European Union Emission Trading Scheme - 28 Million Euro Cyberfraud

28 Million Euro Cyberfraud

On 19 January 2011, the EU emissions spot market for pollution permits was closed after computer hackers stole 28 to 30 million euros ($41.12 million) worth of emissions allowances from the national registries of several European countries within a few day time period. The Czech Registry for Emissions Trading was especially hard hit with 7 million euros worth of allowances stolen by hackers from Austria, the Czech Republic, Greece, Estonia, and Poland. A phishing scam is suspected to have enabled hackers to log into unsuspecting companies' carbon credit accounts and transfer the allowances to themselves, allowing them to then be sold.

The European Commission said it would "proceed to determine together with national authorities what minimum security measures need to be put in place before the suspension of a registry can be lifted". Maria Kokkonen, EC spokeswoman for climate issues, said that national registries can be reopened once sufficient security measures have been enacted and member countries submit to the EC a report of their IT security protocol.

The Czech registry said there are still legal and administrative hurdles to be overcome and Jiri Stastny, chairman of OTE AS, the Czech registry operator, said that until there is recourse for victims of such theft, and a system is in place to return allowances to their rightful owners, the Czech registry will remain closed. Registry officials in Germany and Estonia have confirmed they have located 610,000 allowances stolen from the Czech registry, according to Mr. Stastny. Another 500,000 of the stolen Czech allowances are thought to be in accounts in the UK, according to the OTE.

The security breaches raised fears among some traders that they might have unknowingly purchased stolen allowances which they might later have to forfeit. The ETS experienced a previous phishing scam in 2010 which caused 13 European markets to shut down, and criminals cleared 5 million euros in another cross-border fraud in 2008 and 2009.