ECB orders banks to prepare for AI cyber threats

The European Central Bank has told the eurozone's largest lenders to prepare for cyber threats powered by increasingly capable artificial intelligence systems, setting an end-October deadline for banks to explain how they will strengthen their defences.

The instruction puts AI-enabled security risk higher on the supervisory agenda for major European banks. Officials said lenders must show how they plan to protect operations, customers and critical systems as attackers gain access to more advanced automation tools.

ECB deadline for AI cyber defences

The request targets the largest banks under eurozone supervision, making it a regulatory test of whether existing cyber controls can keep pace with rapid advances in artificial intelligence. The central bank is focused on threats that could increase the speed, scale or sophistication of attacks against financial institutions.

For banks, the immediate task is operational rather than theoretical. They will need to map vulnerabilities, review incident-response plans and show supervisors that technology teams, risk officers and boards are aligned on AI-related cyber exposure.

The wider technology effect is likely to fall on cybersecurity vendors, cloud providers and compliance teams serving the banking sector. If banks conclude that current systems are not enough, spending may shift toward AI detection, identity controls and resilience testing.

If lenders provide credible plans by October 31, 2026, the issue may remain a supervisory tightening rather than a market shock. If gaps are exposed instead, the ECB could press for faster remediation, raising compliance costs for banks and accelerating demand for cyber tools across European finance.