EU to form joint cyber unit to tackle large-scale cyber-attacks

The European Commission (EU) has announced plans to build a Joint Cyber Unit to tackle large-scale cyber-attacks.

Recent ransomware incidents on critical services in Ireland and the US have 'focused minds', the commission said, reports BBC.

A dedicated team of multi-national cyber-experts will be rapidly deployed to European countries during serious attacks, it said.

Launching the proposals, European Commission vice-president Margaritis Schinas said last month's hack on US fuel supplies was "the nightmare scenario that we have to prepare against."

Last month, a cyber-criminal gang called Darkside forced the Colonial Pipeline offline for nearly a week, causing panic buying and fuel shortages.

Ransomware hackers use malicious software to scramble and steal an organisation's computer data - charging victims money to return services to normal.

The US government has also recently formed a Ransomware Task Force, while the UK's National Cyber Security Centre warns that ransomware is the biggest cyber threat to the UK.

The European Commission said that the ongoing ransomware attack on Ireland's health service is another sign that cyber-attacks are a national security issue.

In Ireland, the Health Service Executive (HSE) was hit by a ransomware group called Conti, which scrambled IT systems, causing significant disruption to many hospitals.

HSE chief Paul Reid told the Oireachtas health committee on Wednesday that it will take months to fix the system.

It will cost as much as €100m (£85m) to recover and will also have large 'human costs', he said.

Thierry Breton, the EU commissioner for the internal market, told reporters that the Joint Cyber Unit's rapid reaction teams could have helped Ireland recover from the crisis.

He said the unit would help in similar scenarios by "deploying very quickly a dedicated team which we don't have the capacity to do now. We know that the longer you wait, the worse it is, so faster and more solidarity is what you can expect".

Breton insisted that the new unit will not compete with national cyber-entities or duplicate work.

He promised to build a team to provide support virtually and physically, using resources "from one country to another" to deliver operational and technical assistance.

The aim is to ensure that the Joint Cyber Unit will be operational by June next year and that it will be fully established one year later, by 30 June 2023.