The European Union tested its Cybersecurity Blueprint, which sets out roles and responsibilities in the event of a crisis, as well as, for the first time, the European Cybersecurity Reserve, during a two-day exercise held on 10 and 11 June. The exercise simulated large-scale cyber threats escalating into a full-blown cybersecurity crisis, with multiple attacks targeting critical maritime and rail infrastructure across Europe and requiring a coordinated response at technical, operational and political levels.
The Cyber Europe exercise tested authorities’ response to attacks compromising port logistics and navigation systems, resulting in serious operational disruptions, including a halt to freight movements, safety risks such as near-collision incidents, and the delay of thousands of trains and freight convoys in cross-border rail transport.
During the exercise, transport authorities and ticketing services were also targeted by a ransomware attack, which paralysed administrative operations and passenger services. The attack also led to the disclosure of sensitive data concerning passengers and emergency services, fuelling disinformation campaigns conducted by ‘hacktivists’ on social media, the European Union Agency for Cybersecurity (ENISA) stated in a press release.
More than 5,000 participants, including over 100 leading cybersecurity experts from EU Member States and partner countries - the United Kingdom, Norway, Switzerland and Ukraine - as well as cybersecurity specialists from the public and private sectors and ENISA, took part in the exercise.
According to the European Commission, the lessons learned from this exercise will help strengthen the European Cybersecurity Blueprint and integrate cyber crisis management into the broader framework of the Union’s emergency preparedness and response mechanisms. (Original version in French by Ana Pisonero Hernández)