Research
June 4, 2025
The Cybersecurity of Europe’s Top 100 Financial Institutions 2025


SecurityScorecard has released its second Europe Financial Cybersecurity Report in two years, revealing that nearly every major financial institution across Europe has been impacted by third-party and fourth-party cyber breaches in the past year.
Key Findings:
- 96% of Europe’s top 100 financial institutions experienced at least one third-party breach in the past year, a dramatic rise from 78% in the previous report.
- 97% had a breached entity within their fourth-party ecosystem, up from 84%.
- 7% suffered a direct breach, down from 8%, with malware and insider threats remaining key culprits.
- 94% of institutions with an “A” cybersecurity rating had no known breaches.
- 13% of firms were rated “C” or lower, an improvement from 18%, and outperforming the European sector average of 31%.
- The UK reported the highest number of third-party breaches, followed by Germany and Switzerland, while Malta, Luxembourg, and Portugal had the lowest exposure and highest average cybersecurity grades.
The companies were ranked based on various factors, such as network security, potential malware infections, and patching.
You can download the full report here.