TL;DR
Get smart everyday buys delivered free — and shop member deals
- Fast, free delivery on millions of items
- Access to Prime Big Deal Days deals on October 6–7
- Prime Video, Amazon Music and more included
The European Supervisory Authorities identified reliance on non-EU providers, cyber risks tied to emerging technology and private credit as vulnerabilities in their Autumn 2026 risk update. They said the EU financial system remains resilient, while urging supervisors and market participants to strengthen preparedness and monitor these risks closely.
The European Supervisory Authorities have flagged reliance on non-EU providers, cyber threats linked to emerging technologies and risks from growing private credit in their Autumn 2026 assessment of the EU financial system. The EBA, EIOPA and ESMA said the system remains resilient, but called on supervisors and market participants to strengthen preparedness and monitor these vulnerabilities.
The authorities said dependence on ICT providers outside the European Economic Area and on non-EU financial infrastructure could expose the sector to geopolitical shocks and operational disruptions. They also pointed to reliance on non-EU payment systems and the role of non-EU entities in clearing, repo and credit ratings markets. Such ties can provide diversification, but also create market, counterparty and concentration risks.
The update identified cyber and fraud risks as major sources of operational concern. The ESAs said increasingly capable AI systems could help malicious actors find and exploit vulnerabilities more quickly, while concentrated reliance on external providers could heighten exposure. They also noted potential risks for cyber insurers if AI-enabled attacks become more frequent or severe; policy exclusions could limit some effects.
Private credit remains relatively small in the EU, according to the authorities, but is growing quickly. They cited limited transparency and stronger links with the wider financial system as possible sources of vulnerability during periods of market stress. The report did not quantify those exposures in the supplied findings.
Where External Reliance Creates Exposure
Dependencies can transmit disruption across borders and institutions. If geopolitical tensions affect a key non-EU provider or infrastructure, EU firms may face operational problems even when their direct investments in a conflict-affected region are limited. The ESAs also said indirect effects could reach borrowers and funding conditions, with potential consequences for asset quality and credit demand.
The concerns sit alongside a broadly positive account of current resilience. The authorities reported strong bank profitability and capital ratios, low non-performing loans, and resilient investment funds. Still, they expect asset quality to weaken in some portfolios, particularly commercial real estate and small and medium-sized enterprises. For private credit, limited transparency may make vulnerabilities harder to assess during stress, while links to other parts of finance could extend the effects.
Resilience Amid Market Volatility
The findings were presented as input from the ESAs at the Financial Stability Table of the EU Economic and Financial Committee on 10 September 2026. The update described markets as resilient through volatility linked to geopolitical tensions, energy-price fluctuations and continued crypto-asset volatility. EU equities reached record highs during the period, while bond yields rose and spread widening remained limited.
The authorities said insurers’ and pension funds’ fundamentals remained strong, with capital and funding positions improving. They warned that more frequent natural catastrophes could widen protection gaps. Banks were described as well capitalised and profitable, though the report pointed to potential deterioration in some loan portfolios and funding gaps in certain non-EU currencies, mainly the US dollar, pound sterling and Swiss franc.
On technology, the update also discussed quantum computing. The ESAs said it could improve financial processes, fraud and compliance monitoring, and pricing, while potentially threatening cryptographic systems used to secure communications, transactions, databases and blockchains.
“The EU financial system has remained resilient.”
— European Supervisory Authorities
Scale of Potential Spillovers
The supplied findings do not quantify the EU sector’s total exposure to private credit or estimate losses under a stress scenario. They also do not specify which external providers or infrastructure would be most difficult to replace during a disruption. The extent to which advanced AI could increase the frequency or severity of attacks remains uncertain, as does the timing and practical effect of quantum computing on cryptography.
The authorities said direct bank exposures to regions affected by geopolitical tensions were limited, but did not quantify the possible scale of indirect effects. The report describes risks and vulnerabilities; it does not establish that a disruption or deterioration has occurred.
Monitoring and Preparedness Measures
The ESAs urged supervisors and market participants to improve preparedness and keep monitoring external dependencies, private credit and emerging technologies. The supplied material does not set out a specific deadline, new rule or follow-up milestone. Further detail on the authorities’ monitoring or any policy response was not included in the findings provided.
Key Questions
Which risks did the ESAs highlight?
They highlighted reliance on non-EU providers and infrastructure, cyber threats linked to emerging technology, and vulnerabilities associated with growing private credit.
Did the ESAs say the EU financial system is in crisis?
No. The authorities said the system remains resilient, citing strong fundamentals across banks, investment funds, insurers and pension funds while warning that risks remain.
Why are non-EU dependencies a concern?
The ESAs said dependence on providers and infrastructure outside the EU can increase exposure to geopolitical events, operational disruptions and cyber risks. These links may also create counterparty and concentration risks.
What did the update say about private credit?
Private credit remains relatively small in the EU, but the authorities said its rapid growth, limited transparency and increasing links with the wider financial system could create vulnerabilities during stress.
What happens next?
The ESAs called for supervisors and market participants to strengthen preparedness and continue monitoring the risks. The supplied update does not specify a new rule or timetable for further action.
Source: primary
Fall Picks
fall essentials
As an affiliate, we earn on qualifying purchases.
