Art. 23(1)

Ransomware causing the entity to lose access to mission-critical content meets the Art. 23(3)(a) significance threshold (severe operational disruption) and triggers Art. 23(1) reporting without undue delay.

Irreversible loss of data or executables on a spacecraft providing essential services causes severe operational disruption and meets Art. 23(3)(a); Art. 23(1) reporting (24h early warning, 72h notification) applies.

Sustained flooding causing severe operational disruption to the entity's services meets Art. 23(3)(a) and triggers Art. 23(1) reporting.

Confirmed mass exfiltration from a compromised ground system has cross-border impact (mission products distributed to multiple stakeholders) and meets the Art. 23(3) significance threshold; Art. 23(1) reporting (24h early warning, 72h notification) applies.

Compromise of partner infrastructure mirrors traffic across multiple operators simultaneously; the resulting cross-border, multi-mission impact is reportable under Art. 23(1).

Confirmed compromise of mission ground systems supporting essential services causes severe operational disruption per Art. 23(3)(a) and is reportable under Art. 23(1) without undue delay.

Confirmed misuse of legitimate command authority to alter spacecraft state from approved apertures is a significant incident with severe operational disruption potential; Art. 23(1) reporting applies.

Confirmed deception of mission decision-making is a significant compromise of the entity's operational integrity and is reportable under Art. 23(1) once detected.

Disruption causing severe operational impairment of the entity's services meets the Art. 23(3)(a) significance threshold and triggers the Art. 23(1) reporting regime.

Denial of access to the victim spacecraft is severe operational disruption per Art. 23(3)(a); Art. 23(1) reporting (24h early warning, 72h notification) applies.

Permanent partial/total subsystem impairment is severe operational disruption with potentially considerable financial loss; Art. 23(1) reporting applies under both Art. 23(3) significance criteria.

Loss of the spacecraft or major subsystem is a paradigmatic significant incident with cross-border impact (mission services frequently span Member States); Art. 23(1) notification applies.

Theft of mission-critical data affects natural or legal persons who depend on those products and meets the Art. 23(3)(b) significance criterion; Art. 23(1) notification is triggered.

Constellation-wide compromise affects services delivered across multiple Member States; the resulting cross-border impact is reportable under Art. 23(1).

Confirmed persistent compromise of mission ground systems supporting essential services causes severe operational disruption per Art. 23(3)(a); Art. 23(1) reporting (24h early warning, 72h notification) applies.

Confirmed compromise of mission, partner, or shared infrastructure that supports the provision of essential services is a significant incident; Art. 23(1) requires notification of the CSIRT/competent authority without undue delay.

Compromise of the mission's own ground system causes severe operational disruption to the provision of services, meeting the Art. 23(3) significance criteria and triggering the Art. 23(1) reporting regime.

Compromise of a shared third-party ground network potentially affects multiple operators across Member States; the resulting cross-border impact is reportable under Art. 23(1).