This paper investigates the problem of data-driven and dynamic periodic event-triggered control (DPETC) for unknown cyber-physical systems (CPSs) against Denial-of-Service (DoS) attacks and successive packet losses. An unified hybrid system framework is proposed to describe the whole CPS, in which DoS attacks are characterized in terms of duration and frequency. Building on the hybrid system framework, we present model-based co-design conditions for a dynamic periodic event-triggering mechanism (DPETM) and controller to ensure$\mathcal {L}_{2}$-stability of the CPSs while tolerating both DoS attacks and a maximal allowable number of successive packet dropouts (MANSDs). By integrating the model-based conditions with the data-based parametric representation and employing a linear fractional transformation (LFT) approach, corresponding data-based sufficient conditions are derived. Finally, numerical simulations of a batch reactor system demonstrate the effectiveness of the proposed co-design approach.