ECB gives euro zone banks four months to counter AI cyber threats

The European Central Bank has given euro zone banks four months to draw up contingency plans against AI-enabled cyberattacks, warning that such threats could undermine confidence in the financial system and disrupt payment networks.

The ECB's directive, communicated in a letter to banks, reflects growing regulatory alarm over advanced AI models like Anthropic's Mythos, whose cyber capabilities have become so potent that access to some versions has been restricted — a limitation that currently excludes euro zone banks. The central bank stressed that these developments carry "profound implications" for the confidentiality, integrity and resilience of banks' information and communication technology systems. Banks must now assess their exposure to AI-driven threats and submit detailed mitigation strategies within the four-month window.

For interest rate and central bank policy traders, the move signals that regulators are proactively addressing a systemic risk that could affect the smooth functioning of payment and settlement systems — a critical backbone for money markets and rate transmission. Any disruption to these systems could impair the ECB's ability to implement monetary policy effectively, potentially forcing emergency liquidity measures. Traders can monitor how this regulatory push influences bank risk premiums and funding costs via NowPrice's real-time rates dashboard.

Market participants will watch for any signs that banks are struggling to meet the deadline or that the ECB may extend the timeline. The broader context is a global regulatory trend: central banks and financial authorities are increasingly scrutinizing AI risks, with potential implications for operational resilience requirements and capital buffers. The next key date is the four-month deadline, after which the ECB will review compliance and may impose additional measures if gaps remain.