Portugal has seen a slight increase in its phishing attack rate to 3.8% in 2026, reflecting the growing sophistication of cybercriminals targeting Portuguese organizations. The total reported phishing incidents have reached approximately 12,500, indicating a significant threat landscape that demands enhanced protective measures. The average cost per attack is estimated at $15,200, emphasizing the financial risks faced by businesses in the country.
Investments in cybersecurity continue to rise, with organizations allocating around EUR 150 million towards strengthening defenses. The country's cybersecurity workforce has grown to about 7,200 professionals, supporting efforts to combat cyber threats. Despite these investments, phishing remains a prevalent concern, underlining the need for ongoing awareness training and advanced security protocols to safeguard digital assets.