UAE's digital success comes with a price: Highest cyberattack rate in the Gulf, says study

A recent study by cybersecurity firm Positive Technologies reveals that the United Arab Emirates, along with Saudi Arabia, experienced a significant portion of cyberattacks in the first half of 2026, accounting for about half of all attacks in the Gulf region. The report, presented at GISEC 2026, indicates that government agencies were the primary targets of these attacks.

The research highlights that financially motivated criminals, hacktivists, and state-aligned groups were all involved, but their roles differed. While financially motivated criminals aimed for monetary gain, hacktivists and state-aligned groups disrupted operations to undermine national interests.

The Gulf region's rapid digital transformation and economic growth have made it an attractive target for various threat actors. The first quarter of 2026 saw 96% of all cyber incidents recorded, a surge largely attributed to the Iran conflict. As de-escalation efforts progressed, attack volumes decreased. However, the report warns that a significant number of attacks likely go undetected due to their sophisticated tactics.

The UAE was the hardest-hit nation, absorbing 35% of all attacks, followed by Iran at 17% and Saudi Arabia at 15%. This concentration of attacks can be attributed to the UAE and Saudi Arabia's swift digital transformation and economic growth, which expand the attack surface for opportunistic and state-aligned actors. Government agencies took the most significant share of cyberattacks, representing 27% of successful attacks across the Gulf.

Industrial companies ranked third, with 17% of attacks, particularly affecting Saudi Arabia. Darya Lavrova, a Lead Analyst at Positive Technologies, warns that cybercriminals' objectives now include spreading disinformation during conflicts, not just data theft. State-sponsored groups are also likely to target critical infrastructure for espionage purposes, aiming to establish long-term footholds.