Albania continues to face significant cyber threats from state-sponsored actors, particularly Iran and Russia, according to the latest security assessment issued by the U.S. Department of State through the Overseas Security Advisory Council (OSAC).

The report identifies Albania as one of the countries at serious risk of malicious cyber activity, citing repeated attacks targeting government institutions and critical digital infrastructure.

"Albania is a target for malicious cyber activity by state actors, including Iran and Russia," the report states. It also notes that the country has experienced ransomware attacks carried out by cybercriminal groups.

According to the assessment, Iranian cyber actors carried out attacks against Albanian government websites and state systems in 2026. The report warns that state-sponsored cyber operations targeting critical infrastructure or disrupting essential public services can have domestic, regional and global consequences, pose a high risk to the population, and increase the potential for escalation and conflict.

The report also evaluates Albania's broader security environment. It classifies the terrorist threat level in Tirana as medium, while noting that the country has not experienced a successful terrorist attack during the past decade.

It references the 2018 case in which Albanian authorities foiled an alleged plot linked to Iran targeting members of the exiled Iranian opposition group, the People's Mojahedin Organization of Iran (MEK), leading to the arrest of those involved.

In addition, the report rates Tirana's overall crime threat as medium.

Despite these concerns, the U.S. State Department assesses Tirana as posing a low threat for political violence directed at, or affecting, official U.S. government interests, indicating that risks to American personnel from politically motivated violence remain limited.