Russian-speaking Killnet group DDoS 22 campaign 25 20 15 10 14 11 146 19 12 11 Total of Increase of DDoS atacks 14 12 5 5 7 incidents 10 9 0 January February March April May June July August September October November December Graph 2: Number of Resolved Incidents During 2022 A key trend of the past two years is that the number of severe cyber incidents registered by the NÚKIB has been declining. On the other hand, the number of significant cyber incidents increased, while the number of minor cyber incidents decreased slightly (see Graph 3). As in 2021, the public sector was by far the most affected by cyber incidents. The health sector and the private sector followed at a greater distance. This year, however, the NÚKIB has recorded an increase in incidents in transportation. Previous years saw only single digit values in this sector, while in 2022 there were 14 incidents. less significant cyber incident significant cyber incident very significant cyber incident 25 20 15 10 5 0 January February March April May June July August September October November December Graph 3: Summary of Resolved Incidents in 2022 Based on Significance In the year 2023, Czech cyberspace will probably (55-70 %) continue to be influenced to some extent by the developments in Ukraine. Although the war affected Czech cyberspace in 2022 (see below), it did not lead to a significant increase in severe cyberattacks against Czech entities. These attacks were mainly aimed at Ukraine itself or its geographically closest allies. However, it cannot be ruled out (25-50%) that such attacks may also occur in Czech cyberspace in the coming year. Unregulated entities Regulated entities 72 incidents 74 incidents The trend of the growing number of incidents involving unregulated entities also continued during the previous year. In 2022, the NÚKIB registered 74 of such attacks compared to 64 in 2021. Regulated entities, on the other hand, saw a year-on-year decrease in the number of cyber incidents. 8

Select target paragraph3