Mastercard leads Europe’s first cyber defence drill

Mastercard

Mastercard has launched the first European edition of its multi-sector CDX, bringing together financial and telecommunications leaders to test resilience against evolving cyber threats.

The event took place at the company’s European Cyber Resilience Centre in Waterloo, Belgium.

The immersive simulation gathered technical experts and executives from major institutions including BT Group, Deutsche Bank, ING, Proximus, and Santander. Participants engaged in a force-on-force, real-time exercise replicating complex cyberattacks. Red teams simulated offensive tactics—ranging from supply-chain compromise and DDoS attacks to credential theft and data exfiltration—while Blue teams collaborated to detect, triage, and neutralise the threats. Executive leaders managed crisis governance, regulatory response, and communications, testing their ability to determine whether an incident could escalate into a public crisis.

Public-sector partners and Information Sharing and Analysis Centres (ISACs) also joined the event, engaging in scenarios that reinforced collaboration and strategy. A cyber-themed escape room added an interactive layer designed to strengthen teamwork and cross-functional problem-solving under pressure.

The initiative comes amid rising cyber risks across Europe. Mastercard’s recent research revealed that 25% of small business owners on the continent have experienced cyber scams, with some fearing closure due to financial and reputational damage. Consumers also expressed heightened concern, with 72% saying they worry more about cybersecurity risks than they did two years ago. Meanwhile, 71% of Europeans trust banks, and 61% trust credit card companies more than government institutions to protect them from fraud.

The exercise was supported by technology partners including Dell Technologies, Fortinet, Intel, World Wide Technology (WWT), and Immersive Labs—demonstrating the power of cross-sector collaboration to strengthen defences. Mastercard said CDX aims to create scalable models for cyber cooperation that can be deployed globally.

Mastercard chief security officer Michael Lashlee said, “Cyber threats don’t respect borders or sectors. Our priority is working together with partners across Europe to respond when seconds matter—sharing intelligence faster, making smarter decisions and safeguarding people and businesses. CDX is about deepening collaboration, strengthening trust, and building resilience for Europe to stay protected.”

BT Group cyber security operations and intelligence director Rich Eyre said: “Secure telecommunications are the backbone of our modern society. They enable seamless communication, foster innovation, and ensure the safety and security of our customers. At BT Group, we are committed to protecting these vital connections to keep our customers and society safe. By partnering with like-minded organisations, we can pool our expertise to combat threats more effectively, ensuring a safer future for everyone.”

Deutsche Bank chief security officer Brent Phillips said: “It’s critical that we remain vigilant against the many threats that exist to information security. By working together with peers and coordinating our responses, we can greatly enhance our ability to prevent and respond to potential cyber-attacks. Information security remains a moving target and exercises such as this help to ensure that we too keep moving.”

ING global CISO Debbie Janeczek said: “Cyber threats don’t respect borders, and neither should our response. At ING, we’re all about staying one step ahead. Therefore, cyber security is a vital part of our corporate strategy. Participating in joint incident response exercises with other leading European organisations strengthens our collective resilience, fosters trust, and ensures we’re prepared to act swiftly and collaboratively when it matters most.”

Proximus chief information security officer Fabrice Clément said: “At Proximus, we see cybersecurity as a societal responsibility. Our role as a trusted digital partner means protecting the digital infrastructure that people, businesses, and public services rely on every day. CDX is a valuable opportunity to strengthen our collective resilience, transcending borders and sectors, and to enhance our preparedness in the face of evolving threats. By partnering with organisations that share our vision for a safe digital future, we reaffirm our commitment to building trust and creating a secure and resilient digital society.”

Banco Santander global chief information security officer for cybersecurity and fraud prevention Hazel Díez said: “As a global financial institution, anticipating cyber risks is essential to protecting our customers, markets and society at large. At Santander, we are committed to working with peers, strengthening our defences and responding swiftly to ensure resilience and trust remain at the core of what we do. CDX 2025 was a great opportunity to test and strengthen Europe’s cross-sector collaboration.”

Keep up with all the latest RegTech news here

Copyright © 2025 RegTech Analyst

Enjoyed the story? 

Subscribe to our weekly RegTech newsletter and get the latest industry news & research

Copyright © 2018 RegTech Analyst

Investors

The following investor(s) were tagged in this article.