EDINBURGH, UK – FOR RELEASE ON 9TH APRIL 2019

ATM Physical Attacks in Europe on the increase

The European Association for Secure Transactions (EAST) has just published a European Payment
Terminal Crime Report covering 2018 which reports that ATM physical attacks have risen for the fourth
consecutive year.

ATM related physical attacks rose 27% when compared with 2017 (up from 3,584 to 4,549 incidents). Within this
total ATM explosive attacks (including explosive gas and solid explosive attacks) were down 3% (down from 1,081
to 1,052 incidents). Explosive attacks remain a cause for concern as the number of countries reporting them has
risen from ten in 2017 to eleven in 2018. Such attacks result in extensive collateral damage and can pose a risk to
life.
Losses due to ATM related physical attacks were €36 million, a 16% increase from the €31 million reported during
2017. The average cash loss per explosive or gas attack is estimated at €17,103, the average cash loss for a
robbery is estimated at €13,682 per incident and the average cash loss for a ram raid or burglary attack is estimated
at €13,198. These figures do not take into account collateral damage to equipment or buildings, which can be
significant and often exceeds the value of the cash lost in successful attacks.
EAST Executive Director Lachlan Gunn said, "The success rate for solid explosive attacks is of particular concern –
we estimate that the average cash loss per solid explosive attack is €27,065. Such attacks continue to spread
geographically with two countries reporting them for the first time in early 2019. Our Expert Group on ATM and ATS
Physical Attacks (EGAP) is actively monitoring the situation and provides a cross-border platform for the industry
and law enforcement to share related intelligence and measures that can be taken to mitigate the risks.”
Payment terminal related fraud attacks fell 36% when compared with 2017 (down from 20,971 to 13,511 incidents).
This fall was mainly driven by a 26% decrease in card skimming incidents (down from 2,556 to 1,883 incidents) and
by a 66% fall in transaction reversal fraud incidents (down from 14,098 to 4,843 incidents).
Losses due to payment terminal related fraud attacks fell 30% when compared with 2017 (down from €353 million to
€247 million). Within these totals international skimming losses fell by 27% (down from €280 million to €205 million)
and domestic skimming losses were down 44% (from €64 million to €36 million).
A total of 157 ATM malware and logical attacks were reported, down from 192 in 2017, an 18% decrease. 156 of
the attacks were logical attacks where equipment typically referred to as a 'black box' is used to send dispense
commands directly to the ATM cash dispenser in order to cash-out the ATM. Related losses were down 70%, from
€1.52 million to €0.45 million.
A summary of the report statistics under the main headings is in the table below. The full report, with breakdowns
for each crime category, is available to EAST members and subscribers.

EUROPEAN PAYMENT TERMINAL CRIME STATISTICS - SUMMARY

Terminal Related Fraud Attacks 2014 2015 2016 2017 2018 % +/- 17/18
Total reported Incidents 15,702 18,738 23,588 20,971 13,511 -36%
Total reported losses €280m €327m €332m €353m €247m -30%%
ATM Related Physical Attacks 2014 2015 2016 2017 2018 % +/- 17/18
Total reported Incidents 1,980 2,657 2,974 3,584 4,549 +27%
Total reported losses €27m €49m €49m €31m €36m +16%
ATM Malware & Logical Attacks 2014 2015 2016 2017 2018 % +/- 17/18
Total reported Incidents 51 15 58 192 157 -18%%
Total reported losses €1.2m €0.74m €0.46m €1.52m €0.45m -70%

ENDS

(Background data on the Fraud Update & EAST follow)

For further information and a PDF copy of the Fraud Update (Media only) please contact the EAST Executive
Director, Lachlan Gunn: Email coordinator@eas-team.eu Tel: + 44 131 5100268

Page 1 of 2 Pages
EUROPEAN PAYMENT TERMINAL CRIME REPORT - Period: January to December 2018

The above release is based on a report prepared twice-yearly by EAST to provide an overview of the European
payment terminal crime situation for EAST National Members and EAST Associate Members (including Law
Enforcement Agencies), using statistics provided from 21 European states. The following countries, with an
estimated total installed base of 360,714 ATMs, supplied full or partial information for this report:
Austria; Belgium; Cyprus; Czech Republic; Denmark; Finland; France; Germany; Greece; Ireland; Italy;
Liechtenstein; Luxembourg; Netherlands; Norway; Portugal; Romania; Spain; Sweden; Switzerland;
United Kingdom.
EAST intends to obtain such information from all 28 European Union states as well as from Iceland, Liechtenstein,
Norway, and Switzerland.

EAST has taken reasonable measures to develop the Report this press release is based on and to report in a fair,
reasonable, open, and objective manner. However, EAST makes no claims, promises, or guarantees about the
completeness of the underlying data. In addition, as the information in the report has been passed to EAST by
other parties, errors or mistakes may exist or be discovered. Neither EAST nor its members, authors, or agents
shall be liable for any loss, damage, or claim with respect to any such information being provided. All such
liabilities, including direct, special, indirect, or consequential damages, are expressly disclaimed and excluded.

ABOUT EAST

Founded in February 2004 as the European ATM Security Team, EAST became the European Association for
Secure Transactions in June 2017. EAST is a ‘non-profit’ organisation whose National Members are committed to
gathering and collating information on both Terminal and Payment security within their countries/regions, and
sharing it with EAST Members and Law Enforcement Agencies.

EAST has set up a framework network structure to improve co-operation with industry, law enforcement, and in
particular Europol, in order to achieve awareness and better results in the fight against organized cross-border
crime. EAST National Members represent 35 countries.

The EAST Expert Group on All Terminal Fraud (EGAF), formed in May 2013, provides a specialist expert forum for
discussion of terminal related fraud trends, fraud methodologies and counter-measures. Through a system of Fraud
Alerts EAST EGAF is able to communicate important and timely information to its National and Associate Members.

The EAST Expert Group on ATM and ATS Physical Attacks (EGAP), formed in May 2014, provides a specialist
expert forum for discussion of related physical attack trends, attack methodologies and counter-measures. Through
a system of Physical Attack Alerts EAST EGAP is able to communicate important and timely information to its
National and Associate Members.

The EAST Payments Task Force (EPTF), launched in January 2016, provides a European specialist forum for
discussion of security issues affecting payments and transactions and for the gathering, collation and dissemination
of related information, trends and general statistics. Through a system of Payment Alerts the EPTF is able to
communicate important and timely information to EAST National and Associate Members.

For more information on EAST visit https://www.association-secure-transactions.eu/

https://www.linkedin.com/company/europeanassociationforsecuretransactions/ http://www.facebook.com/EASTatm /

Page 2 of 2 Pages