Andorra Cybersecurity Incidents Rise 5.6% to 1,624 in 2025

The National Cybersecurity Agency (ANC-AD) managed 1.624 incidents in 2025, marking a 5.6% increase from the 1.537 recorded in 2024. Public Administration and Digital Transformation Minister Marc Rossell shared these figures during his appearance before the legislative commission on Justice, Interior, and Institutional Affairs, where he reviewed progress on the Digital Transformation Strategy 2030 and the 2024-2027 Digital Transformation Programme.

Rossell highlighted a notable rise in cyberattacks originating from Andorran IP addresses, noting that cybercriminals are increasingly using local IPs to mask attacks, which can evade automated detection systems. He stressed that Andorra faces similar risks to neighbouring countries despite its size, with attackers leveraging artificial intelligence and advanced tools to bypass controls. Around 5.000 devices, belonging to businesses and individuals, were estimated to have been affected, though Rossell cautioned that these numbers should be interpreted carefully. Not all incidents are reported, as the cybersecurity law mandates notifications only from essential companies, potentially leaving others unaccounted for.

The rise in illicitly circulating data and credentials heightens vulnerabilities for entities and citizens alike, Rossell warned. He emphasised the ANC-AD's key role in informing the public and supporting businesses to build resilience, amid ongoing collaboration with stakeholders, including AI applications for defence.

On digital progress, half of all procedures are now handled via the electronic headquarters, with 80% available online. Data requests per application have dropped by 30%. One in four residents has a digital wallet, and seven in ten use the Andorra Salut app. Businesses show growing digital maturity.

Looking to 2026 and beyond, priorities include digitalising immigration procedures—from scratch, as the department was previously non-digital—and vehicle-related services, which involve high volumes. A pilot for immigration will test online handling to cut queues and travel, except for physical requirements like passport collection. This ties into origin-country hiring, enabling remote document checks and company-worker matching to ease administrative loads.

The government plans a Microsoft-sourced AI tool, akin to Copilot, for all public workers by 2027 to automate repetitive tasks, draft documents like tender specifications, and boost efficiency. Specific departmental applications may launch sooner.