Skip to content
ABBL Logo
Switch to consumers
Digital, Innovation, Payments

Luxembourg strengthens its financial centre against cyberthreats

Published on 28 September 2025

Modern conflict is no longer confined to land, sea and air: cyberspace has become a frontline. Beyond the battlefield, every company is a potential target, and the financial sector remains particularly exposed. In Luxembourg, public and private actors are joining forces to build resilience and ensure the stability of the financial centre.

Summary

    Training, awareness and resilience

    The Luxembourg House of Cybersecurity (LHC) has been a pioneer in immersive training with its ROOM#42 crisis simulation centre. Inspired by NATO’s “Locked Shields” exercises, it confronts company teams with scenarios such as ransomware, disinformation or system shutdowns to test their reactions under pressure. This work is complemented by the NC3 (awareness and prevention) and CIRCL (incident response), which provide tools, intelligence and support across the country.

    A strong private-sector ecosystem

    Cybersecurity has also developed into a vibrant industry in Luxembourg, with more than 300 specialised companies active in technology and advisory services. “Both in terms of skills and technology, the specialised companies active in Luxembourg cover all the needs that financial players might have,” underline Ilker Tutu (PayPal Europe) and Antoine Meyers (BGL BNP Paribas), respectively chair and vice-chair of the ABBL Trust and Cybersecurity Committee.

    ABBL’s commitment

    For the ABBL, cybersecurity is a strategic priority.

    According to ENISA, between January and June 2024, 46% of cyberattacks targeted banking institutions.

    Ananda Kautz

    Member of the Management Board of the ABBL

    This reality underlines the need for collective action. The ABBL collaborates with both public institutions and private actors to raise awareness, promote best practices and ensure that banks and their clients are protected in a constantly evolving threat landscape.

    Regulation and supervision

    The CSSF and BCL play a key role in this ecosystem, ensuring that Luxembourg’s regulatory framework is adapted to the growing complexity of cyberthreats. Through incident management, large-scale testing (TIBER-LU), and the implementation of the Digital Operational Resilience Act (DORA), the regulator provides structure and accountability.

    A shared responsibility

    From the Luxembourg Armed Forces, which contribute expertise and tools such as MISP, to the University of Luxembourg and continuous training providers, all actors are mobilised. Yet vigilance remains essential: no government or company can claim to be 100% protected. The strength of Luxembourg’s model lies precisely in the collaboration between public, private, regulatory and defence actors.

    Full article available via Luxembourg for Finance