Source: Deutsche Nachrichten
Spain’s National Cybersecurity Institute, INCIBE, handled 122,223 cybersecurity incidents in 2025, 26% more than the previous year. Phishing remained a major fraud vector, with more than 25,000 cases recorded, while malware was the most frequent category. INCIBE also identified and reported more than 237,000 exposed vulnerable systems.
For Validato, these figures underline that many attacks exploit human trust rather than simply bypassing firewalls. “Phishing works because it exploits someone, not something. As phishing-as-a-service becomes easier to access, attackers can more readily impersonate a supplier, candidate or colleague. Robustly verifying the identity of people who receive system access – employees as well as external providers – can reduce the room for this type of fraud,” says André Naef, CEO of Validato.
Validato stresses that identity and background checks do not replace security awareness training or technical controls. Rather, where legally justified and proportionate, they can complement those measures by reducing the risk of granting sensitive access to the wrong person in the first place.
About Validato: Validato is an international provider of background checks and Human Risk Management, headquartered in Zurich, Switzerland, and operating internationally. Its modular, ISO 27001-certified platform enables companies to configure candidate and employee checks according to the role and within the applicable legal framework. Core data is processed and stored in Switzerland and the EU and, under Validato policy, deleted within a maximum of 120 days. No minimum volumes and no setup fees.
Media contact: André Naef, CEO Validato S.A. · Claridenstrasse 34, 8002 Zurich, Switzerland · +41 44 515 77 78 · www.validato.com