your company has stopped.
The most common attack in the business environment is ransomware. Cybercriminals infiltrate the network, steal and encrypt all information, completely paralyzing operations. "There is a clear initial impact where the company stops. Suddenly your company has stopped," Penilla emphasizes, resulting in direct financial losses for each day of inactivity.
Despite the complex scenario, Penilla remains optimistic about the situation in Gipuzkoa. At ZIUR, which has been assisting industrial companies for six years, they perceive a high level of awareness. "We see many companies, even small workshops, wanting to take action and make progress," she concludes, encouraging any company to contact them for assistance.
