Recovery from cyber attack on Hanfa's system
As we have already informed the public through a press release, the Croatian Financial Services Supervisory Agency (Hanfa) suffered a cyber attack on its IT system on 23 January 2024. The causes and consequences of the attack remain under investigation, and we are currently co-operating intensively with all relevant authorities. The total damage is still to be determined.
In cooperation with the competent institutions and external IT partners, we began urgent recovery of the digital system immediately after the attack. Hanfa's internal team is working on this, involving employees from various fields, with additional engagement of external independent experts
On Thursday, January 25, electronic communication was established and Hanfa's website was almost completely recovered.
The second phase should include the recovery of public registers and the pages for registered users of Hanfa's reporting system (Reports). We therefore ask all users of our data, financial market and wider public for understanding as they will temporarily not be able to use these services in the coming period.
Acting in accordance with the applicable regulations and taking into account the potential risk to the rights and freedoms of individuals, Hanfa reported the incident to the competent personal data protection authority and made every effort not to compromise the personal data of data subjects. Security and protection of personal data and privacy are of utmost importance to us, and we will therefore regularly inform all data subjects about new developments. Further measures to inform s data subjects are under consideration and depend on the outcome of supervision and internal and external investigations
Regardless of further developments, we are continuing with regular activities within our jurisdiction and we are in direct contact with supervised entities for regular delivery and submission of all reports.
We suggest that citizens continue to send their complaints regarding non-bank financial services to the e-mail address potrosaci@hanfa.hr, as they have so far. They should resend all enquiries sent to Hanfa electronically on 23 and 24 January 2024 to the same address. Contacts of our other services for all other queries can be found here.
In case of concerns about personal data, data subjects may also contact the Data Protection Officer at privatnost@hanfa.hr.
We will disclose new information upon completion of the investigation and upon application of the new functionalities of our system.
