2025 Cyberattacks Expose Global Weaknesses in Critical Systems
Cybersecurity incidents surged in 2025, causing widespread disruption across industries and regions. A new report by ESET highlights how ransomware, data breaches, and compromised systems affected everything from food supplies to airport operations. Experts warn that attackers are becoming more sophisticated, with Latin America and essential services now prime targets.
The year began with a major ransomware attack on a US food distributor, leading to temporary shortages in supermarkets. Similar incidents struck Mexico, Brazil, and Europe, crippling critical infrastructure and public services. Airports in Brussels and Heathrow were also hit, forcing staff to switch to manual processes for essential operations.
A series of massive data breaches exposed billions of records. In China, an unprotected database leaked over 4 billion recordsâone of the largest breaches ever recorded. Meanwhile, a flaw in McDonaldâs AI recruitment chatbot exposed the personal details of 64 million job applicants. Another database, containing 184 million login credentials for global services, was found publicly accessible after being stolen by password-stealing malware.
ESETâs December 2025 report outlined these trends, noting a rise in ransomware waves and state-sponsored attacks. Markus Sommer took over as head of ESETâs research unit, analysing the yearâs most significant cyber threats. Camilo GutiĂŠrrez Amaya, who leads ESET Latin Americaâs Research Lab, warned that attackers are growing more professional, increasing risks for 2026.
The report confirms that 2025 saw unprecedented cybersecurity challenges, from supply chain disruptions to record-breaking data leaks. With attackers refining their methods, businesses and governments face growing pressure to strengthen defences. ESETâs findings suggest that without improved security measures, critical sectors will remain vulnerable in the coming year.