Germany’s BaFin Warns AI and Quantum Computing Are Raising Financial-Sector Cyber Risks

Germany’s Federal Financial Supervisory Authority, BaFin, said AI and quantum computing are shortening the time attackers need to discover, weaponize and exploit cybersecurity vulnerabilities, putting greater pressure on financial institutions’ existing patching processes. The issue affects the continuity of critical banking services as well as compliance and risk management under the EU’s Digital Operational Resilience Act (DORA).

BaFin recently said Anthropic’s Mythos model had drawn intense attention from the banking industry, warning that AI and quantum technologies could enable faster exploitation of vulnerabilities. The regulator has instructed firms to shorten patching timelines and plans to step up targeted IT inspections to assess financial institutions’ compliance with DORA, which has applied since January 17, 2025. The warning did not involve any specific monetary amount.