Cyber Risk Assessment Cell (CERC) meeting (26.06.2026)

Following a spear phishing (or phishing) incident targeting government workstation and subsequently affecting the government’s information system, the Cyber Risk Assessment Cell (CERC) met this Friday afternoon to analyse the impact of this incident.

Spear phishing is a targeted form of phishing in which the attacker customises their message for a specific person or organisation in order to make it more credible and increase the likelihood of obtaining sensitive information.

The incident occurred on the morning of 23 June. As soon as it was detected, several preventive measures were implemented. At this stage, no major impact on users has been identified.

The relevant services are continuing their technical analyses regarding the incident, as well as assessing the need for additional precautionary measures.

Participants of the CERC: HCPN/GOVCERT, ILR, CSSF, CTIE, CIRCL, Grand Ducal Police, SRE, Luxembourg Army, Directorate of Defence, Ministry of State, Ministry of Foreign and European Affairs, Defence, Cooperation and Foreign Trade, Ministry of Digitalisation

Issued by the Cyber Risk Assessment Cell (CERC)