Skip to the text
Text as of 27 Dec 2022 · Directive (EU) 2022/2555, OJ L 333, 27.12.2022 · Same wording as today’s text.Today’s text

Recital 54

Digital & dataLevel 1DirectiveNIS2Stage: AdoptedOfficial source

In recent years, the Union has faced an exponential increase in ransomware attacks, in which malware encrypts data and systems and demands a ransom payment for release. The increasing frequency and severity of ransomware attacks can be driven by several factors, such as different attack patterns, criminal business models around ‘ransomware as a service’ and cryptocurrencies, ransom demands, and the rise of supply chain attacks. Member States should develop a policy addressing the rise of ransomware attacks as part of their national cybersecurity strategy.