DDoS Attack Hits Adyen, Causing Transaction Failures in EU

Summary: Adyen was targeted by a Distributed-Denial-of-Service (DDoS) attack on April 21, 2025, causing significant service disruptions for customers across Europe. The attack, which began in the evening and lasted nearly nine hours, affected various payment services, resulting in transaction failures and delays. Adyen’s response team implemented immediate mitigation measures but faced challenges due to the evolving nature of the attack.

Affected: Adyen

Keypoints :

• The DDoS attack peaked with millions of requests per minute, overwhelming Adyen’s infrastructure components.
• Services affected included E-commerce and In-Person Payment Transaction processing, along with other key functions like the Customer Area and Transfer API.
• Adyen’s response involved activating anti-DDoS protections, scaling defenses, and deploying filtering rules, but some services remained degraded for several hours.
• Adyen committed to transparency, promising to share findings from their post-incident review to improve future resilience against attacks.