Andorra Cybersecurity Incidents Rise 5.6% to 1,624 in 2025 Amid AI Threats

The Andorran National Cybersecurity Agency (ANC-AD) managed 1,624 cyber incidents in 2025, marking a 5.6% increase from the 1,537 recorded in 2024. Minister for Public Function and Digital Transformation Marc Rossell shared these figures during his appearance before the legislative commission on Justice, Interior, and Institutional Affairs, where he reviewed progress on the Digital Transformation Strategy 2030 and the 2024-2027 Digital Transformation Programme.

Rossell noted a significant rise in attacks over recent years, including a new trend where cybercriminals use Andorran IP addresses to launch assaults. This approach can evade automated detection systems, as the traffic appears local. He stressed that Andorra's small size offers no protection against such threats compared to neighbouring countries, with attackers increasingly relying on artificial intelligence and advanced tools to bypass controls. The minister advocated using AI to bolster resilience, adding that efforts are underway with various stakeholders.

Around 5,000 devices—belonging to businesses and individuals—were affected, though Rossell cautioned that these estimates require careful interpretation. While the Cybersecurity Law mandates reporting from essential enterprises, other entities may have gone unreported. He highlighted the growing circulation of illicit data and credentials online, which heightens vulnerabilities for all. The ANC-AD plays a central role in informing citizens and supporting sector firms to enhance defences.

Rossell also outlined digital advances: half of all procedures are now handled via the electronic headquarters, 80% of trámites are available online, and data requests per application have dropped 30%. One in four residents has a digital wallet, and seven in ten use the Andorra Salut app. Businesses show growing digital maturity.

For 2026 priorities, the ministry targets digitalising immigration procedures—which currently lack any digital framework—and vehicle-related trámites, given their high volume. A pilot for immigration will test online processing to cut queues and travel, except for physical pickups like passports. Success could enable full rollout this year, with adjustments as needed. This ties into origin-country hiring, allowing remote document checks and company-worker matching to ease administrative loads upon arrival.

The government plans to deploy an AI tool, akin to Microsoft Copilot, across public administration by 2027 to automate repetitive tasks and boost efficiency, with possible earlier pilots in specific departments. Andorra monitors 118 key entities around the clock and claims above-average European cybersecurity standards, aided by law updates and international partnerships.