EBA Takes Its Email Systems Offline due to Cyber-attack

​The European Banking Authority (EBA) announced on Sunday that it has been hit by a cyber-attack against its Microsoft Exchange Servers, which is affecting many organisations worldwide.

The Agency has swiftly launched a full investigation, in close cooperation with its ICT provider, a team of forensic experts and other relevant entities.

As the vulnerability is related to the EBA's email servers, access to personal data through emails held on that servers may have been obtained by the attacker. The EBA is working to identify what, if any, data was accessed. Where appropriate, the EBA will provide information on measures that data subjects might take to mitigate possible adverse effects.

As a precautionary measure, the EBA has decided to take its email systems offline. Further information will be made available in due course.

When email communication channels are restored, the agency's Data Protection Officer, Jonathan Overett Somnier, can be contacted at dpo@eba.europa.eu. Affected organisations can now contact the press line on +33 1 86 52 7052 for responses on urgent queries.