2025 Report on major ICT-related incidents Joint-ESA report under Article 22 of DORA

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<rdf:Description>
<dc:creator>EIOPA</dc:creator>
<dc:date>2026</dc:date>
<dc:description xml:lang="es">Sumario: This joint ESAs report provides an anonymised, aggregated overview of major ICT-related incidents reported in 2025 under DORA Article 22. A total of 3,383 incidents were notified, mostly in the credit and payments sectors. One third had cross-border impact, reflecting strong interconnections, shared infrastructures and third-party dependencies. System failures and external events were the predominant drivers; about 29% originated at third-party providers. Cybersecurity incidents represented a smaller share, suggesting safeguards and detection measures are effective, though vigilance is needed. Most incidents had limited impact on clients, transactions and financial counterparties, pointing to timely detection and effective containment. The report discusses classification criteria, root causes, impacts, remedial actions, costs, and highlights selected cross-border events (e.g., TARGET services outage; Iberian Peninsula blackout). It also notes data quality and reporting divergences in this first DORA year and outlines steps to improve supervisory convergence and data collection.</dc:description>
<dc:identifier>https://documentacion.fundacionmapfre.org/documentacion/publico/es/bib/192764.do</dc:identifier>
<dc:language>eng</dc:language>
<dc:publisher>EIOPA</dc:publisher>
<dc:rights xml:lang="es">InC - http://rightsstatements.org/vocab/InC/1.0/</dc:rights>
<dc:subject xml:lang="es">Unión Europea</dc:subject>
<dc:subject xml:lang="es">Reglamento DORA</dc:subject>
<dc:subject xml:lang="es">Riesgo informático</dc:subject>
<dc:subject xml:lang="es">Supervisión financiera</dc:subject>
<dc:subject xml:lang="es">Externalización de servicios</dc:subject>
<dc:subject xml:lang="es">Unión Europea</dc:subject>
<dc:type xml:lang="es">Libros</dc:type>
<dc:title xml:lang="es">2025 Report on major ICT-related incidents Joint-ESA report under Article 22 of DORA</dc:title>
<dc:format xml:lang="es">21 p.</dc:format>
<dc:coverage xml:lang="es">Unión Europea</dc:coverage>
<dc:description xml:lang="es">List of Figures -- Abbreviations -- Executive Summary -- Introduction -- Methodology -- Overview of major incidents in the EU -- Conclusions</dc:description>
</rdf:Description>
</rdf:RDF>