Vodafone Spain's security operations centres have recorded over 11,000 incidents targeting SMEs between February and September 2026. Malware accounts for 73% of detections and 44% is related to data leaks.
The cybersecurity operations centres (SOCs) of Vodafone Spain have detected more than 11,000 incidents of security aimed at systems, networks, and devices of their SME clients between February and September 2026. According to the operator, these attacks are characterised by having a direct impact on the business or security of the affected companies.
Malware remains the primary threat, accounting for 73% of detections. This is followed by incidents related to exposure and data leaks, which represent 44%; suspicious access to blocked accounts, at 39%; and communications with high-risk countries, which account for 31%. The information, provided by pressdigital.es, details that all this activity is managed from the four security operations centres that the company has in Madrid, Barcelona, and Murcia.
From these centres, the systems of companies and public administrations are continuously monitored, anomalous behaviours are analysed, and proactive measures are taken against potential incidents. Currently, Vodafone protects 5.5 million mobile lines of companies, as well as networks, computers, and servers.
The operator warns that the expansion of remote work, the use of cloud applications, and the incorporation of new devices have increased the exposed surface to potential attacks, making mobile phones a primary target.
“Attacks are no longer directed solely at a company's large servers. Frequently, the entry point is an employee's mobile, a fraudulent email, a compromised password, or an unupdated device. Protection must accompany every professional and every connection,” explained the director of the cybersecurity unit of Vodafone Empresas, Roberto Lara.
Specialised teams work 24/7 on prevention, monitoring, management, and recovery tasks. They are connected with Spanish and European networks such as CSIRT.es, hold the status of Accredited team with TF-CSIRT, and have Gold category in the National SOC Network of the National Cryptologic Centre.
This coordination is relevant for public administrations and companies in essential sectors such as energy, water, transport, industry, logistics, or healthcare, where a technological disruption can halt activity and affect suppliers, clients, and citizens.
To adapt these capabilities to the context and resources of SMEs, the company's offering includes advanced protection for mobiles and devices, vulnerability analysis, audits, and managed services from a specialised SOC, with proportional and scalable solutions for each client.
You may also like
