top of page

Cyberattacks on holidays: A real risk

Cyberattacks on holidays have become a recurring tactic among criminal groups. A recent study reveals that most ransomware incidents occur on weekends or non-working days, precisely when digital security teams are operating with minimal resources.


This behavior, observed in countries such as Spain, the United States, the United Kingdom, and others, also offers a valuable reference point for Mexico, where many companies reduce their operations during these periods.

Cyberattacks on holidays

Why cyberattacks increase on holidays


The report notes that 52% of the organizations evaluated suffered ransomware incidents during non-working days. This is largely because 78% of companies significantly reduce their staff in security operations centers (SOCs) on weekends and holidays, while 6% operate without any active teams during these periods.


This low level of vigilance creates an ideal scenario for attackers to act with impunity.

Experts point out that criminal groups often take advantage of reduced supervision to compromise critical systems, causing prolonged operational disruptions.


In Mexico, where many sectors (such as retail, manufacturing, tourism, and logistics) also work with limited resources on holidays, this global trend underscores the need to implement continuous monitoring or automated solutions to mitigate risks.


Why companies let their guard down


The reasons behind this reduction in staffing are mostly internal:


  • 62% of companies seek to offer a better work-life balance.

  • 47% remain closed on weekends and holidays.

  • 29% consider it unlikely that they will be attacked on those dates.


However, this reduction leaves critical areas unsupervised, exposing organizations to targeted attacks and slower response times.


Attacks during business changes


The study also highlights that cybercriminals increase their activity during times of corporate transformation, such as mergers, acquisitions, IPOs, or mass layoffs.


These processes often lead to confusion, changes in responsibilities, and less attention to digital security.

Sixty percent of the attacks analyzed occurred during one of these events, demonstrating that criminals seek to take advantage of any period of disorder or transition.


In Mexico, where many companies are in the process of expansion, digitization, or restructuring, these findings are a key reminder: cyberattacks on holidays are not only a global problem, but a real risk for any organization undergoing change.


At Cyberpeace, we encourage all organizations to stay informed about cyberattacks during holidays and other emerging threats. Prevention, monitoring, and awareness are essential to strengthening digital security. Want to learn more about cybersecurity and business defense? Follow us on social media and stay protected.


Comments


Cyberpeace_Working table 1 copy 8.png

Cyberpeace Copyright © 2025 - All rights reserved.

TLP:WHITE

bottom of page