Cyber threat - DORA reporting

Threat

Reference

Your own reference for the threat.

Title *

Source

Detected at *

Art. 6(b): date and time of detection (Swedish time).

Other relevant timestamps

Description of the cyber threat *

Art. 6(c): what the threat is, how it was identified and which systems or services it targets.

Status

Changes in threat activity

Art. 6(f): status of the threat and changes observed over time.

Significance assessment

Art. 10 CDR (EU) 2024/1772

A cyber threat is significant only when all three conditions (a), (b) and (c) are met.

(a)Could the threat, if materialised, affect critical or important functions of the financial entity, or affect other financial entities, third-party providers, clients or financial counterparts?

Yes No

Reasoning

(b)Does the threat have a high probability of materialisation at the financial entity or at other financial entities?

Take into account at least the three elements below and document them.

Yes No

(i) Applicable risks, including potential vulnerabilities of the systems of the financial entity that can be exploited

(ii) Capabilities and intent of the threat actor, to the extent known

(iii) Persistence of the threat and accrued knowledge about incidents that have impacted the financial entity, its providers, clients or counterparts

(c)Could the threat, if materialised, meet any of the following?

(i) Criticality of services: ICT services or systems supporting critical or important functions, supervised financial services, or a successful malicious unauthorised access (Art. 6)

Yes No

(ii) Clients, financial counterparts and transactions: more than 10% or 100 000 clients, more than 30% of counterparts, more than 10% of daily transactions by number or value, or relevant clients or counterparts (Art. 9(1))

Yes No

(iii) Geographical spread: impact in two or more Member States (Art. 9(4))

Yes No

Other thresholds that could be met (optional, Art. 10(2): reputational impact, duration and downtime, data losses, economic impact)

Answer (a), (b) and (c) to see the result.

Notification content

Art. 6 CDR (EU) 2025/301

Used for a voluntary notification to Finansinspektionen (DORA Article 19(2)). General information about the financial entity (Art. 6(a)) is taken from your settings. Finansinspektionen has no file format for cyber threats: transfer the content into the "Dora Cyberthreats" form in Fidac.

Potential impact on the financial entity, its clients or financial counterparts

Art. 6(d)

Actions taken to prevent materialisation

Art. 6(g)

Notifications of the threat to other financial entities or authorities

Art. 6(h)

Indicators of compromise

Art. 6(i): IP addresses, domains, hashes, CVEs, TTPs.

Other relevant information

Art. 6(j)

Threat

Significance assessment

Notification content

Notification text