Skip to Primary Navigation

ICT risk increasingly borderless

ATM machines are out of order due to a power outage in Cannes, France.
A power outage took ATMs offline in Cannes, France earlier this year. Photo: Lorenzo Franzoni/Getty Images

Joint ESA report also highlights the role of third parties as incident originators and warns about impending risk from AI.

The first annual overview of major ICT-related incidents in the EU’s financial sector is based on reporting introduced by the EU’s Digital Operational Resilience Act (DORA). In 2025, over 3,000 major incidents were reported by financial entities in the EU.

Sixty percent of the incidents affected the credit sector, while

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience