European Court of Auditors says EU cyber defenses weakened by member states' poor information sharing

On September 21, 2026, the European Court of Auditors published a report finding that EU member states' failure to share information about cyber incidents is undermining the bloc's cybersecurity defenses. The EU has invested €1.4 billion in cybersecurity for 2021-27, but the report says cooperation is not effective. It cited a ransomware attack on an aviation technology provider in September 2025 that disrupted airports across Europe, yet no affected state notified the EU. The audit also noted that no EU state has reported a large-scale incident since 2016. The European Commission has referred four countries to the EU Court of Justice for non-compliance.