{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2024/1772 — RTS — ICT Incident Classification [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/8","url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/8","title":"Article 8 — Major incidents","family":"l2_unit_view","work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","view_of":"/dora/level-2/rts/2024-1772-ict-incident-classification","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Delegated Regulation (EU) 2024/1772, OJ L, 2024/1772, 25.6.2024","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","valid_from":"2024-07-15","valid_until":null,"content_id":"36b5a6f7a2367a23","versions":["2024-07-15"],"version_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/8/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/8/versions/2026-10-26/rev/36b5a6f7a2367a23","versions_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/8/versions","relations_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification/articles/8/relations","act_url":"https://www.headlesslaw.com/dora/level-2/rts/2024-1772-ict-incident-classification#art-8","source_line":"Commission Delegated Regulation (EU) 2024/1772 · binding · OJ L, 2024/1772, 25.6.2024 · dated 13 Mar 2024 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"delegated_regulation","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2024-03-13","published_on":"2024-06-25","entry_into_force":"2024-07-15","locators":{"document_date":"CELLAR 32024R1772 work_date_document","published_on":"CELLAR 32024R1772 official-journal-act_date_publication","entry_into_force":"CELLAR 32024R1772 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification","path":"/dora/level-2/rts/2024-1772-ict-incident-classification","name":"Commission Delegated Regulation (EU) 2024/1772","number":"2024/1772","celex":"32024R1772","title_official":"COMMISSION DELEGATED REGULATION (EU) 2024/1772 of 13 March 2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the criteria for the classification of ICT-related incidents and cyber threats, setting out materiality thresholds and specifying the details of reports of major incidents (Text with EEA relevance)","document_date":"2024-03-13"},"position":{"kind":"article","key":"8","index":8,"articles":13,"annexes":0},"prev":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/7","key":"7","title":"Article 7 — Economic impact"},"next":{"path":"/dora/level-2/rts/2024-1772-ict-incident-classification/articles/9","key":"9","title":"Article 9 — Materiality thresholds for determining major incidents"},"act_anchor":"#art-8"}},"provenance":{"official_url":"https://eur-lex.europa.eu/eli/reg_del/2024/1772/oj/eng","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification.md","unit_text_sha256":"644fbe1435598da15a50673966ecb931f5f2202a72406789935abf709846e50a","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/dora/level-2/rts/2024-1772-ict-incident-classification/art-8","kind":"article","key":"8","heading":"Article 8 — Major incidents","text":"## <a id=\"art-8\"></a>Article 8 — Major incidents\n\n1. <a id=\"art-8-p-1\"></a>An incident shall be considered a major incident for the purposes of [Article 19(1)](../../articles/19.md) of Regulation (EU) 2022/2554 where it has affected critical services as referred to in Article 6 and where either of the following conditions is fulfilled:\\\n   <a id=\"art-8-p-1-a\"></a>a) the materiality threshold referred to in Article 9(5), point (b), is met;\\\n   <a id=\"art-8-p-1-b\"></a>b) two or more of the other materiality thresholds referred to in Articles 9(1) to (6) are met.\\\n2. <a id=\"art-8-p-2\"></a>Recurring incidents that individually are not considered a major incident in accordance with paragraph 1 shall be considered as one major incident where they meet all of the following conditions:\\\n   <a id=\"art-8-p-2-a\"></a>a) they have occurred at least twice within 6 months;\\\n   <a id=\"art-8-p-2-b\"></a>b) they have the same apparent root cause as referred to in [Article 20](../../articles/20.md), first subparagraph, point (b) of Regulation (EU) 2022/2554;\\\n   <a id=\"art-8-p-2-c\"></a>c) they collectively fulfil the criteria for being considered a major incident set out in paragraph 1.\\\n\n    Financial entities shall assess the existence of recurring incidents on a monthly basis.\n\n    This paragraph does not apply to microenterprises and to financial entities listed in [Article 16(1)](../../articles/16.md) of Regulation (EU) 2022/2554.\n\n","marks":[],"text_hash":"644fbe1435598da15a50673966ecb931f5f2202a72406789935abf709846e50a","revision":1}}