FILE PHOTO: A hand is seen on a laptop with binary codes displayed in front of the EU flag in this illustration taken, August 19, 2022. REUTERS/Dado Ruvic/Illustration/File Photo

Poor data sharing undermining EU cyber defences, auditors say

· CNA · Join

Read a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST Tap here to return to FAST
FAST

BRUSSELS, Sept 21 : Efforts to combat cyberattacks across the European Union are being undermined by member states' failure to share enough information on the incidents, the European Court of Auditors said on Monday. 

The 27-nation bloc was investing more and more in cybersecurity — with €1.4 billion ($1.61 billion) in its current budget — and improving cooperation, according to the court, which reports on how effectively the EU spends money.

But this was not working as well as it should, it added.

Poor information sharing was the "Achilles heel of the entire system", the report said.    

CNA Games

Guess Word
Crack the word, one row at a time

Buzzword
Create words using the given letters

Mini Sudoku
Tiny puzzle, mighty brain teaser

Mini Crossword
Small grid, big challenge

Word Search
Spot as many words as you can
Show More
Show Less

"When a serious cyber incident occurs, timely and actionable information is essential. Without it, networks and mechanisms lose much of their added value," it added.

It pointed to a ransomware attack on a technology provider for the aviation industry in September 2025, which disrupted airports in London, Brussels, Berlin, Dublin and other hubs. 

None of the affected states notified the EU cybersecurity agency or other members of the incident, the report said.

Individual countries' national security legislation was getting in the way when countries needed to share information about incidents that crossed borders, the court said.

No EU state has reported a "large-scale" cybersecurity incident since 2016, even though that label officially applies to any attack affecting at least two members, it added.    

In July, the European Commission referred France, Ireland, the Netherlands and Spain to the EU Court of Justice for failing to adjust their national laws to include EU measures on sharing cybersecurity information.

($1 = 0.8711 euros)

Source: Reuters

Newsletter

Week in Review

Subscribe to our Chief Editor’s Week in Review

Our chief editor shares analysis and picks of the week's biggest news every Saturday.

Sign up for our newsletters

Get our pick of top stories and thought-provoking articles in your inbox

Subscribe here

Get the CNA app

Stay updated with notifications for breaking news and our best stories

Download here

Get WhatsApp alerts

Join our channel for the top reads for the day on your preferred chat app

Join here