Four consultation deadlines extended to October 26
The European Banking Authority (EBA) extended four consultation deadlines to October 26, 2026, following a precautionary website shutdown. The October 22 announcement reports no breach or compromised data.
Security updates prompted the shutdown
On October 21, 2026, CERT-EU, the cybersecurity service for EU institutions, bodies and agencies, alerted organisations to two critical security flaws.
The affected software runs many websites, including the EBA's.
As a precaution, the EBA took its website offline on October 21 at 13:00 CEST while it applied the necessary security updates.
It restored the website on October 22 at 14:00 CEST.
The EBA detected no breach and reported that no data had been compromised.
Because the outage prevented access to consultation pages, the authority extended four public consultation deadlines to give stakeholders enough time to respond.
Responses can be submitted through the relevant website pages by October 26, 2026.
Four files receive extra time
The extensions cover Guidelines on investment of available financial means (EBA/CP/2026/12) and Implementing Technical Standards on information exchange (EBA/CP/2026/14).
They also cover Implementing Technical Standards on depositor information (EBA/CP/2026/13) and the methodology for setting fines under MiCA (EBA/CP/2026/02/10).
The same October 26 deadline applies to all four consultations.
The EBA apologised for the inconvenience caused by the website's unavailability.
More time to respond
The extension changes the submission timetable for four consultations.
The EBA attributes the extra time to website unavailability, not to changes in the proposals.
Its security update reports a precautionary shutdown rather than a detected breach.