Surge in Cybersecurity Demand Amid Geopolitical Tensions in India

Severity: High (Score: 75.5)

Sources: Deccanchronicle, Inkl

Published: 2026-05-26 · Updated: 2026-05-26

Keywords: cyber, companies, systems, people, understand, threat, until

Summary

In response to heightened cyber threats following the Iran war and last year's India-Pakistan conflict, Indian companies are rapidly enhancing their cybersecurity measures. Demand for disaster recovery and cyber resilience solutions has surged, with firms like Rubrik and Securonix reporting significantly shorter sales cycles. The Indian government is also prioritizing cybersecurity, coinciding with the implementation of the Digital Personal Data Protection Act (DPDP), which imposes hefty penalties for data breaches. A recent survey indicated that 64% of businesses are experiencing disruptions in decision-making due to geopolitical tensions. Phishing attacks have escalated, with Indian banks reporting millions of daily incidents during the last conflict. The cybersecurity market in India is projected to grow from $5.5 billion in 2025 to $6.5 billion in 2026. Experts emphasize the need for organizations to treat cybersecurity as a core business risk rather than an afterthought. Key Points: • Indian companies are rapidly enhancing cybersecurity measures due to geopolitical tensions. • The Digital Personal Data Protection Act introduces severe penalties for data breaches. • Phishing attacks have surged, with millions reported daily during recent conflicts.

Detailed Analysis

**Impact** Indian companies across banking, telecom, and large enterprises are experiencing a surge in cyber threats, including millions of daily phishing attacks reported during the 2025 India-Pakistan conflict. The cybersecurity market in India reached $5.5 billion in 2025 and is projected to grow to $6.5 billion in 2026, driven by geopolitical tensions and regulatory changes like the DPDP Act. Data breaches risk penalties ranging from ₹50 lakh to ₹250 crore, affecting corporate compliance and operational continuity. The public and children are also vulnerable due to widespread digital exposure and poor cyber hygiene. **Technical Details** Phishing emails are the primary attack vector, exploiting social engineering and psychological manipulation to induce panic and urgency, leading to credential theft and fraud. Attackers impersonate law enforcement in digital arrest scams, targeting victims with urgent malicious links. No specific malware, CVEs, or IOCs were detailed in the sources. The kill chain involves initial access through phishing, followed by exploitation of human factors rather than technical vulnerabilities. **Recommended Response** Prioritize deployment of advanced phishing detection and AI-powered threat detection systems, alongside strengthening disaster recovery and cyber resilience infrastructure. Enforce strict data protection compliance aligned with the DPDP Act, including regular audits and incident response drills. Educate users on avoiding urgent or panic-inducing links, limiting digital exposure, removing unused apps, and monitoring online behavior, especially for children. Monitor phishing campaigns and unauthorized data access attempts; no specific patches or IOCs were provided.

Source articles (2)

• Cyber Alert: Companies rush to fortify systems — Inkl · 2026-05-25
  Global cybersecurity firms saw a surge in demand from Indian companies that have doubled down on disaster recovery and cyber resilience systems in the wake of the war in Iran and last year's India-Pak…
• People Don't Understand Cyber Threat Until They Become Victims — Deccanchronicle · 2026-05-26
  For over 25 years, Dr. Pattathil Dhanya Menon has worked on the darker side of cyberspace, tracing digital footprints, investigating fraud, training police departments, and helping organisations respo…

Timeline

• 2025-05-01 — India-Pakistan conflict escalates: During the conflict, Indian banks reported millions of phishing attacks daily, a significant increase from normal levels.
• 2026-05-25 — Cybersecurity firms report increased demand: Companies like Rubrik and Securonix noted a surge in demand for disaster recovery solutions due to rising cyber threats.
• 2026-05-26 — Implementation of DPDP Act: The Digital Personal Data Protection Act comes into effect, imposing penalties for data breaches, prompting organizations to prioritize compliance.

Related entities

• Data Breach (Attack Type)
• Phishing (Attack Type)
• India (Country)
• Iran (Country)
• Ireland (Country)
• Pakistan (Country)
• cybercrime.gov.in (Domain)
• T1566 - Phishing (Mitre Attack)