The European Court of Auditors has found that efforts to combat cyberattacks across the European Union are being hindered by a lack of information sharing between member states.
Background
The European Court of Auditors has reported that the European Union's cyber defences are being undermined by poor data sharing between member states. This is despite the EU investing €1.4 billion in cyber security in its current budget.
Incident Response
A ransomware attack on a technology provider for the aviation industry in September 2025, which disrupted airports in London, Brussels, Berlin, Dublin and other hubs, was not reported to the EU cybersecurity agency or other member states. This lack of information sharing hindered the response to the incident.
Regulatory Action
The European Commission has referred France, Ireland, the Netherlands and Spain to the EU Court of Justice for failing to adjust their national laws to include EU measures on sharing cyber security information. This action aims to improve information sharing and enhance the EU's cyber defences.
Practical Response
Australian healthcare organisations and Melbourne businesses should review their incident response plans to ensure that they include procedures for sharing information with relevant authorities and stakeholders in the event of a cyber incident. This includes identifying the appropriate channels for reporting incidents and ensuring that staff are aware of their roles and responsibilities in responding to a cyber incident.
Talk to Podium IT
Need a clear next step?
Send a secure enquiry and tell us what you are planning. Please do not include passwords, patient information or other sensitive data.
General information only. It is not legal, privacy or compliance advice; requirements should be assessed for your organisation.