started · updated
European Court of Auditors warns EU cyber defenses are insufficient
The European Court of Auditors has issued a report stating that the European Union is insufficiently prepared to detect and defend against major cyberattacks. Auditors identified poor information sharing among member states as the “Achilles heel of the entire system,” noting that a lack of data exchange prevents the bloc from utilizing the collective experience of its members.
As a specific example, the report highlighted a September 2025 ransomware attack on an aviation IT service provider. The incident disrupted passenger processing at major airports in Berlin, London, Brussels, and Dublin. Despite the significant cross-border impact, Germany, Belgium, and Ireland failed to formally report the incident to the EU cybersecurity agency, ENISA, or other member states.
Furthermore, the report found that national security legislation in various member states often hinders the timely flow of critical information. While the EU has invested €1.4 billion in cybersecurity, the auditors concluded that current measures are only partially effective due to communication failures and execution delays.
Entities
ENISA · European Commission · European Court of Auditors · European Union · George-Marius Hyzler
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 15 SOURCES] The European Court of Auditors reports that the EU is insufficiently prepared to detect and defend against major cyberattacks. www.allgaeuer-zeitung.de · www.nordbayern.de · www.onetz.de · courage-lounge.de · www.fehmarn24.de · +10 more
- [● 15 SOURCES] A cyberattack on an IT service provider in September 2025 disrupted passenger processing at airports in Berlin, London, Brussels, and Dublin. www.allgaeuer-zeitung.de · www.nordbayern.de · www.onetz.de · courage-lounge.de · www.fehmarn24.de · +10 more
- [● 15 SOURCES] National security laws in member states hinder the flow of cyberattack information. www.allgaeuer-zeitung.de · www.nordbayern.de · www.onetz.de · courage-lounge.de · www.fehmarn24.de · +10 more
- [● 15 SOURCES] Germany, Belgium, and Ireland failed to report a major September 2025 cyberattack to the EU cybersecurity agency, ENISA. www.allgaeuer-zeitung.de · www.nordbayern.de · www.onetz.de · courage-lounge.de · www.fehmarn24.de · +10 more
- [● 15 SOURCES] Insufficient information exchange is identified as the greatest weakness in EU cyber defense. www.allgaeuer-zeitung.de · www.nordbayern.de · www.onetz.de · courage-lounge.de · www.fehmarn24.de · +10 more